This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File:                     5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier:          rGod0WUfARE6aOs75SlqCH/MRz9cMSvKFl1WNKTqPO8=
Subject key identifier:   BE:20:64:71:A6:E5:B7:D6:63:02:84:9E:E9:C9:47:61:0E:9A:98:65
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer:       /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial:       019BF687DD1250EDD64DFE491903BFFEA0BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number:          17F9
Signing time:             Sun 25 Jan 2026 19:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:57 +0000
Files and hashes:         1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: 5RmS+DrcdP1NUKBTL9UH31hgN3G/vl4NN26h5aXriWo=)
                          2: KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa (hash: QvldGhE04OV5++dEJq/jSp6fTqREgs1t+eVzU3cgY4Y=)
                          3: fYprx9tfSrpJ7R3f1TAiM1wmUEU.roa (hash: GnFvgFHqjbv0TdFv86yIpomdwFZ2W7tQkR4j2YTsnvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:dd:12:50:ed:d6:4d:fe:49:19:03:bf:fe:a0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
        Validity
            Not Before: Jan 25 19:00:57 2026 GMT
            Not After : Jan 26 19:00:57 2026 GMT
        Subject: CN=be206471a6e5b7d66302849ee9c947610e9a9865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:5c:ae:36:1e:0a:9f:bd:67:80:6b:88:22:
                    b3:de:47:e6:4d:14:1b:04:06:96:41:c0:3a:1f:c0:
                    a0:fd:3d:01:33:47:3e:8d:21:76:7c:0e:82:5b:56:
                    90:44:6e:61:01:bc:10:b4:71:2b:e3:67:d8:16:a7:
                    5a:89:d2:c7:cc:13:24:46:00:cd:5c:87:37:eb:58:
                    a3:6f:dc:e7:30:a3:30:c1:ac:7b:80:f8:0f:db:73:
                    16:43:ca:7d:21:8d:6d:d0:fd:52:c3:1e:5d:a8:10:
                    5c:83:34:6c:ca:3b:c5:24:fa:c2:78:82:49:9f:d8:
                    eb:d1:f0:bc:02:2d:b0:1b:59:bd:f1:e6:23:29:1a:
                    42:e3:b8:cf:41:24:28:bb:50:b6:29:f8:f0:bc:63:
                    29:e8:5a:b8:c3:7c:08:e8:88:14:fd:3d:0c:f5:a7:
                    b0:7a:f8:27:06:5c:82:64:41:28:d6:6e:d0:be:3c:
                    7e:5b:35:ee:b3:fd:33:d9:00:c1:37:10:0b:fc:31:
                    d8:1a:e0:88:a3:8d:1d:18:5a:84:82:7f:b9:01:de:
                    91:08:ee:af:84:f6:bc:4b:ac:0f:93:66:27:64:c5:
                    53:7c:03:46:5a:17:fa:5a:07:12:d5:4c:f7:2d:89:
                    9d:b9:a4:70:6f:52:c4:02:23:fa:1e:75:16:3d:bf:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:20:64:71:A6:E5:B7:D6:63:02:84:9E:E9:C9:47:61:0E:9A:98:65
            X509v3 Authority Key Identifier:
                keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:29:2e:65:42:69:ca:45:35:12:c2:43:71:68:80:25:33:a7:
         db:bf:6b:df:74:1d:1d:3a:30:ce:19:8c:ca:fe:0f:d8:01:c6:
         3f:bc:0a:65:57:77:f4:ea:6f:82:e8:e4:f8:d1:9a:8f:5d:4a:
         43:4b:fc:b7:e5:57:5c:6f:b0:61:00:0b:c7:0a:a6:a6:98:49:
         62:b3:82:00:28:dc:88:97:68:c9:d3:4f:d2:c8:88:a5:73:41:
         00:4f:a8:a1:d3:cc:b4:0b:be:0d:37:d5:15:29:03:22:0b:f7:
         90:40:90:fe:21:3f:72:7e:56:31:38:c9:46:db:26:7e:fe:34:
         63:2b:b2:a1:96:0b:d4:2f:bc:f3:5f:94:fd:71:2a:31:fa:18:
         b4:7a:ea:1e:12:2b:64:6d:bb:4c:fa:56:13:3c:ce:63:8b:6f:
         3f:ae:6f:3b:e8:58:f8:05:7f:f1:40:b3:58:8e:bc:0d:24:83:
         82:11:9a:cd:ac:5a:f0:9e:54:51:79:8e:e7:6c:2b:30:86:e3:
         e4:f8:3f:c4:59:97:14:5e:8a:e9:78:e3:b3:1f:e3:42:39:55:
         da:ff:27:a5:19:06:19:f7:11:7e:69:70:9e:f9:52:a0:f4:e0:
         81:38:21:f1:da:1d:40:da:b0:7e:4a:71:f4:47:33:93:7b:79:
         39:f4:9b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:31 2026 by rpki-client