This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File:                     CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier:          B8hmPba/LXI/9TKGwAbroU7g+kkNMcXESzfDYpTM6io=
Subject key identifier:   7F:E2:48:76:E3:3F:39:66:20:24:A9:EA:F6:37:28:A8:9D:52:87:DC
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer:       /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial:       019BF83F76C195F4B614D56C315715DC682C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number:          0244
Signing time:             Mon 26 Jan 2026 03:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:07 +0000
Files and hashes:         1: 5Osfqcc7qX2SDgxGj1jXRIcgVi0.roa (hash: 9IUpayNc4cHMCExpEQCneCFfKtid6K9WyA/rVze7dHc=)
                          2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: H6Fz6WBYC22r9pqttj5910IUznibTMtwT/tPd9EHzP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:76:c1:95:f4:b6:14:d5:6c:31:57:15:dc:68:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
        Validity
            Not Before: Jan 26 03:01:07 2026 GMT
            Not After : Jan 27 03:01:07 2026 GMT
        Subject: CN=7fe24876e33f39662024a9eaf63728a89d5287dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:37:b3:da:82:a0:ad:71:61:fc:63:40:56:
                    eb:ba:98:53:97:1b:90:0c:a4:fe:a5:48:f4:bc:b2:
                    08:c0:e3:d2:19:82:f9:62:72:72:19:00:f1:59:7c:
                    c2:72:7f:89:07:e5:75:b6:aa:6b:bd:9e:c9:2d:70:
                    da:40:42:33:6a:88:82:98:49:21:f5:9e:7d:85:d8:
                    33:7f:a1:96:cd:eb:a5:34:7c:56:64:2a:12:af:f6:
                    d4:9f:4a:0c:6f:14:70:b6:ff:38:cb:ef:6b:10:57:
                    21:f5:ce:1c:6b:7a:27:2a:4c:d6:eb:35:30:1a:0e:
                    34:15:b3:6b:7d:50:03:31:84:d0:a6:68:ca:0a:36:
                    7a:84:db:0e:22:59:63:5f:ef:ff:00:94:fa:91:b4:
                    d8:a7:b7:55:9d:9f:06:60:56:83:34:ee:0d:1f:a6:
                    a5:58:43:ff:2e:ad:00:81:9b:e1:1f:7e:61:44:b2:
                    a5:7e:db:f1:de:d6:ed:e0:d9:c4:19:2d:25:01:b7:
                    4a:32:ef:8a:88:0d:9b:01:69:91:64:02:25:40:e6:
                    80:47:9d:36:ad:22:7c:e9:24:18:03:80:13:22:1a:
                    26:8e:30:a8:fd:e9:fb:18:98:90:93:7d:bc:f4:05:
                    8b:94:4e:41:7c:93:39:0a:00:65:1f:9e:b5:b7:40:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E2:48:76:E3:3F:39:66:20:24:A9:EA:F6:37:28:A8:9D:52:87:DC
            X509v3 Authority Key Identifier:
                keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:24:0b:f6:f5:a6:23:07:ae:f1:f3:b4:3d:2a:0a:77:27:
         ca:2c:4c:e0:e8:39:ee:3b:b2:15:7f:b7:52:23:ef:3c:44:57:
         51:8b:2d:67:51:ff:7e:94:1d:fc:c7:3e:b8:2a:fc:5c:46:bf:
         bf:83:e8:a2:bd:02:06:de:20:21:11:5e:3a:46:19:fb:c5:3d:
         3b:b4:3e:c9:9a:e4:1e:ca:67:e7:07:97:15:bb:02:ec:4e:4c:
         40:17:3d:32:de:f9:a8:1b:15:f9:04:bc:1f:e2:c9:18:5b:f2:
         50:66:fe:c8:ba:dd:d9:ce:20:46:f2:e5:0b:f4:48:e3:1f:c2:
         7d:ab:f5:24:2f:15:fd:38:e3:17:ed:72:0b:38:c9:c8:89:bd:
         7e:9b:2b:a4:f5:ae:45:f1:27:c6:cf:d7:a0:28:f6:18:29:2e:
         5d:1d:dc:87:87:be:cf:78:d7:ef:bd:e8:de:65:d3:f6:0f:cb:
         8f:43:12:01:17:ca:a4:d6:24:b4:e8:73:c1:04:53:8f:98:32:
         9b:68:e0:1a:83:13:7a:8d:f4:61:b9:32:a0:cb:18:c1:4c:b4:
         b8:4a:ef:45:d1:77:37:2f:d5:24:fd:06:e4:03:64:09:0d:b0:
         ce:ad:ff:55:59:16:89:ff:a7:50:02:44:45:ec:c9:3b:06:27:
         45:26:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:02:03 2026 by rpki-client