This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File:                     v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier:          LyVDEvN2UON9sEaNJHT1tyipWdt8y90RiD8qzFnXjQs=
Subject key identifier:   58:75:0E:28:F8:7A:67:AA:83:6C:F7:30:9A:2B:1C:79:45:F3:E9:8C
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer:       /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial:       019BF6881AE1FF81B5A4DF0440519AE42B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number:          177B
Signing time:             Sun 25 Jan 2026 19:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:13 +0000
Files and hashes:         1: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: QEdevDnA2GrHCJE43Vl34EfpIkCMV/9hLpdSMGNSauM=)
                          2: xeXCbVKY1aKRd_SKGWbXuWly3_c.roa (hash: J4/1RyC+BzOI0zgjFlq8W2+RGutyBb0pM27EguLaw5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:1a:e1:ff:81:b5:a4:df:04:40:51:9a:e4:2b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
        Validity
            Not Before: Jan 25 19:01:13 2026 GMT
            Not After : Jan 26 19:01:13 2026 GMT
        Subject: CN=58750e28f87a67aa836cf7309a2b1c7945f3e98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:38:3c:7f:4b:e9:49:7c:ae:eb:80:6e:9b:
                    17:27:c0:64:93:7b:93:cf:68:e8:a2:a1:b5:7c:ef:
                    b7:af:b4:47:23:79:3d:92:7d:13:f5:a8:86:5e:da:
                    dd:56:83:49:d5:ee:07:f9:22:bf:a3:20:e2:8e:99:
                    c1:b9:7f:d4:17:3d:f7:4d:42:28:f2:f8:35:2f:2c:
                    95:82:67:73:78:81:26:ee:bf:94:44:ac:7c:4b:ce:
                    5d:4b:1c:37:8e:40:0c:4f:b2:17:54:be:ad:0b:16:
                    70:96:16:06:f4:d3:8d:b1:c9:2b:23:8c:63:6d:07:
                    c8:81:52:68:f2:34:40:a4:d3:22:1f:44:d9:6f:17:
                    8a:a2:4e:2c:a5:09:db:3a:0a:56:2d:39:19:10:58:
                    c8:43:12:68:37:6e:78:63:10:15:96:59:a0:dd:74:
                    17:2f:32:85:81:36:2d:e5:62:7d:a3:f0:59:54:f7:
                    1f:39:6a:e6:5e:68:93:60:fc:b4:96:24:66:0f:35:
                    0e:48:96:0e:2c:2c:90:6a:5a:3c:ad:a0:e9:92:f9:
                    cb:80:fc:02:10:09:f8:04:b0:ee:f9:c4:ba:c6:6b:
                    dd:a7:4b:ce:b9:b2:a6:b2:fe:f7:37:ae:a1:bc:00:
                    f8:df:ba:2a:cf:e2:ae:36:64:06:1b:e0:19:7f:4b:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:75:0E:28:F8:7A:67:AA:83:6C:F7:30:9A:2B:1C:79:45:F3:E9:8C
            X509v3 Authority Key Identifier:
                keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:ce:65:d7:65:b2:8f:94:a9:3d:c3:d7:64:8b:19:3a:a1:
         bc:81:5b:aa:91:2f:c3:82:cd:7c:f4:f4:72:89:eb:be:82:81:
         f6:96:30:c7:42:35:b0:aa:98:8f:93:ba:6e:5f:4f:7b:15:b4:
         22:47:d5:04:8b:84:be:6c:a8:1c:73:77:b2:61:5c:cb:d6:98:
         5d:cd:27:27:1f:ea:6b:e8:9b:eb:98:aa:4e:40:93:c8:b1:e1:
         0f:3d:33:4e:5f:c1:65:a2:66:cd:77:9d:d7:fe:eb:af:b3:8a:
         79:dc:2c:67:72:da:c4:69:f2:f5:0e:fb:a3:eb:9b:ae:4a:77:
         0e:6b:6f:1b:2f:f0:5b:48:46:c5:13:9c:24:c1:68:13:d0:17:
         71:34:e7:16:63:2f:dd:be:98:c3:62:a1:d2:87:4b:eb:c2:a4:
         3f:75:dd:8d:f9:fd:b3:54:a1:c7:83:99:91:88:dd:2b:69:03:
         15:9c:d6:9f:1d:f0:c0:cc:9e:66:e4:f9:55:d4:7c:10:bf:e0:
         14:a8:56:51:f5:9a:85:8d:60:a9:8b:86:14:18:e0:ac:5e:22:
         1d:62:02:1c:17:69:83:2f:47:7d:ce:3f:49:09:a8:18:b1:4a:
         ef:e4:24:8d:98:54:71:27:92:09:62:aa:d9:3b:60:d3:7b:0f:
         e8:c1:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:12:28 2026 by rpki-client