This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
File:                     9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json)
Hash identifier:          bHkrzPRxhsgu1U/0DiNjXHEXmLUn410jKpfyP/xJN3Y=
Subject key identifier:   55:17:22:E4:C9:40:64:74:E2:AD:94:91:4A:80:00:B9:3C:D8:CF:12
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Certificate issuer:       /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial:       019BF3869C3928F7A5EE743F312836DFC750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
Manifest number:          11A5
Signing time:             Sun 25 Jan 2026 05:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:43 +0000
Files and hashes:         1: 30posY3TsM2Fh--sfGLYSxzt9Oc.roa (hash: i0NTnZ+KyqqJwh0JnlpuYIHLq99sFP6hfH0tju3c/hs=)
                          2: 92kon1ZbPqRU1ojElvwcbSZFCJg.roa (hash: JDix+gTyhf3eCiMPRUDwwuH51sP+i0fI6zPIxZOfd6g=)
                          3: 9I6L8TRP3qtz3CYYh3ww5T352z8.roa (hash: 1gf4QeHFa9dKbCRpBcjsV/snv/t5NnmR9Bj8FONPgak=)
                          4: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: GbuLbQ/B+AtYhsUybEkVyC4EzD6/4Lw4ksqf/BeprLQ=)
                          5: ADT8NHavskB_f-QX_biQB6s3hjM.roa (hash: g7mT0bM8U1tBgaCrO9JeZJLHUsM1LBUnAA963U3MJWE=)
                          6: Arzcfq5b9bOeJ-sDkrtWteqmoB0.roa (hash: 0D64FRm+2vpUSJ11ctj2H0QGBlqAOwuUf57RFyWd8mI=)
                          7: CYj7mZQ9dKeMc_-N6UL6LjIi3lk.roa (hash: JDVFtyDyR/x/eL6c4P6MCJwlsUYUOK+LfbQasczNpvA=)
                          8: Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa (hash: YPwRTq6Ianr0pyiyDMEVnQhaRfOWjLxD4nQBsuUMiJ8=)
                          9: J6A_hF4O7cxI8QJluboyBCe16v0.roa (hash: edsf8OO27RWYtOi702k6Qhe7cJI0t15sATzZb5sCsJ8=)
                          10: MdXllBZP0mMZ0dXI6p75TCwhxPo.roa (hash: 4XNUO6DsPpBG+M6Ws/hUL/dm11Zqlvo8pLHd9xOnlHo=)
                          11: P7jjKXYODa6b0nJrUcOuqIoDy-Y.roa (hash: WbzeNFSAMqkRYOfSuJZB8Gq+eo7K35ASCXWClSmDC1M=)
                          12: PayA9942Pu3PEwdgbc9zI085M7A.roa (hash: pkpsKDUMLuKxSQ8sea1A1XeztsAXtWdezuYMLOySqF4=)
                          13: i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa (hash: 8NhSbKhEfu8jyqD1wovs3TRW3fNcgXTNne21hQm9qN4=)
                          14: lBbPrenKlA3Sq-uIUKDdAiDokxs.roa (hash: 8cnNfRffd7F/oZoq0DdI1sFhx5I9K/eiWM52AqJzzeI=)
                          15: sVAk55K1bjvD6NWoqyy6bpvKPNM.roa (hash: PMewucLZTeF6kJJLzoads50StAWlilqhYdIQchwQaB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:9c:39:28:f7:a5:ee:74:3f:31:28:36:df:c7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
        Validity
            Not Before: Jan 25 05:00:43 2026 GMT
            Not After : Jan 26 05:00:43 2026 GMT
        Subject: CN=551722e4c9406474e2ad94914a8000b93cd8cf12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:42:e1:cd:94:8b:64:09:c8:25:0a:97:04:
                    ac:c0:8f:80:66:85:b6:0f:b3:7a:9c:2c:ae:d8:97:
                    4d:93:ac:02:4d:91:73:12:56:9a:53:f8:a7:db:db:
                    d0:01:44:9f:bc:c7:54:a1:8b:08:57:cc:1c:6a:01:
                    1b:2a:0b:89:2d:f4:ab:02:37:ae:ed:48:6d:b1:c7:
                    a3:9e:cf:64:8a:ba:76:88:ac:28:41:fc:5e:80:6c:
                    5c:97:0a:97:88:a7:42:19:be:82:ef:09:f9:3a:be:
                    5b:25:1c:2a:93:a6:08:b9:cd:66:73:c0:0c:18:b6:
                    53:f7:ba:aa:87:b7:48:39:dc:05:27:7c:8b:fc:ec:
                    cf:3d:22:b5:d7:7f:6d:11:48:d4:1c:9b:86:c6:36:
                    b9:24:c2:68:f4:61:9d:51:26:ef:b4:f3:49:1d:98:
                    bb:94:f3:39:1b:51:d0:52:3a:98:70:eb:f5:3e:9e:
                    6a:86:e3:5d:95:37:f9:e3:42:c7:56:b9:be:7c:47:
                    57:fb:93:7d:de:4f:b7:6a:4e:b0:95:6e:5e:46:b2:
                    85:e0:fd:a6:82:58:f4:a0:f8:f2:62:29:ff:03:4a:
                    93:d9:2d:84:58:08:dd:51:24:be:45:2a:57:96:e1:
                    75:b8:b4:e1:c4:e3:7a:3c:c7:cd:49:d8:f7:83:d2:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:22:E4:C9:40:64:74:E2:AD:94:91:4A:80:00:B9:3C:D8:CF:12
            X509v3 Authority Key Identifier:
                keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:67:d5:25:54:9d:2a:f5:2d:24:c4:ba:de:53:d7:40:b2:
         d1:2a:de:59:4a:ba:be:01:b7:17:14:e5:b2:90:0b:d2:15:df:
         66:7d:ba:05:15:58:77:36:0d:7b:fb:21:94:60:25:f4:e1:0d:
         02:ce:e7:14:ac:fc:80:3c:c6:ad:79:a9:0b:77:fa:f9:e7:20:
         a2:20:a4:84:43:22:7f:d4:93:ee:eb:cb:8b:bd:8f:7b:e1:3e:
         62:7d:0a:63:00:8c:5f:a9:3f:7f:69:2e:c4:b5:1b:d8:4f:12:
         94:46:66:43:37:e8:ed:e7:e8:b2:a4:78:48:3f:c1:78:5c:f2:
         ce:26:4a:c7:ae:8b:a8:97:36:55:a1:a7:05:fd:2d:de:20:5f:
         ac:d4:4c:fc:ec:0b:5d:58:d3:45:8e:1a:bc:a6:f7:45:24:ba:
         58:17:1c:1f:1e:ce:d5:48:66:58:48:38:d3:71:06:fd:4e:03:
         1a:5d:b2:63:6a:62:f1:03:0a:5e:fe:65:0c:85:19:49:57:61:
         0a:cd:6a:0b:d9:18:e8:60:9a:49:2a:e5:7b:2a:5b:f5:17:be:
         c4:ed:bb:d3:7f:db:e0:18:e3:63:02:89:bf:d4:4d:14:34:33:
         fc:3b:bd:35:79:e1:08:36:69:82:35:93:03:6a:67:f2:ea:ae:
         4a:cc:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:55 2026 by rpki-client