This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File:                     Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier:          ioa1nxC0bNbVO4FM2Jm8n9KlnEoc4uv5uJOruW2scLY=
Subject key identifier:   FD:4E:18:54:93:53:B6:0E:82:4A:F1:8E:62:D1:26:DB:9F:2D:2F:9A
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer:       /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial:       019BF3870B47602FE0748B83CFCD4FE52728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 05:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 05:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 05:01:12 +0000
Files and hashes:         1: 0K2pCDlU0pkDvqWKO7SJxoZ3lsI.roa (hash: Y26TNiFt+U9/ZCJnbcaya/o2zut2SxPMMS0KeeLWubY=)
                          2: 5bVrHFZm_9x7DsR30S7rosICdW0.roa (hash: TNCtAJMUf4J6FJnN+i2bTj70aWZ+c3ls9gu8xyrRaB4=)
                          3: 8hvOqdm8XRO6sXWDZkcaHc49vsM.roa (hash: rWJpUZIpb36Ggr6bjwKyRkuAjSB5QQdFYyzRQ+KUdsA=)
                          4: C2rTJrn29bEkMahaeaaXZVoboPA.roa (hash: iPL2pg7U2wMSWFmyo8NlAj6nvHtyk3JYQ7jWseyBhYs=)
                          5: DdWY2FB-Dk69fNol-4eYBe-DCK4.roa (hash: GsXI8hKrSWyG6b3agSzUUfjy30UrGZi/9F9DfHDLOzg=)
                          6: FXEme31L2W7KjDVDqu37hEKFe78.roa (hash: omRy5gYKlVoWEItXCmHX+rxLDaANZ2/4bfpF5i1mDS8=)
                          7: KSn1SI2kD3BF6NrlzSx96xvLCsg.roa (hash: qBeitn/EGWWGEdktzJewxufauf5bR7KJZG7tIPAcxMA=)
                          8: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: 0oHlTiAcggSuYSq0qoJVqVHiEpdYtu+YRxGcmHQWgSQ=)
                          9: _ylley7uO-q2SakQqri2IL9Vh_8.roa (hash: 1WOpzM1HXCxDoeeqL/oavgXUUoldzw84YoaeeKakTR4=)
                          10: jFu4mc1ghInOCjlwPyUNi4iGEiY.roa (hash: +WkrqpjmCVItXr76o/yN5Eo2ZUnTm663I8ttrocPvZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:87:0b:47:60:2f:e0:74:8b:83:cf:cd:4f:e5:27:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
        Validity
            Not Before: Jan 25 05:01:12 2026 GMT
            Not After : Jan 26 05:01:12 2026 GMT
        Subject: CN=fd4e18549353b60e824af18e62d126db9f2d2f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:82:c2:56:f5:e7:79:82:63:ae:39:e6:ad:
                    52:aa:34:d1:83:f8:70:5f:ee:8d:cf:de:da:d8:c6:
                    32:4f:d2:08:8e:b7:27:bf:7d:8a:89:26:4c:b9:e5:
                    8d:41:c0:78:66:39:68:43:bc:72:b0:26:32:03:67:
                    6c:4c:af:2e:9a:c3:6c:72:37:42:f6:ea:20:69:29:
                    78:e9:34:4d:dc:36:b3:79:66:46:cb:5d:e1:e5:18:
                    54:11:36:cc:2e:2f:a6:8f:d9:cc:b6:3c:b5:63:30:
                    32:0b:39:5a:57:72:01:2b:6a:0f:1b:cf:d4:67:57:
                    39:26:7e:d0:c3:59:8e:7e:16:5e:f4:b1:9e:ec:34:
                    eb:47:47:3d:2f:aa:1e:07:e9:54:49:fc:f1:60:ab:
                    c3:29:e9:f1:48:3c:64:05:67:26:4b:0f:73:e4:93:
                    fb:ec:ad:de:7a:a6:3f:22:56:6e:35:0b:68:d3:1f:
                    3a:91:8e:a6:de:7c:f0:a2:f8:21:86:08:6f:48:05:
                    d4:45:b2:49:ac:17:3e:80:5b:3b:cf:49:c2:21:cc:
                    b7:33:59:a7:bf:d3:cf:07:16:87:2a:7c:6a:4a:28:
                    c2:17:40:54:ce:5c:00:d3:f7:ee:4f:0e:73:0e:ec:
                    6f:e2:34:88:07:6f:93:30:e8:92:12:aa:2f:77:d6:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4E:18:54:93:53:B6:0E:82:4A:F1:8E:62:D1:26:DB:9F:2D:2F:9A
            X509v3 Authority Key Identifier:
                keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c4:de:40:ae:6f:44:18:7c:03:c9:21:93:1f:93:88:fc:ec:
         75:30:7a:1c:a8:87:73:6f:ec:da:5f:5c:85:66:e6:30:93:ab:
         b8:ff:84:a6:0e:dc:6b:a7:03:69:aa:57:6d:57:ac:89:a8:b8:
         06:17:b4:9d:ad:7b:e3:78:9a:f6:1b:23:8f:70:b5:49:86:4e:
         56:6f:75:38:b1:06:7f:cb:8d:57:69:5e:a6:ab:2e:a9:b4:f4:
         09:74:c9:b7:59:a9:bf:e4:32:f5:37:f1:60:62:42:b6:13:3c:
         95:84:49:18:eb:38:a4:27:e0:6f:2f:8a:e1:bf:ce:06:6f:88:
         ed:4f:2a:1c:95:20:3b:02:06:20:c8:3e:cd:92:67:4a:1f:9e:
         85:20:fb:d4:21:1a:6a:a8:bf:43:43:15:9d:11:74:63:f7:07:
         7f:94:53:93:1e:f7:42:5b:14:57:9d:e7:13:3c:fd:19:34:a1:
         4c:6f:0f:8f:50:b2:62:a4:a7:0c:dc:f2:ce:ac:50:5a:54:45:
         23:74:ba:ae:f0:f9:d0:90:47:c5:d9:2c:3f:41:36:03:86:02:
         a7:1a:53:be:41:ac:51:e4:e2:c1:d6:cb:b6:bc:63:18:41:35:
         8f:fe:d3:ec:d6:51:a7:65:9c:e3:f7:17:49:a3:7a:27:10:83:
         31:fd:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:52:36 2026 by rpki-client