This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          eCa0auEIfvdYkZFbUxNILMWSiz/0LmfisxLUdbKuPR0=
Subject key identifier:   0C:7D:5F:69:A3:17:5F:19:C0:99:0A:F9:03:A7:B5:07:92:1A:B5:C1
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       019BF42BBBF99AEE339D9160FCEDA2E0FBD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          1435
Signing time:             Sun 25 Jan 2026 08:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:05 +0000
Files and hashes:         1: 0Q84qOO4ry7FkxPcizoEKZ6DKC8.roa (hash: tXRjTxM4LPMCnq48NDLgFh3fKsng+M+yxheQCDwbdAY=)
                          2: 8TnB_Z89mvNE4vBXTZiFEl23tYE.roa (hash: 2ClpJ+kajbpfZOtIDtzImmEyyO+3DqegmuU+x4tETNI=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: 3fJSUD8ELk9ost1YjUAdb9fTxvoxW/CafQnMifVWUGA=)
                          4: LZPVWazUJHKsVwXB0Q5QFOX_U4I.roa (hash: e8wyE9wUQVdgZv92jtZNgewyht9dy7i4a6DuplyRPmE=)
                          5: MND_dKAKKJnBQ5YOgdUUordUHkc.roa (hash: sZmYkAqh1xIbLU4926/2tbMnM7Gkt1Cig6oktdNYObA=)
                          6: _LkpRRARlMX2HSdxwIO5dOZICSc.roa (hash: J2+f3Tq3pA1xUwTt3sMx5nZNmV2E6UloLE/wFxA+mpU=)
                          7: yw4JQH3GwSpr0HqMrPTktCoX9Yc.roa (hash: C5hf4s/QdWtojHyCQ9hOA8bfaE8MjslJ2kdsyGmhhwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:bb:f9:9a:ee:33:9d:91:60:fc:ed:a2:e0:fb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Jan 25 08:01:05 2026 GMT
            Not After : Jan 26 08:01:05 2026 GMT
        Subject: CN=0c7d5f69a3175f19c0990af903a7b507921ab5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:4b:5a:d6:d7:db:5d:a6:a5:e6:77:71:f7:
                    d5:82:29:cd:74:f0:93:08:a7:aa:b0:6f:63:66:d9:
                    74:c0:8a:57:92:7a:95:25:a6:d2:78:81:7f:6a:76:
                    8c:7c:03:e5:f7:eb:56:ef:ce:6b:44:26:1a:60:79:
                    82:d2:fb:b0:7b:82:b9:85:7c:09:b5:70:0b:b5:2e:
                    b9:50:67:fc:ab:eb:07:6b:04:f0:d9:69:88:a8:e9:
                    99:67:73:eb:70:04:16:f7:65:33:b4:92:73:92:5a:
                    13:85:d9:cd:8f:e4:a4:b3:b5:ee:2a:a4:eb:0e:b3:
                    b0:45:b1:3e:4f:ae:b9:bf:3b:a0:d1:b5:6f:4c:91:
                    8a:e2:12:44:3e:4c:fc:26:c3:c2:6b:7e:e6:8c:67:
                    da:2d:45:ba:95:12:c0:67:d7:ad:31:43:97:64:32:
                    1e:6b:a9:52:86:34:28:9e:a7:b8:5a:36:26:74:4a:
                    3c:94:12:85:fc:5f:a6:10:cd:9a:0a:7e:a9:1f:df:
                    fc:3b:c7:26:94:a3:2a:9a:82:2a:5e:76:5d:a8:bf:
                    1f:67:98:56:70:1c:f6:46:1d:66:29:1f:e4:21:3a:
                    e0:9e:78:a5:56:05:1d:df:36:14:77:1a:de:fa:d9:
                    03:15:9e:b5:7c:85:a9:f9:64:0c:be:3a:7e:25:15:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7D:5F:69:A3:17:5F:19:C0:99:0A:F9:03:A7:B5:07:92:1A:B5:C1
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:98:90:f3:19:ab:26:77:c5:fe:40:9e:ce:47:71:73:76:
         fb:5b:a9:64:3d:46:e8:ab:c0:8e:01:ca:d7:7c:8d:0a:ec:fb:
         49:e9:9c:99:b6:5e:59:28:9b:92:de:cc:5d:c2:ca:bc:02:f3:
         10:f2:a0:90:0b:8e:14:45:40:aa:bd:0c:35:4a:49:35:3d:0e:
         05:66:6e:89:17:af:e8:3c:7f:5d:c2:58:0d:58:d5:ee:17:71:
         0d:95:69:2f:44:b6:89:78:88:35:b1:55:af:be:c1:87:9d:f4:
         fb:71:38:64:08:b3:e8:36:89:ad:25:4a:af:1d:ec:db:a3:f1:
         63:5f:e0:c8:bc:dd:e4:3d:49:cf:f2:cf:fe:8f:9e:04:5e:a8:
         48:e6:c5:fa:45:20:85:7b:c5:03:27:02:da:59:22:9f:df:0c:
         cf:b5:6a:c7:1a:12:5c:d6:88:59:53:cc:43:65:06:c6:8e:00:
         2e:f4:e8:cf:3d:ff:8c:99:16:b6:04:93:6d:ec:36:5c:05:1c:
         91:4b:57:fb:b5:38:c0:a6:21:76:78:1f:52:d2:c3:52:4a:61:
         39:24:11:db:ad:06:14:30:62:58:d3:0c:6b:6d:e6:84:72:f9:
         23:2a:ed:2c:69:a3:04:ea:87:ab:4f:a4:8b:1a:97:ff:45:7c:
         84:5b:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:46:09 2026 by rpki-client