This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File:                     K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier:          1HCymejsjiC0sKVN6vK+Zf9kY4Y0G8ieSokykdZDfJg=
Subject key identifier:   AD:98:3F:C7:5F:82:FE:49:B9:07:7E:2F:3A:C7:BF:29:5E:E8:E4:C1
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer:       /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial:       019BF3BDFC7DF5BDB6D4BAAF1D5ABB33C126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number:          0168
Signing time:             Sun 25 Jan 2026 06:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:12 +0000
Files and hashes:         1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: FueRE53QeUxk/sXOFmxLN2BCpHkX+GrQv8RHesDuctg=)
                          2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
                          3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
                          4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:fc:7d:f5:bd:b6:d4:ba:af:1d:5a:bb:33:c1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
        Validity
            Not Before: Jan 25 06:01:12 2026 GMT
            Not After : Jan 26 06:01:12 2026 GMT
        Subject: CN=ad983fc75f82fe49b9077e2f3ac7bf295ee8e4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:38:39:20:44:de:d7:38:61:60:c6:4f:32:
                    e3:3b:d2:93:e6:d1:0c:48:bd:87:58:96:94:07:f9:
                    8c:16:b3:bc:1a:a8:a8:34:59:0a:a1:34:b4:a7:89:
                    74:9f:7f:1a:51:8d:55:50:31:fe:49:91:bf:fe:61:
                    d0:b1:0f:d3:4f:87:56:8e:44:0c:86:39:59:0f:10:
                    47:c1:a0:ac:4c:ac:cb:26:4a:3e:26:2a:42:90:c6:
                    1a:54:9b:1a:fb:5d:73:36:94:6b:f2:53:73:1a:4f:
                    a4:90:2f:b4:88:6b:87:f3:c9:fb:5f:a8:94:2a:37:
                    44:98:46:2e:5f:0c:91:90:50:e2:58:e8:58:db:75:
                    69:49:0b:fc:75:1b:d1:ab:56:ca:9a:cc:e6:00:ee:
                    7f:73:a0:9c:99:c4:7a:fe:51:77:72:68:fe:7f:b5:
                    cd:6f:2d:d5:21:13:11:73:d0:21:29:1e:21:a8:24:
                    5e:32:fb:a3:87:86:cc:49:ce:7c:64:46:a6:dc:fc:
                    32:e5:f1:5f:4c:41:00:32:b1:3a:19:cf:7e:8f:a8:
                    3a:52:f3:03:a7:c7:9f:0e:b3:46:42:7f:c4:72:87:
                    14:c5:99:36:7f:15:9f:4b:b9:ee:2a:6e:b1:f9:46:
                    f5:b3:1d:48:62:12:c7:b8:b0:be:be:80:8d:c6:1a:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:3F:C7:5F:82:FE:49:B9:07:7E:2F:3A:C7:BF:29:5E:E8:E4:C1
            X509v3 Authority Key Identifier:
                keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3e:42:45:7f:10:d0:f9:9e:52:25:68:85:a8:a3:41:e4:2a:
         dd:cb:eb:4d:40:de:ba:03:f7:78:e8:c2:64:0c:1a:e8:bc:c0:
         76:2c:51:1b:89:81:60:64:cb:2e:9c:5d:cd:f3:c8:98:08:1c:
         de:f4:3c:b4:0d:b6:2d:d6:6c:2c:e3:3d:81:0c:bd:e8:d1:57:
         59:70:fe:ca:ea:9c:01:37:2a:5d:cd:bb:17:be:b2:df:a1:1b:
         1c:5c:fd:6f:ce:d6:e0:37:db:17:07:ba:c3:41:bd:14:69:71:
         08:3c:09:15:8b:27:89:5f:fd:8e:99:92:50:32:0b:c4:16:30:
         1a:d6:ea:04:53:dc:db:95:93:ea:ec:22:92:8a:bb:05:e7:24:
         98:59:30:03:1e:b7:22:56:c9:46:d6:06:b9:81:e7:8e:8e:a4:
         c2:90:cc:80:59:8b:17:3d:af:96:e1:09:27:59:13:1d:b6:a8:
         07:1e:b5:a7:f1:6e:ba:e9:20:49:7f:74:e7:27:18:58:53:81:
         b9:3d:f0:03:50:2d:08:2e:b5:bf:8c:de:60:b4:eb:5e:4c:cd:
         52:ab:b3:ea:a6:8f:1b:72:0d:bb:a3:10:ca:26:65:f7:48:7c:
         e2:44:70:cb:06:1a:79:c0:38:8c:d8:99:44:01:9e:fa:1b:f3:
         50:8a:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:59:12 2026 by rpki-client