This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File:                     53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier:          Gw2neixzTKGGP8kSCcQOe9D/OS6Alq1FFfIkrPnuCLA=
Subject key identifier:   39:38:CB:E7:15:80:87:71:1C:33:F7:14:CC:AD:22:90:27:0F:6E:E8
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer:       /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial:       019BFA2D67828D6D344E4A89775E2EAE4B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number:          03FE
Signing time:             Mon 26 Jan 2026 12:00:38 +0000
Manifest this update:     Mon 26 Jan 2026 12:00:38 +0000
Manifest next update:     Tue 27 Jan 2026 12:00:38 +0000
Files and hashes:         1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: rQQ+AZlYctdJkghUV9sKOog9C9m227angZ9LO+Wns7Q=)
                          2: TQEZqwqBvL5LSKJlBpz9ZlwxI2k.roa (hash: h28Y5SLCkXSu2nNw0njBdHdQWxez9aqEeYAyLE+jLNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:67:82:8d:6d:34:4e:4a:89:77:5e:2e:ae:4b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
        Validity
            Not Before: Jan 26 12:00:38 2026 GMT
            Not After : Jan 27 12:00:38 2026 GMT
        Subject: CN=3938cbe7158087711c33f714ccad2290270f6ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:57:e2:f9:1d:7a:d0:6a:61:0e:d2:80:59:
                    24:11:01:6f:6d:f3:0f:3d:59:c4:c1:b4:a3:1a:db:
                    82:18:d9:47:04:7a:c2:a8:17:c3:ae:ce:6c:6a:0a:
                    20:6e:2e:99:b1:2d:f4:91:ce:13:e3:02:43:1d:47:
                    8b:58:1c:9b:6e:e9:01:58:eb:04:c4:6d:89:ab:c3:
                    7a:87:c2:67:52:58:96:a9:ce:d2:60:a0:15:d8:12:
                    fd:d9:39:2c:13:81:3b:ba:f3:5b:dd:90:0d:60:02:
                    4e:7c:1f:42:b9:44:79:ff:85:98:0a:35:bf:f3:1a:
                    77:08:74:71:32:f1:a8:79:54:ea:60:0f:dd:44:05:
                    ca:cd:78:af:f2:5a:eb:8e:e5:22:fa:2d:71:3a:3f:
                    eb:2d:95:21:31:dd:2c:e2:15:ce:9c:46:38:c1:cd:
                    b7:0d:bf:ce:e3:f8:ee:c2:62:73:46:9a:17:89:59:
                    97:66:17:e3:87:16:cc:11:f8:15:ba:be:41:c7:9c:
                    66:50:60:75:68:cf:64:52:7c:61:0e:74:65:d1:d6:
                    54:d1:61:cb:ef:14:df:8d:f5:1e:47:01:35:00:46:
                    f4:c4:2c:77:6f:e6:ae:08:28:35:f6:1e:cf:73:84:
                    2d:e0:7c:32:e7:5d:8e:6d:0c:56:f4:68:0f:14:0d:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:38:CB:E7:15:80:87:71:1C:33:F7:14:CC:AD:22:90:27:0F:6E:E8
            X509v3 Authority Key Identifier:
                keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:93:4f:00:5a:93:77:26:3e:e9:22:9f:42:66:f0:f9:3b:3b:
         66:1f:77:ab:7a:f2:98:6e:49:54:46:a5:cb:aa:9e:16:31:7b:
         4b:bc:02:1f:ca:08:f5:7d:f9:ee:fd:22:c2:d7:f5:88:04:12:
         85:f4:e5:ee:49:e5:19:10:b4:af:9c:b8:45:ed:b3:b6:df:e8:
         68:29:82:0a:60:36:6f:d6:7e:35:13:9e:cb:f3:5d:3d:79:42:
         cc:7f:73:bc:b3:da:8b:50:55:6c:2e:19:5e:f3:8b:71:20:02:
         90:c1:09:dd:f2:f4:3c:19:9b:74:75:a3:39:54:0d:00:dd:39:
         14:31:27:3b:14:b2:d2:46:77:7e:26:0b:24:27:2d:94:e5:1a:
         79:14:b7:bd:d4:8a:73:92:c6:98:24:cb:a3:48:9f:68:31:77:
         80:52:a6:19:e3:34:6d:e3:2b:8b:3e:9a:ee:8d:05:34:1a:3e:
         59:6d:8b:b5:4b:0b:80:7f:0a:25:5e:61:27:48:3b:c1:b3:90:
         31:b7:95:9f:d6:df:3b:1c:de:09:ff:00:9f:52:22:c1:43:8d:
         37:bc:1c:4f:2f:91:20:01:a8:87:96:53:c0:8c:07:52:20:26:
         71:d0:7e:f9:90:ab:60:c0:93:d4:95:f3:2e:4b:8b:6c:1f:b4:
         6a:1d:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:05:29 2026 by rpki-client