This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
File:                     53e8jj7CUM6F-5CRPCxJBRBD68U.mft (raw, json)
Hash identifier:          jrae4+welC2pbXIiTz10+KYVi5OjkE0vOCo4Su3jA8o=
Subject key identifier:   53:6F:0B:B5:6E:79:A4:1B:26:A4:49:C7:46:49:76:42:40:23:B4:AA
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Certificate issuer:       /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial:       019BF6BF78428815E1057764C01FAA9EC66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
Manifest number:          0EC4
Signing time:             Sun 25 Jan 2026 20:01:41 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:41 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:41 +0000
Files and hashes:         1: 53e8jj7CUM6F-5CRPCxJBRBD68U.crl (hash: Ooilozz7nl89slrNUhq8Y6ePcpEqYsjqtARNdKiwPYE=)
                          2: I8DLFrJ2msVqUEuzFno0D_irlA8.roa (hash: 1h2HkVpROX6HNV7YxSDEIynkaKQ12aPkXI4aYGmsPhM=)
                          3: RvyFZGbQbeijXMu4H6shnCgImmo.roa (hash: DYIYWvmC8bzZdyJiE46TNQl9vdrwG3VWwrzYZPcGmag=)
                          4: ozaWo0KwzXlTDDMNGIN9Oh6_1G8.roa (hash: KZJSx3qW0uUiecQVsBeBVEHaMiHc39LHJYCjD72U8wU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:78:42:88:15:e1:05:77:64:c0:1f:aa:9e:c6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
        Validity
            Not Before: Jan 25 20:01:41 2026 GMT
            Not After : Jan 26 20:01:41 2026 GMT
        Subject: CN=536f0bb56e79a41b26a449c7464976424023b4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9c:c0:8e:80:e4:de:b1:0e:1d:36:54:6c:a8:
                    c9:e6:29:29:2e:d9:02:a4:75:d7:e9:63:23:7b:a9:
                    7b:2d:8f:33:db:4c:ef:41:9f:01:74:99:fa:76:a9:
                    90:ad:7b:e1:92:72:8a:e0:0c:8c:e3:02:80:f1:6e:
                    70:db:da:74:d7:50:aa:af:34:20:84:81:a5:37:1b:
                    a4:a5:e2:c8:41:74:83:4c:94:ac:2d:e8:ab:e4:35:
                    f4:13:b1:10:3a:b9:a7:50:2a:45:f2:30:63:5a:31:
                    16:93:06:ef:98:c4:3c:bc:39:22:49:36:9d:42:37:
                    2d:e4:9d:04:46:ae:fe:8d:87:7e:08:28:16:6e:10:
                    05:9b:9d:07:cb:db:e0:c0:86:58:26:bd:bb:3e:d1:
                    84:c4:63:20:b5:a7:aa:33:91:1a:74:56:e9:69:97:
                    dd:2d:f4:2a:ec:3e:b0:94:71:c1:19:14:0b:e6:e5:
                    9d:26:37:11:66:26:2a:b7:3f:48:21:bc:5a:c8:2b:
                    9b:df:31:f6:17:87:82:ac:13:d2:65:e5:4e:6c:fb:
                    c8:e3:b5:b1:30:e3:35:44:b0:30:fa:34:e3:31:fa:
                    9a:64:a3:66:24:a4:e3:23:97:aa:7c:11:c6:a7:b7:
                    84:74:02:cc:1e:46:c1:1c:cc:d1:f9:13:b8:5f:10:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6F:0B:B5:6E:79:A4:1B:26:A4:49:C7:46:49:76:42:40:23:B4:AA
            X509v3 Authority Key Identifier:
                keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:97:f9:e4:75:7d:78:f8:7b:99:0b:92:9b:e9:4a:f1:5f:
         2c:3d:57:ac:d3:df:fb:f6:9e:eb:74:1e:42:13:ef:5f:83:56:
         a1:7d:83:04:87:65:80:ae:b0:83:00:64:d0:a4:ac:a4:da:c3:
         d2:17:bd:c8:7a:65:20:be:bd:d0:03:d9:d9:06:85:95:ca:06:
         2a:69:e3:12:0f:f5:5d:e9:f3:97:69:5b:f5:85:7b:0e:a6:0c:
         0b:7c:73:e3:ba:9e:ba:eb:5c:d3:ee:fb:25:02:c9:85:6b:6b:
         5c:85:65:47:27:59:3d:23:ae:7e:f6:7e:31:bb:39:99:b4:33:
         23:94:11:c2:2b:32:d9:1f:b8:80:d1:e4:26:d9:1d:a1:05:f5:
         5e:5a:b4:33:c6:a8:e5:ec:bd:28:7b:f8:2c:c6:71:f8:cd:71:
         c7:e2:37:d2:35:bf:87:8f:1f:6b:eb:a3:67:5c:1b:14:32:d7:
         78:43:8d:5e:a1:c0:74:67:ca:99:fe:0a:56:93:a8:3d:2e:01:
         7c:40:91:16:05:03:e4:2d:20:c3:7b:cb:52:70:20:e1:14:ba:
         3a:1c:10:3d:54:80:99:8d:59:45:e1:56:99:b1:02:79:f3:48:
         76:50:13:52:9f:0c:b0:b5:28:cb:60:27:36:c5:3a:3e:d1:ff:
         4d:99:05:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2v3hCiBXhBXdkwB+qnsZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzdiYzhlM2VjMjUwY2U4NWZiOTA5MTNjMmM0OTA1MTA0
M2ViYzUwHhcNMjYwMTI1MjAwMTQxWhcNMjYwMTI2MjAwMTQxWjAzMTEwLwYDVQQD
Eyg1MzZmMGJiNTZlNzlhNDFiMjZhNDQ5Yzc0NjQ5NzY0MjQwMjNiNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JzAjoDk3rEOHTZUbKjJ5ikpLtkC
pHXX6WMje6l7LY8z20zvQZ8BdJn6dqmQrXvhknKK4AyM4wKA8W5w29p011CqrzQg
hIGlNxukpeLIQXSDTJSsLeir5DX0E7EQOrmnUCpF8jBjWjEWkwbvmMQ8vDkiSTad
Qjct5J0ERq7+jYd+CCgWbhAFm50Hy9vgwIZYJr27PtGExGMgtaeqM5EadFbpaZfd
LfQq7D6wlHHBGRQL5uWdJjcRZiYqtz9IIbxayCub3zH2F4eCrBPSZeVObPvI47Wx
MOM1RLAw+jTjMfqaZKNmJKTjI5eqfBHGp7eEdALMHkbBHMzR+RO4XxDD7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNvC7VueaQbJqRJx0ZJdkJAI7SqMB8GA1UdIwQY
MBaAFOd3vI4+wlDOhfuQkTwsSQUQQ+vFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWIt
ZmFlMGU1ZDJlZWJmLzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJm
LzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6GX+eR1
fXj4e5kLkpvpSvFfLD1XrNPf+/ae63QeQhPvX4NWoX2DBIdlgK6wgwBk0KSspNrD
0he9yHplIL690APZ2QaFlcoGKmnjEg/1Xenzl2lb9YV7DqYMC3xz47qeuutc0+77
JQLJhWtrXIVlRydZPSOufvZ+Mbs5mbQzI5QRwisy2R+4gNHkJtkdoQX1Xlq0M8ao
5ey9KHv4LMZx+M1xx+I30jW/h48fa+ujZ1wbFDLXeEONXqHAdGfKmf4KVpOoPS4B
fECRFgUD5C0gw3vLUnAg4RS6OhwQPVSAmY1ZReFWmbECefNIdlATUp8MsLUoy2An
NsU6PtH/TZkFmw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:04 2026 by rpki-client