This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File:                     5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier:          OIZKZFlESvrcSFB0iXbaK/YjL/Gij3sWfuWdADG93w0=
Subject key identifier:   01:75:D7:96:D4:8D:24:D7:B1:D2:7C:55:71:E8:67:83:20:FB:27:D2
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer:       /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial:       019BF651A5C2D018A74D9305640CE7B1B9C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 18:01:44 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:44 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:44 +0000
Files and hashes:         1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: CVlVDRMe/debasolMG22RP8OrMge/ZSFcGcWv4J9EYo=)
                          2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
                          3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:a5:c2:d0:18:a7:4d:93:05:64:0c:e7:b1:b9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
        Validity
            Not Before: Jan 25 18:01:44 2026 GMT
            Not After : Jan 26 18:01:44 2026 GMT
        Subject: CN=0175d796d48d24d7b1d27c5571e8678320fb27d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:62:c7:b9:f1:e9:49:77:05:7a:53:51:77:
                    09:99:42:d7:b0:64:05:d9:71:24:33:40:72:5a:39:
                    40:dd:03:10:bf:d6:47:ef:9d:e2:03:3e:39:30:25:
                    17:84:a1:5f:6f:7d:33:c2:aa:43:02:bc:88:61:1c:
                    36:8c:f8:2d:d7:b2:e1:3b:f3:56:a2:63:7e:5d:8a:
                    4f:41:4c:ac:59:e8:43:4e:dc:f3:38:5f:76:34:52:
                    56:ef:77:24:a4:fd:97:a3:03:e0:e1:0b:46:13:b5:
                    9d:78:03:2c:6a:f0:21:a9:d2:62:1d:83:f6:6e:6f:
                    c3:4a:fb:00:f7:c1:56:d2:48:89:e0:94:d8:17:41:
                    82:ae:69:1c:a2:a2:b2:90:c6:15:85:7a:0b:e4:02:
                    13:01:cb:80:51:c2:04:15:a4:9a:5f:79:22:08:c1:
                    00:ec:18:14:d2:88:b7:ed:91:3a:b6:de:3e:7d:bb:
                    ac:6a:b8:8b:e4:67:b2:43:6e:98:2f:1c:82:94:2d:
                    3a:3e:3f:00:67:2b:47:8d:f2:f4:69:b2:aa:fd:de:
                    53:da:86:1b:f2:2a:0e:ad:7d:66:c8:f4:1f:d6:f8:
                    96:52:38:dd:c4:05:24:73:33:9b:2b:1b:28:ca:fe:
                    70:14:f2:d0:b3:88:12:5d:ae:f7:4a:aa:3b:64:fa:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:D7:96:D4:8D:24:D7:B1:D2:7C:55:71:E8:67:83:20:FB:27:D2
            X509v3 Authority Key Identifier:
                keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:55:3b:77:d9:f6:45:9a:b7:7d:71:c4:2e:d9:47:38:b6:
         db:df:eb:05:1c:30:f4:b8:68:40:a6:71:a2:68:f4:1e:65:ea:
         ef:4b:c3:d1:36:cf:2c:8c:a8:25:7b:0e:9b:42:fb:b0:e0:3c:
         aa:c2:7b:6c:2b:34:62:34:9a:c5:28:74:34:36:35:2e:4b:cc:
         14:89:7b:0b:e2:d9:2f:b0:c1:4b:91:12:59:06:87:21:a3:e2:
         61:91:e2:62:6c:70:d1:80:db:1c:72:f5:b6:a1:c0:71:d7:a7:
         20:9e:b1:4e:46:10:f6:bd:c7:4d:05:b9:34:42:52:dc:7f:d6:
         7e:70:94:c2:b6:f2:00:72:a2:99:2d:cd:e5:af:54:a7:91:0e:
         57:16:d6:14:c3:fb:fe:b9:cb:a9:f8:d5:d7:86:83:b1:6d:44:
         62:cc:15:ae:44:09:b1:17:69:47:f5:a6:78:fd:65:76:b4:a0:
         9a:70:14:91:5c:64:b9:5d:40:ca:be:53:ff:0f:a4:f1:cb:18:
         59:3f:99:59:c9:35:2b:b7:40:2f:df:0e:25:26:a0:e3:c6:f2:
         87:e0:a6:a9:a9:e1:44:a6:72:2a:b9:79:29:c6:80:0e:8b:3a:
         5c:6d:3f:b2:d0:c9:a5:34:5c:93:0e:02:38:e5:32:28:4c:6b:
         fb:16:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:12 2026 by rpki-client