This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          SJ5qDPsZqXJFn3ePx3/QFOXI9/ux5uicYBtdESz6WnA=
Subject key identifier:   8A:0D:4D:B7:C0:A5:1D:CC:BE:17:C5:75:C8:39:6A:A0:EE:17:73:95
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019BF53E0F77813217D3F9B23D208AA97244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0DDF
Signing time:             Sun 25 Jan 2026 13:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:43 +0000
Files and hashes:         1: FDjfPJ1b2un54RcsxFzXrmIh9vw.roa (hash: Ccv8c7H4XZKfbC/jZrSX0si2V/3E8zoZJ2jD84UglfQ=)
                          2: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: F3m6omdBxrbODScmnTDk6U6pBVCd25E1MfRUD3Pb1UM=)
                          3: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
                          4: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:0f:77:81:32:17:d3:f9:b2:3d:20:8a:a9:72:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Jan 25 13:00:43 2026 GMT
            Not After : Jan 26 13:00:43 2026 GMT
        Subject: CN=8a0d4db7c0a51dccbe17c575c8396aa0ee177395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:46:1d:83:87:ee:3d:ad:ee:42:5d:aa:13:
                    17:99:9c:e6:f6:60:56:55:91:ec:60:0c:e5:10:f5:
                    2f:73:d6:be:d6:dd:28:20:fe:e7:ca:8a:0e:0f:08:
                    b3:13:f0:96:7f:1c:22:9e:da:db:c9:6f:7c:d8:32:
                    5c:6e:9a:1a:7e:eb:6a:dc:59:7b:08:bc:13:02:35:
                    4c:2d:06:c2:23:0c:33:bc:d7:cb:4b:5b:07:b3:d2:
                    59:51:06:33:cf:dc:9d:b4:b4:02:a0:63:4e:a5:33:
                    9b:dd:fa:fa:f1:79:49:9d:ce:82:4a:a4:83:92:a2:
                    34:b3:ad:79:9d:ce:12:27:86:73:14:86:3d:a8:c8:
                    f2:46:45:82:1e:30:a9:66:d8:61:fc:2e:52:ba:94:
                    c4:34:5a:18:0e:a4:c5:ab:d9:80:5b:48:ae:dc:b0:
                    72:e8:ba:0d:a2:28:64:08:b3:ca:90:1d:49:0d:d3:
                    38:79:d3:5e:c5:52:38:96:61:a7:62:6b:78:57:ee:
                    0e:6f:e4:fc:7a:3b:f5:65:66:88:cf:18:74:c9:de:
                    56:e7:2d:54:17:e2:c8:6b:7b:23:d9:95:39:81:96:
                    cb:3b:33:ec:53:fa:ea:9d:3c:82:ee:21:ba:c9:51:
                    2b:6c:36:e1:c4:b7:5d:6d:31:15:82:ea:1c:8f:ad:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0D:4D:B7:C0:A5:1D:CC:BE:17:C5:75:C8:39:6A:A0:EE:17:73:95
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:88:7f:ad:e8:69:ad:3c:b5:0e:57:60:a2:33:51:cb:d5:4e:
         e7:1c:05:77:64:56:2e:2c:d3:21:97:32:85:a0:5b:55:ab:89:
         ed:82:bb:b0:18:50:ef:92:b2:8f:b2:4d:20:cd:39:ab:89:96:
         2d:7d:33:9c:15:1f:34:19:a6:27:00:a6:b4:de:4c:26:65:1e:
         e0:49:61:39:03:ca:1f:eb:c6:fb:79:b9:d0:01:de:78:f3:30:
         55:ca:2a:26:ea:17:ba:32:2d:e2:22:d2:5e:87:15:69:08:08:
         0b:81:27:1c:40:a9:07:dd:39:32:c3:93:a3:16:bc:a9:fd:b5:
         cc:80:85:a6:fc:fa:3f:f8:9a:fb:b7:b5:f2:96:37:14:31:70:
         98:4b:0a:67:60:65:7b:8c:8f:dd:44:53:d6:c9:84:b6:33:32:
         c1:7b:3f:db:3c:e0:0d:17:74:f1:8d:e4:8c:c4:03:12:75:d8:
         16:f5:2c:2a:9f:e0:d3:b9:f1:2b:5f:cb:20:97:85:97:91:69:
         d1:8e:ad:d7:3e:8a:2c:26:4f:a9:80:e5:af:d3:af:c2:e0:52:
         ff:cf:b9:de:8a:a2:8e:5e:8e:99:14:2d:4b:53:bc:6f:1d:32:
         fd:be:5d:30:51:f6:a6:c5:01:ec:ca:5e:8b:80:2f:52:45:da:
         18:9f:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:52 2026 by rpki-client