This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
File:                     5eewNLTnyobXFrEUD8pbWQ8-eMA.mft (raw, json)
Hash identifier:          7BuJoHJ6ZefHAhXg3Euu/uJSw4LmlAa9u7A/3UJaOsA=
Subject key identifier:   B6:8B:45:F7:7D:26:B1:DF:0A:EA:B3:70:AF:97:41:72:E7:D5:B0:1C
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Certificate issuer:       /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial:       019BF83F5660DEC3BCDEB19C85DFA3191583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
Manifest number:          177A
Signing time:             Mon 26 Jan 2026 03:00:59 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:59 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:59 +0000
Files and hashes:         1: 5eewNLTnyobXFrEUD8pbWQ8-eMA.crl (hash: xay+5JyMvd35FkLD1Usy7hbnMH+dG5N/Xn/CWQz5cP8=)
                          2: BtVpbbRhTPSI_oH1xQFlA8VjaKU.roa (hash: hu9eE1y2abyGZOSyCMK7xsTStFETWYiRnLL7jNqyXrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:56:60:de:c3:bc:de:b1:9c:85:df:a3:19:15:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
        Validity
            Not Before: Jan 26 03:00:59 2026 GMT
            Not After : Jan 27 03:00:59 2026 GMT
        Subject: CN=b68b45f77d26b1df0aeab370af974172e7d5b01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:cc:db:6e:26:18:4c:49:3a:ca:0f:de:6d:
                    92:cd:0d:ce:8e:95:52:d0:71:3d:5b:ee:26:71:4e:
                    0b:51:66:4e:b8:38:71:ff:94:42:99:e0:d1:10:82:
                    36:f1:45:b4:ff:db:5e:7c:a4:62:a5:37:52:85:76:
                    dd:bf:6c:2e:4f:53:80:fd:e2:a4:b4:c4:35:3c:c3:
                    d0:da:4e:78:da:a5:71:c4:37:9f:91:2b:29:85:7a:
                    9b:60:fa:03:d0:33:d9:ec:5a:e3:55:0d:f1:bf:1a:
                    8a:cd:7b:cf:b2:50:41:67:be:72:93:27:d5:6a:66:
                    b1:ea:bb:42:4e:18:77:ee:38:9a:b9:0d:18:e9:28:
                    bb:e8:cc:a3:ce:46:96:04:ae:ba:3c:a7:3e:89:56:
                    64:c1:6d:e0:53:4f:a2:0a:e0:a5:ee:42:53:b2:e0:
                    2c:37:b2:fe:c7:cb:46:3e:b8:91:76:7c:f8:c8:26:
                    d7:4c:72:25:e7:c4:7f:55:02:5d:fe:a0:48:1d:e3:
                    10:f5:e4:13:90:fe:77:51:8d:9f:d9:ac:35:a3:cf:
                    f8:b6:8e:15:a2:67:d3:27:18:f2:e5:06:5e:e2:7c:
                    81:fe:15:32:85:5b:fb:2a:17:cd:7f:cb:51:2f:2d:
                    a6:df:98:4b:f5:f0:4e:13:42:0c:d1:87:88:57:cb:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8B:45:F7:7D:26:B1:DF:0A:EA:B3:70:AF:97:41:72:E7:D5:B0:1C
            X509v3 Authority Key Identifier:
                keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e4:2e:f4:ba:5f:a9:af:5b:95:28:35:59:12:6e:ee:0c:f2:
         88:9a:6c:ea:9a:79:56:be:d7:cc:a7:2e:c8:cd:79:ab:d2:f3:
         17:3d:4a:ff:10:ad:e4:5e:48:81:1e:a3:7c:b3:d1:0b:f8:6e:
         a6:56:16:79:ec:de:73:25:19:0d:26:05:56:e7:b0:f0:16:60:
         e0:58:91:e3:00:ac:b2:6b:a3:9d:9a:77:4a:ff:9e:0f:5a:3e:
         b3:61:84:e8:cd:a1:df:ce:41:31:36:2c:fd:92:02:d0:87:1a:
         6c:ec:1c:bf:7b:f2:1a:25:62:88:f4:f5:34:e3:d3:45:79:48:
         6c:f4:44:a7:06:d6:c8:88:59:bd:ac:d4:aa:cd:15:6a:37:a0:
         0a:bd:3d:ca:bd:bc:83:46:69:f2:23:fc:ac:2b:68:f4:16:6c:
         f0:b9:77:2d:93:67:44:1f:a6:d5:b0:98:68:d1:7b:47:97:f4:
         f8:02:0e:0d:ae:3c:11:fd:2b:e4:11:f0:c2:a2:7f:24:30:1a:
         53:90:d5:1f:d2:48:82:7f:ca:ec:07:c5:ed:2f:da:2d:aa:a0:
         9e:f3:9c:10:d1:58:f4:5b:74:a8:65:ca:45:c0:ab:a4:59:d0:
         48:18:6a:14:e4:49:dd:41:5b:ce:9a:a5:ad:5e:46:5c:25:82:
         59:0f:75:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4P1Zg3sO83rGchd+jGRWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTdiMDM0YjRlN2NhODZkNzE2YjExNDBmY2E1YjU5MGYz
ZTc4YzAwHhcNMjYwMTI2MDMwMDU5WhcNMjYwMTI3MDMwMDU5WjAzMTEwLwYDVQQD
EyhiNjhiNDVmNzdkMjZiMWRmMGFlYWIzNzBhZjk3NDE3MmU3ZDViMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqrM224mGExJOsoP3m2SzQ3OjpVS
0HE9W+4mcU4LUWZOuDhx/5RCmeDREII28UW0/9tefKRipTdShXbdv2wuT1OA/eKk
tMQ1PMPQ2k542qVxxDefkSsphXqbYPoD0DPZ7FrjVQ3xvxqKzXvPslBBZ75ykyfV
amax6rtCThh37jiauQ0Y6Si76MyjzkaWBK66PKc+iVZkwW3gU0+iCuCl7kJTsuAs
N7L+x8tGPriRdnz4yCbXTHIl58R/VQJd/qBIHeMQ9eQTkP53UY2f2aw1o8/4to4V
omfTJxjy5QZe4nyB/hUyhVv7KhfNf8tRLy2m35hL9fBOE0IM0YeIV8vx/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaLRfd9JrHfCuqzcK+XQXLn1bAcMB8GA1UdIwQY
MBaAFOXnsDS058qG1xaxFA/KW1kPPnjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEt
ODAwNzBhZjBlYjVlLzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS82ZjRiZjQtZjFhYS00N2U3LTlkZjEtODAwNzBhZjBlYjVl
LzEvNWVld05MVG55b2JYRnJFVUQ4cGJXUTgtZU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOQu9Lpf
qa9blSg1WRJu7gzyiJps6pp5Vr7XzKcuyM15q9LzFz1K/xCt5F5IgR6jfLPRC/hu
plYWeezecyUZDSYFVuew8BZg4FiR4wCssmujnZp3Sv+eD1o+s2GE6M2h385BMTYs
/ZIC0IcabOwcv3vyGiViiPT1NOPTRXlIbPREpwbWyIhZvazUqs0VajegCr09yr28
g0Zp8iP8rCto9BZs8Ll3LZNnRB+m1bCYaNF7R5f0+AIODa48Ef0r5BHwwqJ/JDAa
U5DVH9JIgn/K7AfF7S/aLaqgnvOcENFY9Ft0qGXKRcCrpFnQSBhqFORJ3UFbzpql
rV5GXCWCWQ91cw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:56:40 2026 by rpki-client