This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          ZpjXBYLXuf92ANnmMcteyHYgZVhNFwql8YP8xxWD5KE=
Subject key identifier:   7E:51:2C:ED:94:57:9A:17:7D:1B:09:B4:E5:00:AE:41:AC:CF:DB:84
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       019BF619FC3843F9523582B93174C9160001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          1802
Signing time:             Sun 25 Jan 2026 17:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:56 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: XhSKHGLUNvCmbD/97T/nUf0O7/ad0Mh2JsFVJZu7a2E=)
                          2: 4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa (hash: 0dpWI2PXhik+N7S7lz0H4gx+qXCOtuPMoys6zPW4AAE=)
                          3: EB7WqqxXodos-Bnfwa3U1V_EWyk.roa (hash: mUbVMHBEzz3yLOktyc5V1n031Bt7w2ivVLElxz97H04=)
                          4: LR-gOJTdtI8bzPduiQVCYwkMZFA.roa (hash: bVwiIJwDd0Bu+uS+HlMtLfyphNhcg2aLcVX98Jb8Wj8=)
                          5: Ub8GbvDA35aTIzVecXGmXtHsXEc.roa (hash: elt6C1OboYliVZXwfhYgZV3fxNGiHeY3wGhmbW2ynL4=)
                          6: yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa (hash: 9L+sA1TE/tnPgnqt0eplM+GhjWLDs24P3usFFtq4BoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:fc:38:43:f9:52:35:82:b9:31:74:c9:16:00:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Jan 25 17:00:56 2026 GMT
            Not After : Jan 26 17:00:56 2026 GMT
        Subject: CN=7e512ced94579a177d1b09b4e500ae41accfdb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:16:ab:3c:ad:7f:11:cf:49:ad:05:8a:34:
                    c0:87:9b:75:1b:e5:f8:d0:9e:1e:a0:74:da:e2:e8:
                    9a:78:6a:c9:dd:ba:d5:a5:86:08:03:93:5d:02:cd:
                    43:aa:4b:79:0b:f5:25:34:0f:d5:a8:3e:40:87:e0:
                    01:a8:09:81:06:77:22:56:b4:73:71:06:e6:96:fa:
                    4d:e6:92:53:7f:7c:c2:90:3c:b8:8e:41:7f:20:73:
                    ad:9e:ce:ba:35:9d:db:f6:74:84:b1:b9:f2:58:f5:
                    d4:6c:74:b6:8f:63:a3:36:1f:58:53:f4:b2:4c:b4:
                    54:b7:92:28:90:ee:7c:57:1f:a1:ea:11:3b:05:96:
                    5d:26:65:a9:b7:1a:09:be:1c:73:a9:df:0b:e0:a1:
                    76:ba:8a:1b:97:4b:38:ac:c9:3b:9b:c4:92:ae:df:
                    96:ad:23:b4:78:8e:03:16:67:5d:af:cf:ec:1f:7a:
                    0a:0c:df:d0:c6:be:5a:b6:d9:fa:95:2e:ed:e4:7d:
                    8b:35:18:6e:3f:2e:28:8a:d8:0f:45:af:88:61:f7:
                    ea:60:4c:af:54:ff:43:24:d4:b6:41:09:27:5b:02:
                    d7:9e:e5:c4:f0:7c:36:39:8a:79:51:13:a3:3b:03:
                    c6:20:29:38:38:c8:48:bf:f7:3a:f9:72:fc:cd:bd:
                    61:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:2C:ED:94:57:9A:17:7D:1B:09:B4:E5:00:AE:41:AC:CF:DB:84
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:82:09:09:f4:53:13:70:cf:87:ed:19:79:8c:2d:9b:e6:45:
         d6:74:86:d1:eb:5a:eb:97:da:c3:53:85:fe:12:92:ee:e9:37:
         6c:dc:63:6b:3b:a4:ec:c3:12:07:a9:67:9d:21:30:a5:f6:d1:
         25:2c:ce:35:c5:4e:bf:aa:06:a5:bd:f3:be:a9:e2:3a:9d:cd:
         3a:9f:17:dd:fb:e8:de:06:84:b0:7c:c4:1f:2c:ec:57:b4:41:
         1b:04:9e:ea:98:4d:74:60:84:28:e7:bf:10:fb:33:4a:ed:86:
         60:21:2e:c3:c9:cb:58:9d:51:be:6f:b8:b5:41:8e:37:05:99:
         ea:66:b8:4f:77:1c:6a:3e:64:12:5f:6e:47:c0:f0:9c:0d:6d:
         62:2e:8a:7d:7a:7d:7e:56:2d:a9:2c:c2:9c:b4:ed:de:7d:3e:
         59:56:4d:68:e4:74:ee:b6:8a:aa:64:68:62:40:50:bd:41:ad:
         1c:22:f7:85:d2:db:91:e8:42:bf:18:86:7e:5b:e0:63:31:ca:
         54:d3:83:f7:a1:1b:6b:bf:21:c0:b4:b8:78:fb:c6:83:76:84:
         7a:d5:70:17:83:23:62:6c:48:77:1b:f8:c1:91:b5:62:16:5b:
         b9:44:5a:b0:88:3e:03:e8:8f:ce:26:52:ed:ad:ea:25:e7:61:
         7d:a1:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:34:30 2026 by rpki-client