This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File:                     p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier:          buUCdOWQ6FaT138HKbJO0aBO3qTCnvUucwZzCW/tHQg=
Subject key identifier:   72:2A:56:86:28:FD:39:C6:0F:9B:76:F8:E9:82:80:9A:B4:D6:0C:8A
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer:       /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial:       019BF4D00F781768CC783686158095879882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number:          1802
Signing time:             Sun 25 Jan 2026 11:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:34 +0000
Files and hashes:         1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
                          2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
                          3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: Yhzt3p+lGm45uSObog6F5v8iru1GCyEfooFjEBPU2+Y=)
                          4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:0f:78:17:68:cc:78:36:86:15:80:95:87:98:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
        Validity
            Not Before: Jan 25 11:00:34 2026 GMT
            Not After : Jan 26 11:00:34 2026 GMT
        Subject: CN=722a568628fd39c60f9b76f8e982809ab4d60c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4d:8c:68:d4:4e:d2:a0:57:9a:2a:f2:32:9a:
                    e8:29:4c:d7:bf:6d:5d:f1:31:5c:10:6c:f8:8e:38:
                    d3:ec:c2:b5:e1:de:c8:8d:09:10:f2:32:8d:95:14:
                    4a:76:31:58:b7:5e:35:70:66:9b:9e:ff:e8:0c:98:
                    98:4c:99:31:5a:22:5a:1d:8c:5c:94:18:f3:ae:97:
                    6c:2b:23:4e:0d:51:b6:f3:59:3e:98:aa:99:61:f3:
                    a5:d3:12:3f:b4:ec:41:84:02:fa:45:2a:0e:5f:83:
                    af:cd:11:9a:e9:57:5c:16:50:44:85:d6:ac:d3:31:
                    7c:9b:79:21:a4:a9:f8:4d:52:d3:f2:5f:ec:90:92:
                    46:73:4b:82:e4:ca:23:f5:1d:45:a0:fc:62:1f:6e:
                    b8:c0:94:6f:21:e5:cb:fe:9c:f4:9f:67:87:3f:9e:
                    6b:6a:70:6f:0b:3d:8c:5a:f1:e1:5d:2a:35:41:77:
                    56:ac:cc:4d:e3:6c:dc:f2:55:d2:5a:c6:53:f8:e2:
                    37:84:4b:19:8e:fe:e1:b9:bb:47:2d:b5:2f:3a:57:
                    a0:25:b1:69:9a:cd:01:65:06:1f:86:b5:ae:17:60:
                    01:08:61:42:9c:fd:5c:1b:b0:5a:de:13:9c:03:6c:
                    10:61:d7:58:90:a3:12:e5:f0:04:4e:32:78:09:eb:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2A:56:86:28:FD:39:C6:0F:9B:76:F8:E9:82:80:9A:B4:D6:0C:8A
            X509v3 Authority Key Identifier:
                keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:9a:64:bd:93:2b:b9:74:e7:30:37:ce:c5:d0:6f:4e:50:
         0c:9c:24:45:1c:ab:0a:09:5d:fd:86:42:5f:6a:86:f4:f0:d2:
         9d:b0:01:b7:ac:78:aa:e8:31:15:67:eb:f1:a0:10:30:81:3f:
         f0:d2:a8:8c:0a:4f:f4:2e:4b:92:4f:76:84:73:57:2b:b5:a3:
         9e:a4:b3:af:a2:a6:b0:ae:ea:aa:21:12:8c:4e:8f:1f:de:ad:
         e2:fc:f4:32:9e:34:4c:e5:35:83:08:04:51:01:78:ef:ce:ec:
         d6:fc:1f:ab:bc:6e:85:7d:a0:89:72:b0:bd:a7:90:70:40:8e:
         fa:c2:c5:ef:b9:e7:e2:28:5f:e4:91:5d:e3:f3:c8:2c:7e:7f:
         68:1f:cc:a4:ac:dc:fb:74:d7:cd:6b:14:43:13:2b:cb:56:c1:
         e6:f6:f1:5b:b6:33:fc:66:c0:00:71:5d:48:11:99:3b:61:90:
         b3:83:da:5a:f5:04:8c:6b:65:3b:7f:cb:24:07:ca:ec:c8:2d:
         2f:dc:17:0b:04:55:25:2b:86:89:90:aa:3a:e6:e8:76:1d:6a:
         55:0a:44:e8:b7:9e:51:eb:15:12:23:51:45:0d:c5:ea:0f:fd:
         6e:de:be:ca:17:aa:f4:44:d3:9e:7f:04:5e:2c:b0:ea:cd:85:
         5b:8d:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:42:30 2026 by rpki-client