This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File:                     a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier:          HiOuN9hc9X7vhfaEoLqZIJVK9b1aytUXtDZd/HkreZw=
Subject key identifier:   34:1A:01:E7:36:89:72:5D:4C:FA:4B:04:27:20:89:67:92:B2:5E:1C
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer:       /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial:       019BF4631324FCF0991777E75A069DB4FB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number:          0816
Signing time:             Sun 25 Jan 2026 09:01:32 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:32 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:32 +0000
Files and hashes:         1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
                          2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
                          3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: nRcle2VXN8t83UrEXUzK/nZJ/79yyxmhiDMir9479QQ=)
                          4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:63:13:24:fc:f0:99:17:77:e7:5a:06:9d:b4:fb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
        Validity
            Not Before: Jan 25 09:01:32 2026 GMT
            Not After : Jan 26 09:01:32 2026 GMT
        Subject: CN=341a01e73689725d4cfa4b042720896792b25e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:59:31:3c:13:80:e9:61:16:c7:a4:5d:ad:34:
                    62:e5:0b:93:a8:d6:39:63:14:6e:d5:6a:1d:a8:f7:
                    f4:d1:b6:04:3f:2c:e1:eb:e5:c7:3c:51:a9:18:14:
                    7c:2b:c5:7d:b3:b4:56:1c:fd:9d:51:32:34:71:85:
                    24:48:8f:e1:24:56:a0:80:cb:89:03:04:c1:d6:96:
                    fb:35:93:3c:48:36:be:66:99:c7:ac:4b:3c:69:9b:
                    3f:8e:54:40:65:60:48:da:4d:91:6f:c7:0f:59:2e:
                    75:ca:88:df:3e:fd:50:e1:75:dc:b5:1c:ef:9c:a4:
                    4a:2a:e7:ad:21:af:df:9b:5a:1b:66:f3:17:aa:bf:
                    bd:ae:0a:f3:ac:3b:6b:a4:22:e5:f6:d6:63:3e:3a:
                    10:36:1e:b2:cc:15:f1:c9:df:f8:e1:9e:d3:0b:fb:
                    85:89:14:22:84:93:14:85:f0:06:a8:84:ca:65:0e:
                    5c:7c:75:68:a3:ab:9d:e4:84:e6:c3:52:55:01:ac:
                    76:5b:ca:76:d2:88:2a:27:8a:55:4a:b6:03:7f:b3:
                    d0:a4:24:75:68:56:3b:90:2b:8e:1b:d9:6b:b8:78:
                    78:a2:8f:ea:0e:0d:27:05:53:60:28:cb:dd:e0:e2:
                    92:f4:00:4b:f8:5c:dd:4d:89:47:d0:9e:76:4b:f8:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1A:01:E7:36:89:72:5D:4C:FA:4B:04:27:20:89:67:92:B2:5E:1C
            X509v3 Authority Key Identifier:
                keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:93:13:a2:68:89:71:26:cd:36:c3:bc:39:6e:51:32:03:34:
         3b:71:9f:ec:0e:7a:bb:81:cf:7c:59:2f:56:94:47:e3:b4:73:
         97:98:9c:95:dd:c6:97:19:b4:cd:5d:27:ea:47:78:c0:05:ef:
         67:18:e2:5f:fd:5b:f0:fc:9f:8c:39:2c:cd:6a:3b:61:32:1b:
         2a:e6:7e:c3:1b:22:54:dc:0d:9a:4a:b4:8d:4f:1b:33:5a:15:
         4a:b1:59:65:4e:d6:b4:2f:0f:92:15:f8:67:2a:a1:dd:e7:cd:
         5a:5a:1b:a4:79:0c:86:25:29:cb:78:c1:f3:92:a2:d6:d5:d4:
         98:df:8b:ef:bc:dc:e4:26:24:be:9f:36:f9:96:34:37:68:51:
         44:64:7b:c7:6e:be:7f:d7:ae:be:75:c3:5a:be:3a:d7:ac:fb:
         ad:74:e1:02:67:f2:e9:b8:48:08:5c:61:26:61:39:4c:5c:ad:
         bf:c1:8c:1f:1c:f0:ad:70:20:d7:ca:bf:35:4a:36:9a:69:50:
         28:a2:05:a9:14:40:ec:97:8a:13:4b:fb:a9:a9:45:93:c5:ae:
         3b:2f:9f:ee:2c:e2:63:79:10:52:f9:d8:a0:4b:08:22:33:d7:
         53:41:c9:a9:bb:33:d1:9d:24:b1:66:b9:81:19:aa:a8:ae:e7:
         00:51:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:28 2026 by rpki-client