This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File:                     K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier:          JQB1trvjGfH1r9oZdMBtFIL9/PU2HT/Ee/tzu31s9D8=
Subject key identifier:   31:EC:FC:E0:D6:64:BD:FA:C3:6F:12:87:E4:18:F5:AC:0F:6A:0C:90
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer:       /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial:       019BF506FCC606B6949E87F5CFF292C2BFA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number:          0C00
Signing time:             Sun 25 Jan 2026 12:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:34 +0000
Files and hashes:         1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
                          2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: A8Np/s/OkCeO31STeKUoX+F1rufYaXs5YCEEs7ibcGs=)
                          3: cFEY_9_6ABTQBs7EueSTsHuMew8.roa (hash: pHjdA6zjN1D5SfgMzELBq+u9fC8i77r9JSlam6eddx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:06:fc:c6:06:b6:94:9e:87:f5:cf:f2:92:c2:bf:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
        Validity
            Not Before: Jan 25 12:00:34 2026 GMT
            Not After : Jan 26 12:00:34 2026 GMT
        Subject: CN=31ecfce0d664bdfac36f1287e418f5ac0f6a0c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:17:ba:d8:1e:08:0e:be:af:21:5d:5d:54:
                    2d:77:86:e0:91:b3:31:e8:2b:5e:fc:96:40:ce:29:
                    f3:80:1a:4c:26:ee:ef:25:3c:2c:cd:d0:ff:45:fb:
                    fb:4e:d5:20:f1:9b:e1:eb:ff:d0:46:eb:ca:5e:eb:
                    a8:0e:29:32:a1:a8:d6:93:00:29:2b:94:d6:64:b5:
                    fa:a9:ae:b7:c3:e0:bc:20:1a:fb:f5:18:80:f2:0f:
                    ec:42:b3:7c:f3:63:4d:87:d6:37:a7:84:3e:7e:d4:
                    d9:2a:e9:ec:8b:87:9c:2a:ec:57:06:18:ab:eb:a3:
                    b7:e8:3c:1f:a9:9a:5d:e8:1e:0e:c0:a1:c0:c9:2a:
                    11:fc:fb:dd:91:69:7c:71:ea:37:09:ba:19:51:56:
                    cc:78:fe:7c:8b:82:f0:54:04:27:3d:e3:9a:77:5c:
                    30:2b:2a:5a:af:a3:1e:7e:02:3c:1b:1f:df:12:82:
                    49:87:7e:14:e5:0d:b9:7d:1e:1b:02:85:04:4b:bc:
                    2e:3f:bf:31:c3:86:77:95:d5:d0:8b:33:d2:f1:ce:
                    85:89:ab:3b:5b:0b:c9:09:5c:8c:b3:dc:2d:9f:dd:
                    35:50:e2:ae:90:20:9f:87:35:91:9f:68:30:c0:f5:
                    2f:37:b1:5a:4a:3a:50:b9:13:f1:08:a4:fb:ac:b0:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EC:FC:E0:D6:64:BD:FA:C3:6F:12:87:E4:18:F5:AC:0F:6A:0C:90
            X509v3 Authority Key Identifier:
                keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5b:92:2a:8a:d7:73:81:11:62:e9:35:6f:db:1e:5f:f4:99:
         ff:f1:f1:f8:1d:f9:1f:8f:ba:10:d5:ac:7e:f5:cd:d7:b3:fb:
         d8:ed:89:b4:54:68:7c:3c:a4:55:d5:0d:0c:54:6b:95:37:af:
         2e:a9:d0:d9:3e:3a:bf:06:a6:c4:43:c3:44:68:1c:e3:8c:6e:
         a5:60:46:3d:3b:b8:15:38:06:5c:85:b0:5a:11:3f:7e:87:db:
         4b:cb:84:5f:b0:91:a7:b1:43:e3:51:db:b7:a9:16:3b:d0:87:
         b3:7b:6b:14:92:29:c5:c0:4d:93:78:4a:28:10:74:f2:1f:1b:
         14:c5:ca:86:5f:c0:75:c9:ac:0a:c3:99:d5:c7:d1:90:75:da:
         bb:81:81:c3:72:46:03:81:1d:4b:01:c0:69:1c:f1:aa:82:4a:
         0f:4d:a6:42:78:8e:ce:d6:1a:5c:2b:7d:a9:4c:85:46:24:ea:
         cd:a5:57:a2:17:88:2c:07:51:99:dc:75:91:b9:bb:ef:65:f6:
         eb:68:19:3f:d7:c8:77:a5:cc:61:f0:1f:9f:bc:a4:df:01:d2:
         c5:00:87:ee:c8:cb:8c:e0:26:fc:a3:10:de:91:32:ba:1b:14:
         c9:3f:86:4a:40:2b:0b:0f:81:18:76:ea:1b:40:96:f1:44:b0:
         de:c0:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:49:06 2026 by rpki-client