This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File:                     S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier:          2WCFXZyeq5vng8Z6RcRq/lbdIgxypvTQjXTgZEYOol4=
Subject key identifier:   DF:0E:40:80:BB:21:A5:7A:16:20:AA:DE:38:09:3A:36:6A:10:8E:33
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer:       /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial:       019BF34F7DD3D8D9EF56EF85694BC0DFFEDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number:          05AD
Signing time:             Sun 25 Jan 2026 04:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:31 +0000
Files and hashes:         1: 9m7ReBFYFvLyFLeOct7H9hJ6pAA.roa (hash: jkRYU37RE8ZKYId1y2rgWa5Ij1FGdMuhHsJM5SV9bJo=)
                          2: CCsDJ1C_PsswfklipOHR_Lm7Dt0.roa (hash: 9Hs9+9hllW24VkNsrEOAjRUnft2CZTNY/e59yHFhQNg=)
                          3: HJo3CRIyATBS7g-UDXuzQV1nuKg.roa (hash: EQakd71H1sWHiuQgGDjS23hEg0bJr+KP+TwWXG16xS8=)
                          4: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: RB2tW4xIiNtSlontxMBIxX9o52xm2ZoKo31oGc6VKbU=)
                          5: VsFQPt4uWCua0n1HDigGa7MZykI.roa (hash: aO7sXpE7LufWLa9ldjPsDpWQqb+o3sWR/YPv+p5OWvM=)
                          6: dnHIHXnxDIPVRKYK4BjBEl9rRRw.roa (hash: 22Pf0XjeESbjL/t+0AIAcsw4G9pn5ax3ko7GmRs5HKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:7d:d3:d8:d9:ef:56:ef:85:69:4b:c0:df:fe:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
        Validity
            Not Before: Jan 25 04:00:31 2026 GMT
            Not After : Jan 26 04:00:31 2026 GMT
        Subject: CN=df0e4080bb21a57a1620aade38093a366a108e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:0a:a9:34:3f:e9:d7:59:64:d2:65:73:72:
                    60:a6:ca:61:e6:e9:63:f1:69:2c:5a:b4:d4:31:ba:
                    ce:ff:37:f7:c1:a4:0f:4e:c6:ad:a7:c1:81:97:3c:
                    a3:31:4b:87:06:0b:a4:03:6a:87:8e:e9:15:bf:f9:
                    0d:4f:c9:cb:32:16:37:de:63:39:03:ea:90:8f:9d:
                    6c:23:71:12:cf:71:f0:f3:f9:4b:bc:a1:ac:d1:37:
                    ab:0a:f8:ce:d9:03:7f:b7:31:bd:50:9c:6e:42:0d:
                    61:06:b5:a1:67:40:95:fd:f2:b4:14:a3:ee:2b:9a:
                    4d:9a:3a:4a:c8:cf:68:77:b1:28:95:e5:c9:e7:dd:
                    c5:9f:34:40:ff:f3:d3:d9:14:2f:35:9d:24:06:e6:
                    90:87:37:dc:61:d0:1e:0a:1f:6b:1d:64:9f:c0:b5:
                    9d:e5:65:34:41:84:93:0e:f2:f7:f4:a5:80:23:3a:
                    c7:09:ea:aa:ad:51:c4:a7:c9:b6:48:a4:8a:34:50:
                    48:bd:c2:27:40:f9:4f:2c:93:da:1b:25:9f:f0:1a:
                    db:6d:8c:6e:10:c9:59:cd:71:a1:5c:23:01:cf:4f:
                    03:d1:0c:b8:64:ce:0e:04:68:64:ba:77:20:37:dd:
                    b1:06:ef:26:03:09:c4:08:c8:e1:17:0a:84:d1:3c:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0E:40:80:BB:21:A5:7A:16:20:AA:DE:38:09:3A:36:6A:10:8E:33
            X509v3 Authority Key Identifier:
                keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:6a:71:f2:25:38:f5:2c:f6:47:cb:15:50:50:cd:b9:2d:58:
         ca:01:ca:46:cf:85:b7:96:58:e6:4f:f4:0b:46:af:32:f9:e0:
         af:6b:b4:f1:55:89:7b:3d:14:8d:a2:25:b7:a8:8d:ed:d2:43:
         30:d6:60:76:7b:db:b1:54:a1:5d:b3:6e:c6:cf:01:04:6c:79:
         45:65:00:ad:21:46:6a:23:67:06:14:b2:46:50:13:62:79:06:
         ce:25:63:63:8f:5b:e1:b4:b2:c6:05:b7:0e:c5:8e:ac:c6:a9:
         f2:96:cb:f8:40:13:07:d2:f7:58:78:37:c2:e9:67:b6:21:4e:
         26:e8:ba:fa:d4:6b:ae:10:7c:7c:8a:98:4e:cf:9d:98:ea:26:
         87:d9:82:a5:46:35:c1:e8:cf:47:e1:7c:7b:02:28:aa:3c:a1:
         a8:9b:7b:9c:67:c9:b7:31:24:7f:6f:ab:21:a9:85:67:d7:cf:
         b1:b7:7a:61:36:8e:92:8b:e9:85:f1:be:e2:59:0d:74:ec:50:
         b6:e5:3d:e6:38:f8:21:57:79:89:08:49:0c:b1:89:15:ae:67:
         ea:e4:96:52:60:8d:99:b1:a1:c7:71:ee:d0:06:e7:29:8d:16:
         2c:59:05:e4:b9:03:3d:48:a9:32:59:83:f8:8f:a0:7e:cb:15:
         59:08:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:30:35 2026 by rpki-client