This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File:                     RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier:          d53fUWcUnkjW7gxI5u2FuMV3DdXTw3gFaqduiYYm7O0=
Subject key identifier:   21:5F:2F:36:8C:EE:B7:00:29:2C:F3:03:01:ED:91:9C:1D:EC:B1:DB
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer:       /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial:       019BF499439E1AEAD18450EBBD6EBCD88E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number:          0C52
Signing time:             Sun 25 Jan 2026 10:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:43 +0000
Files and hashes:         1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
                          2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: zn7UGvVT04iapb+cGj6bz/lxdFqIEOyjfxFkiNQfQ+8=)
                          3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:43:9e:1a:ea:d1:84:50:eb:bd:6e:bc:d8:8e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
        Validity
            Not Before: Jan 25 10:00:43 2026 GMT
            Not After : Jan 26 10:00:43 2026 GMT
        Subject: CN=215f2f368ceeb700292cf30301ed919c1decb1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:ac:6e:2a:f3:f2:d4:5e:d5:03:17:af:9d:
                    fb:7a:e1:ca:a8:8d:b4:4c:8b:26:9b:ab:3c:8b:93:
                    e1:a3:91:61:3d:b4:7b:47:e0:a5:1f:2a:52:21:9c:
                    fc:bf:e7:b7:40:fc:9b:e6:88:4a:4f:cd:51:8f:08:
                    2c:4a:d3:e8:c6:b4:fa:84:b3:f0:6e:df:f0:31:9b:
                    3b:1a:c2:46:bc:3f:50:b4:a6:95:df:a7:9c:f8:63:
                    f9:e5:4b:23:b8:e5:f5:fa:51:51:7f:da:cb:b8:77:
                    0d:e8:77:18:f1:a1:9f:3d:54:02:e3:f8:0c:f3:49:
                    47:89:47:a7:05:93:64:b7:96:36:95:26:6f:0f:01:
                    7f:4d:57:05:7d:ce:59:c2:d5:a0:0b:be:65:a0:41:
                    90:a6:ae:1d:97:80:cb:ae:3a:33:e9:ba:ca:7f:10:
                    ec:42:41:dd:cc:62:a5:05:59:07:81:03:39:72:bb:
                    3e:0b:84:aa:bb:e4:74:4e:18:55:13:f3:46:41:52:
                    94:b1:82:f4:03:74:ee:26:40:b8:16:70:cb:68:9d:
                    8d:09:6d:66:8a:f9:86:c7:7d:a2:a8:c5:71:b2:74:
                    fc:55:0e:70:47:d9:9d:a4:c0:e0:5a:9e:0b:cb:76:
                    07:a1:83:d7:2c:3e:a3:7b:f7:61:d5:ef:d8:bf:b3:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5F:2F:36:8C:EE:B7:00:29:2C:F3:03:01:ED:91:9C:1D:EC:B1:DB
            X509v3 Authority Key Identifier:
                keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:7e:f4:3f:4c:a0:a0:e5:17:c4:23:52:c1:9f:c6:07:9e:
         9a:a2:c9:4f:0e:de:11:91:02:42:ac:99:e0:68:89:0e:81:b4:
         64:f8:52:51:80:1f:aa:0c:fc:ea:77:1a:fe:18:04:83:20:b1:
         39:f6:e9:bd:9b:7f:38:da:00:1e:47:aa:98:ff:1a:3e:bb:08:
         3c:10:27:b5:24:e4:1e:68:30:36:9e:c0:ee:6a:fb:c1:1e:63:
         1d:fc:32:8b:de:05:3a:b4:30:c8:e9:f6:fe:91:24:90:4c:40:
         9c:f5:a6:51:4c:18:91:56:a0:75:67:1d:be:6b:e0:dc:7e:88:
         f9:49:2a:10:fb:cc:36:4c:15:45:00:23:d7:5d:a3:7d:00:c5:
         4b:02:ce:f1:97:5b:68:f6:58:8b:bf:d0:7a:a3:5a:41:d7:f1:
         5c:64:21:6f:ca:35:fc:72:ec:a2:4d:3f:0b:0e:a6:93:48:75:
         26:76:95:ae:f5:5b:11:ac:bb:41:03:cc:50:b0:67:b4:2e:48:
         b7:12:19:b1:07:26:b5:7d:12:5a:7a:49:22:f3:25:b2:cd:43:
         5e:31:52:95:04:84:05:e2:a9:8f:e4:b2:a1:99:73:75:68:12:
         7e:05:f4:7c:d0:de:93:f2:49:17:8d:75:7a:95:ac:b8:15:7e:
         42:6f:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:24 2026 by rpki-client