This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
File:                     5IL9B-INQG6kFS5JKwAOVU6_zIA.mft (raw, json)
Hash identifier:          tMMyRU2/V7G0vZ2q9fWlt5YGC3RpA3jZ2atETetswRQ=
Subject key identifier:   EB:9E:B8:45:A7:78:48:C6:8E:D3:82:AE:43:D5:C5:B0:DC:22:1B:8E
Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
Certificate issuer:       /CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Certificate serial:       019BF83F10D64382C6470E7A3DD13408A6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
Manifest number:          14C7
Signing time:             Mon 26 Jan 2026 03:00:41 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:41 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:41 +0000
Files and hashes:         1: 5IL9B-INQG6kFS5JKwAOVU6_zIA.crl (hash: N2jR6Y2xLN6vDRMxNG+Xd/95A1suwzuoHxfQWbUYKWk=)
                          2: gL5Giy-rTCvNArfPkKAU-r2CxM0.roa (hash: jO7bXDuHY7qto41yybcOr3CvCDVLDdC+wp0YyPzuDpg=)
                          3: nKLfpVUcp118xFJnNk1KItDI1Z4.roa (hash: nILTBxf9pDPjeb+IYez6Oufx0RUp69esbdOKvblK8Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:10:d6:43:82:c6:47:0e:7a:3d:d1:34:08:a6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80
        Validity
            Not Before: Jan 26 03:00:41 2026 GMT
            Not After : Jan 27 03:00:41 2026 GMT
        Subject: CN=eb9eb845a77848c68ed382ae43d5c5b0dc221b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:18:0d:14:92:b3:86:43:0d:70:7f:6e:f8:
                    4a:c9:64:f9:88:16:8a:16:00:fa:ac:3f:8f:b9:46:
                    da:d5:ff:f2:a5:2f:d4:93:8a:c4:3a:03:b9:7d:e0:
                    f9:cb:62:5a:f9:7a:b2:20:4d:31:a2:41:c3:e6:09:
                    ef:58:45:ef:bd:ea:8d:ff:3e:90:a7:8e:b3:09:08:
                    c8:eb:f0:61:ff:94:ca:b3:4b:ab:96:3b:9d:aa:6b:
                    26:7c:bb:c7:90:b7:f5:91:6a:64:46:4d:a5:4e:26:
                    33:46:16:a8:80:18:54:34:b0:18:2b:44:b5:e9:cf:
                    1f:69:92:58:79:37:01:c9:c5:c3:57:df:a9:dc:71:
                    22:21:dc:26:7c:b9:49:7d:fb:fd:e9:3c:e0:28:ed:
                    ca:95:c9:f7:24:36:5c:d4:90:bf:8f:78:c8:a8:96:
                    c6:ee:bc:52:c3:b9:f4:89:2a:d0:b8:6b:62:64:c3:
                    7a:1a:05:2b:bc:62:89:cf:d5:32:4f:d5:1a:83:ac:
                    57:69:d6:4f:a3:62:75:4d:f1:36:67:97:c8:fd:50:
                    d7:47:7d:eb:f3:d0:91:af:a1:63:da:c4:c6:fe:64:
                    98:27:8b:0e:c6:87:ec:1a:2c:18:5b:a6:2e:4a:af:
                    89:b8:dc:5c:0e:ac:09:30:96:d2:5a:d2:69:77:cc:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9E:B8:45:A7:78:48:C6:8E:D3:82:AE:43:D5:C5:B0:DC:22:1B:8E
            X509v3 Authority Key Identifier:
                keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:65:2b:56:c8:39:9d:91:d4:fb:66:15:e2:5b:fb:6c:d5:0b:
         15:cf:ba:9e:70:05:9f:9f:94:18:70:4d:f7:f6:db:a4:bd:64:
         df:73:46:15:f8:e2:61:a5:af:79:cb:62:f9:ae:a3:d2:86:52:
         06:bb:6b:24:5a:d7:4b:9e:3b:b8:89:5d:50:3b:a8:4d:6f:d5:
         71:c4:18:4c:c0:ff:8c:c2:8d:68:92:88:36:7c:e6:c1:6b:87:
         bd:6f:c0:a3:fb:52:84:fe:97:ab:bf:6f:7b:22:04:16:12:29:
         38:ed:eb:c3:70:86:81:4c:b6:e0:5c:15:ba:76:09:49:eb:36:
         14:70:57:ae:07:5e:5a:20:9c:3d:8f:7d:a4:3d:77:09:8f:0e:
         95:1d:b1:3a:10:88:5c:55:bf:34:2d:de:bf:c6:fe:33:76:94:
         c2:6a:3c:0f:02:af:fb:d2:ab:3d:dc:09:59:19:2c:ee:ed:19:
         b1:09:63:1d:d3:c1:fb:30:1f:02:ea:ac:a1:43:d0:87:4b:60:
         b6:41:2c:f1:bc:bd:2b:9e:7f:5c:85:08:29:ff:5b:72:55:83:
         5f:ab:33:d8:ed:7f:d0:6e:bd:7c:9e:59:16:c0:6e:5a:5c:ea:
         a1:7d:69:ea:77:35:ef:f6:29:70:cd:4f:91:a7:b3:f3:fe:f1:
         3d:14:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:07 2026 by rpki-client