This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File:                     t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier:          iJEnNY9YCk3OPBzYE4j6fDsgGIJeZ7QDAA74z36m7mg=
Subject key identifier:   72:9A:22:C9:F8:8C:9E:2E:6F:AB:1B:35:20:17:06:43:0D:B0:EE:37
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer:       /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial:       019BF8E3C3A42C7579C55CA2175BE4B46618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number:          106E
Signing time:             Mon 26 Jan 2026 06:00:34 +0000
Manifest this update:     Mon 26 Jan 2026 06:00:34 +0000
Manifest next update:     Tue 27 Jan 2026 06:00:34 +0000
Files and hashes:         1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
                          2: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
                          3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: HvsPxhYzkgzoDEjTFNwBneG9lfjL79zKpGvgLzpBtKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:e3:c3:a4:2c:75:79:c5:5c:a2:17:5b:e4:b4:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
        Validity
            Not Before: Jan 26 06:00:34 2026 GMT
            Not After : Jan 27 06:00:34 2026 GMT
        Subject: CN=729a22c9f88c9e2e6fab1b35201706430db0ee37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:99:14:0e:d5:47:a3:30:2b:5b:f9:97:d0:78:
                    98:d3:df:76:e0:4e:17:90:f7:b6:f6:76:8e:20:b5:
                    f3:bc:4c:35:52:02:c3:06:e5:86:de:af:92:6f:da:
                    64:e8:9a:bf:c4:cd:d3:54:3b:a8:16:31:5b:27:1f:
                    71:75:90:fd:5a:2e:7e:27:08:7d:f8:15:be:5d:ad:
                    21:09:12:c5:ec:d5:18:d9:0e:c0:e5:08:2f:f4:f4:
                    65:4b:e8:bf:9a:ea:32:b3:4d:52:e1:b5:b7:f8:4b:
                    c6:82:14:b4:ca:17:52:91:8d:0c:52:cb:96:02:04:
                    fa:66:20:21:dd:8b:18:81:c7:d5:e9:a9:72:a3:31:
                    ae:68:b5:3b:ff:b2:38:89:6b:db:94:f5:83:dd:cb:
                    b4:84:fc:7d:9a:f3:9e:9b:79:54:02:8d:89:d6:d8:
                    b9:c2:ec:6c:df:5d:9c:b6:04:58:8d:fa:67:83:67:
                    1e:4b:c6:8b:03:33:21:73:bd:cb:00:e4:f0:4c:96:
                    e0:f6:04:7c:b8:39:60:b0:d0:7b:a2:1f:73:9e:b1:
                    37:9d:02:61:c9:09:05:d0:f7:bb:60:6e:b7:e1:ae:
                    be:33:8f:d6:1d:c3:f3:22:b2:65:34:a9:eb:29:a3:
                    cb:12:ba:13:e1:0a:62:5e:34:56:45:57:72:de:dd:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9A:22:C9:F8:8C:9E:2E:6F:AB:1B:35:20:17:06:43:0D:B0:EE:37
            X509v3 Authority Key Identifier:
                keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3b:38:e3:9b:56:32:78:59:00:dc:85:74:9a:aa:8a:d1:db:
         0e:72:5e:85:f5:44:e3:8d:50:0b:b9:38:4b:f6:c9:de:d5:f0:
         31:d6:9d:c7:77:61:19:15:2a:81:4f:da:c6:8b:aa:21:7a:19:
         95:f5:bc:aa:da:01:21:32:8c:25:4b:db:b5:3d:23:37:2a:0d:
         2c:fd:a2:19:a5:50:13:ae:e2:e3:74:a7:70:51:3f:fc:77:f2:
         c9:74:34:b2:f3:21:f3:79:98:02:d2:98:a6:96:03:14:63:18:
         26:55:0c:89:6e:ea:03:f7:7a:7d:b8:e6:0e:e8:aa:00:b7:4d:
         5c:d7:41:30:f9:d8:c1:84:6c:72:62:67:67:2f:88:f9:26:4c:
         9e:0e:3e:7b:b2:c0:17:6e:f7:2a:bf:cc:37:7a:f7:f7:9a:fd:
         41:31:dd:30:65:7e:90:1b:39:e0:a0:0b:10:6f:e4:d8:84:5b:
         6d:45:cb:94:14:c1:8e:e7:79:5c:5e:86:f1:92:8a:d6:71:3a:
         5b:7a:f6:3d:b2:23:88:3d:7d:b1:05:66:cb:e3:c3:b5:cc:29:
         7d:03:21:be:a2:63:be:3c:42:7b:14:83:d8:21:89:91:7e:4a:
         ec:4b:0b:63:39:75:1e:39:6d:05:06:80:53:47:da:bb:2b:e2:
         fb:86:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:12:01 2026 by rpki-client