This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File:                     5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier:          eEOuiEVDBeBvOet04c4Z8O0fObeNDS3KtJdWG4LSuaE=
Subject key identifier:   1A:E6:27:3A:E3:5B:C6:F0:C9:2F:0E:6A:F1:B1:4F:18:73:AA:A3:51
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer:       /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial:       019BF83F063F1AAA7F8802DB10C084012C6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number:          17E9
Signing time:             Mon 26 Jan 2026 03:00:38 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:38 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:38 +0000
Files and hashes:         1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: NMjgQKn9OEAH3bSDlXMLMRgfxocvGaci1NEKQ1VeCr4=)
                          2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
                          3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:06:3f:1a:aa:7f:88:02:db:10:c0:84:01:2c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
        Validity
            Not Before: Jan 26 03:00:38 2026 GMT
            Not After : Jan 27 03:00:38 2026 GMT
        Subject: CN=1ae6273ae35bc6f0c92f0e6af1b14f1873aaa351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:05:b9:f4:1a:6e:35:92:b5:6c:da:67:10:
                    2e:77:0c:59:a3:38:23:be:07:7f:f7:32:23:0e:9e:
                    24:cc:53:4b:3d:31:e5:ba:7e:4d:bd:d7:ae:41:1b:
                    a0:7f:72:82:10:f5:2b:6d:95:ed:d9:eb:5f:87:b5:
                    fc:c9:17:16:10:b5:b7:bd:f8:84:50:1c:23:69:a6:
                    75:e3:48:c4:aa:7b:5b:3e:a4:d4:0a:32:04:bf:cd:
                    b9:6e:bc:40:52:d1:be:83:4c:dc:e9:1d:b9:23:04:
                    3e:2d:aa:55:6a:0b:ce:e0:93:dc:49:1d:d7:3f:bd:
                    e7:4b:c7:5b:c5:9d:c1:af:e1:06:85:47:7c:20:8a:
                    3e:a1:5c:d3:24:6b:94:64:81:11:3a:b3:54:a5:2a:
                    9a:ed:c1:e3:fd:92:e3:cd:63:39:69:08:6f:b1:42:
                    83:31:86:e5:67:ce:86:bc:51:99:b4:bb:79:5f:75:
                    26:5d:79:01:ae:5b:e8:f4:c3:b2:bb:2a:35:32:95:
                    28:0c:28:19:0f:9c:d9:3e:a1:18:c0:30:a1:85:e9:
                    cd:d7:b4:ac:c7:f2:77:c2:a4:11:bb:0b:3b:13:75:
                    9a:1e:d1:f1:66:ef:30:60:85:19:65:9a:e5:71:b4:
                    85:f9:26:36:8f:8c:0a:90:50:86:17:23:ef:87:68:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E6:27:3A:E3:5B:C6:F0:C9:2F:0E:6A:F1:B1:4F:18:73:AA:A3:51
            X509v3 Authority Key Identifier:
                keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:06:d9:37:c5:e1:93:c1:55:0c:52:da:10:c3:1f:4d:09:3e:
         d6:a3:51:29:a1:65:2e:2d:df:b0:ab:7e:5a:7b:ce:a3:80:83:
         3a:2b:da:f0:32:dd:ee:05:c3:74:15:16:28:6c:29:fb:26:03:
         9a:45:87:af:51:c2:aa:11:2c:69:c3:ce:b6:15:85:db:a5:dd:
         34:24:b3:6b:da:2e:3f:c2:62:64:5b:bb:dc:2d:71:f9:26:7c:
         99:59:d0:6f:2d:a0:2e:c5:d4:6c:c0:33:d1:75:74:04:9b:7c:
         f2:eb:d2:65:9e:4c:64:a3:6e:5a:50:a9:9a:07:f5:cd:cb:57:
         89:d5:52:87:e4:6c:6f:54:ec:14:ed:fb:99:3a:9f:cf:d7:55:
         91:21:59:1c:21:40:0e:75:b3:71:11:6b:85:cb:81:41:3e:77:
         12:0e:92:80:2b:be:73:f2:28:81:ac:79:65:fd:62:f1:f5:94:
         8e:55:68:ee:30:e2:92:d8:cb:8c:2a:c3:42:d5:60:0f:f3:1e:
         7a:35:12:03:d3:3b:7a:11:f2:ba:ca:cc:52:c1:5f:33:e0:db:
         81:06:74:d7:19:3e:e8:05:d8:ab:76:47:0e:60:5c:a6:9c:b8:
         d1:26:40:36:e0:c4:ff:e9:90:33:ac:a3:2d:6e:1b:7e:5d:2e:
         14:c9:28:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:47 2026 by rpki-client