This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File:                     91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier:          OrCYVZne/mhqt6WTA2Dya5sWvhFkaZa6qp29VnsO+Es=
Subject key identifier:   5E:E7:AC:B4:8B:29:F2:46:5E:8D:FE:1F:BC:19:66:5B:B1:6C:73:22
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer:       /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial:       019BF83F4C5426828E3F674AC9693B7C1F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number:          1370
Signing time:             Mon 26 Jan 2026 03:00:56 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:56 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:56 +0000
Files and hashes:         1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: S2FXkGBuaHJwUSZ2+R3fLIBumq+Tso51OxZDL8eRsyE=)
                          2: zzK4qCAtynNjDjZWUiRCQn5dpDk.roa (hash: E6+IdS0ezqI3UKO4kCUBOk2GF16tHu1sV21TlzMQxMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:4c:54:26:82:8e:3f:67:4a:c9:69:3b:7c:1f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
        Validity
            Not Before: Jan 26 03:00:56 2026 GMT
            Not After : Jan 27 03:00:56 2026 GMT
        Subject: CN=5ee7acb48b29f2465e8dfe1fbc19665bb16c7322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:c8:a3:ab:37:a7:81:f9:35:9f:af:7a:07:
                    39:e2:07:19:e4:70:65:96:54:de:f5:90:08:c5:59:
                    ee:65:c4:74:ae:c0:33:2b:36:05:39:e5:22:ed:11:
                    a9:42:ee:21:d3:a0:59:20:c7:24:31:6d:ac:e4:90:
                    aa:bf:81:ac:e4:eb:79:25:a8:48:dc:9f:8a:90:91:
                    d7:6d:46:55:3a:7a:45:8d:1e:54:07:f3:aa:88:06:
                    03:08:d5:7b:06:ed:1a:d9:df:73:c8:ee:5a:95:07:
                    8c:45:98:7e:07:72:cc:0e:a6:28:57:f0:4a:86:42:
                    c9:38:51:67:3a:dd:1f:b7:a1:71:dd:9a:73:03:20:
                    54:44:a2:7a:73:3f:67:a4:1a:3d:fa:a6:e9:6b:ae:
                    7a:fa:3a:4a:11:d2:a7:ba:10:9b:54:36:2a:33:ce:
                    d6:b7:e0:00:41:53:13:23:81:45:94:3b:9f:39:fd:
                    06:fb:21:4c:96:21:94:0a:77:4a:48:98:d8:26:6b:
                    79:2d:0e:90:70:b0:5c:44:db:9d:d9:06:95:19:83:
                    e1:24:19:99:22:62:2f:4d:a3:4c:d7:51:41:20:ed:
                    63:8c:32:6d:32:42:78:83:46:a3:2e:60:94:45:fc:
                    ef:52:4c:4e:e1:54:37:8f:43:9a:e5:b3:95:fa:64:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E7:AC:B4:8B:29:F2:46:5E:8D:FE:1F:BC:19:66:5B:B1:6C:73:22
            X509v3 Authority Key Identifier:
                keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d1:96:9c:7a:e0:37:43:6b:5a:6c:f2:58:13:52:90:d7:2e:
         2f:a5:3c:f2:73:50:e8:83:c0:f8:14:93:87:7b:98:53:0f:7c:
         bc:12:f4:28:28:2e:12:e6:a0:ec:22:4f:e8:e2:e4:06:19:3c:
         d0:21:7e:77:e4:61:c1:b1:01:0f:bf:e6:c6:96:d3:0f:39:4b:
         a6:ff:f7:64:bf:84:63:e7:92:48:4a:88:e4:7a:c9:a9:7f:19:
         fd:67:6c:8a:cf:96:d4:25:3c:3f:5d:fc:f9:d4:51:3c:ed:5f:
         12:0d:cd:31:89:c7:d9:2c:b0:3c:f6:20:1b:09:fb:8e:fa:ef:
         3c:ad:ac:6e:c8:77:fa:98:60:7c:3e:70:04:ea:26:89:79:ef:
         4d:34:15:3e:d0:96:69:08:2c:29:51:5d:0e:f0:55:3d:1b:09:
         9b:e5:8b:ef:99:4e:8a:cd:54:98:96:62:07:72:7b:d1:d5:e2:
         b8:61:bd:99:45:71:4b:e2:8f:f5:ce:9e:6a:11:26:3a:42:55:
         a8:3e:ee:c1:7f:f6:f4:2e:0a:cb:e5:cb:2d:b4:5c:78:f2:90:
         02:ca:f7:a8:03:7e:b6:55:78:b1:13:ba:5c:6d:e4:a5:0b:44:
         5a:a7:cd:65:2d:58:bb:27:fd:fa:fb:d8:9f:ce:a1:fa:09:1d:
         4f:94:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:56:40 2026 by rpki-client