This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File:                     5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier:          qeMHSgvVRcFT5jeAzzou+hc47Ot2U8xn++nA93kowJo=
Subject key identifier:   73:8C:53:EC:01:B5:BF:7D:5A:FC:00:D8:46:2A:40:F7:34:F2:4B:A7
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer:       /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial:       019BF72CB1E23D76FCD78F26079ADB1E697B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number:          17F1
Signing time:             Sun 25 Jan 2026 22:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 22:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 22:00:59 +0000
Files and hashes:         1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: Z8pTEbe1lhDTz+jW9natKfWXPT2b0Y3J8WH51ZQtHno=)
                          2: KKjhztjQZY0Vw4GTD-mM1fdFOWg.roa (hash: MlkRw4nJu+XJ2IPdJa9H1pH2WWR/ZNtmmLqOfgJniXM=)
                          3: q7BZu13ZhKKbmNB_KZmV2uCo5UM.roa (hash: DUi8UcN01Z/Vn8d70a2VsZHzXBcEDk/otcqbbplcxv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:b1:e2:3d:76:fc:d7:8f:26:07:9a:db:1e:69:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
        Validity
            Not Before: Jan 25 22:00:59 2026 GMT
            Not After : Jan 26 22:00:59 2026 GMT
        Subject: CN=738c53ec01b5bf7d5afc00d8462a40f734f24ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:ec:94:d1:c2:da:b5:2f:b0:e0:ca:a7:09:
                    09:d0:55:28:95:96:15:15:89:cc:e7:d5:71:ca:73:
                    56:c9:20:cd:15:cf:93:0d:e0:4b:ab:1d:df:2f:75:
                    85:47:b5:a5:c7:59:2c:de:25:0a:8c:79:2a:1b:20:
                    c8:fb:36:b2:c6:02:e5:1d:1f:b6:c1:c7:0d:e7:19:
                    69:cd:c9:eb:a5:8d:bb:a5:20:bc:40:e6:50:bb:3b:
                    fa:2e:a6:f8:0c:a7:c8:b3:94:ad:cf:12:95:65:02:
                    61:b5:de:11:40:84:f0:34:47:69:df:4b:1b:2f:46:
                    d3:be:79:f3:70:16:87:56:0d:de:9b:6f:68:c5:8f:
                    de:22:e0:80:1d:1f:81:63:e8:53:23:05:da:69:eb:
                    dc:d3:c4:24:a3:23:05:3c:7a:0d:40:13:8e:07:d2:
                    0d:92:2e:c9:c8:b0:73:d2:cb:c0:01:ea:89:98:82:
                    25:ee:6e:a8:02:bc:b7:b6:00:ad:a7:ec:d9:00:b3:
                    d8:23:9b:f3:43:32:d4:0b:b1:65:90:01:67:4b:7d:
                    bf:36:31:41:f8:7d:27:54:86:63:62:f4:6b:8e:26:
                    8e:9b:c5:86:3b:35:65:a1:e1:36:f4:a7:e2:25:3f:
                    31:eb:c6:d8:56:c4:66:f0:db:4e:49:0e:dc:b7:83:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8C:53:EC:01:B5:BF:7D:5A:FC:00:D8:46:2A:40:F7:34:F2:4B:A7
            X509v3 Authority Key Identifier:
                keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:17:40:9e:4b:1f:7f:7d:52:87:9d:9c:77:6e:c1:8c:03:
         04:8a:8e:47:16:2d:51:b6:b8:1b:46:26:2d:c4:7d:83:97:6d:
         9b:40:96:33:51:96:58:78:9a:4f:82:97:89:24:ae:09:fd:ac:
         bf:bc:11:80:19:a7:48:34:e0:c1:bd:41:3f:66:59:6c:ea:15:
         39:fc:e2:3c:df:a3:53:3f:ab:10:07:b8:be:a0:7b:5a:94:e3:
         89:ef:fc:d6:ab:9a:6c:35:b6:91:eb:33:38:05:bb:26:64:cb:
         78:8a:d0:ef:c0:ab:5e:2e:f1:37:67:41:63:8f:23:af:8b:ce:
         10:e0:a5:c6:f5:0b:52:e3:24:2a:c9:e8:72:32:cd:47:64:62:
         3c:42:59:ca:d3:77:31:f9:1c:a2:56:0b:8e:cf:0d:37:61:17:
         6c:ef:32:89:d0:52:df:87:00:5b:5a:84:af:49:24:8f:bb:78:
         2f:ef:81:fd:01:fe:fa:c6:bc:8c:76:3a:17:0c:7b:67:13:a6:
         59:04:7b:ce:83:fc:a8:35:8d:b9:a8:21:01:a9:8e:64:8a:cf:
         bc:6d:6f:1f:ad:31:09:c4:45:d6:97:2b:de:6a:d8:a2:02:3f:
         d4:eb:24:65:e5:0c:7e:8c:c9:58:65:b5:e5:33:01:31:0c:0a:
         99:a0:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:29 2026 by rpki-client