This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          3wgRECl60V0i4og/9RQzRrUJaC4xOrZy7aJexde5SjM=
Subject key identifier:   C9:54:B5:27:7D:DE:A4:98:30:26:E8:66:6B:82:87:94:30:4C:3C:72
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       019BF650D923B8A76B6E603E2EE04931E463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          13A8
Signing time:             Sun 25 Jan 2026 18:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:51 +0000
Files and hashes:         1: 5O4WJBayXN8-T5sAxCOVSxDJECk.roa (hash: 1xrSDNWEV4bb8nFWycmGbVzjtMS9SCVl02w2LA86yYc=)
                          2: G1Ty4WndBpOGD61GKAs-CwP5c2w.roa (hash: l0eAmw+GJHiz9ePv9I+0pPo3dWb64rnkIyzrqbPQk6o=)
                          3: KJ_UKUidS9-7KSDGLThVTELwDhI.roa (hash: dHBmhOaPvkrCjpSOzFqmoqtogZjlMERH8Hhj6/qx0yI=)
                          4: NuEtWDfqstg6Pj9E1KeSos8IDaw.roa (hash: wtuhCZ4o02QJy1QmedWkrl+M7I3hD/AeGG3bB2Srdj0=)
                          5: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: h2EJQ7SMVB5cfdGnmZxXUn3Z+2prOpFcRmspbgssBN0=)
                          6: kMsITRvtaXC741Y_7AjN_jGGmv4.roa (hash: gbq77+xKSdpHzBJMY7zv47/LbqIo3f6akkibyM35M7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:d9:23:b8:a7:6b:6e:60:3e:2e:e0:49:31:e4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Jan 25 18:00:51 2026 GMT
            Not After : Jan 26 18:00:51 2026 GMT
        Subject: CN=c954b5277ddea4983026e8666b828794304c3c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:92:14:c1:cc:85:f4:25:0d:93:98:8b:26:44:
                    be:b0:87:fd:88:db:0e:02:a9:59:59:da:ef:6a:bf:
                    8b:f7:3f:a5:c0:3b:73:58:59:1d:b2:05:2e:60:65:
                    bd:59:e6:1a:df:61:48:8c:b6:e5:b9:9e:54:12:ac:
                    00:bf:1c:38:59:dd:96:dc:2a:b5:6d:ee:af:b2:33:
                    ab:23:a4:aa:e2:cf:5a:1d:b1:51:8f:a6:10:56:57:
                    63:83:44:67:b8:a1:be:ee:50:fd:4f:a9:19:fc:f3:
                    6d:a5:19:1c:db:9c:50:b9:b8:1f:90:05:6f:6b:80:
                    46:4d:01:d3:c6:84:6e:2e:4b:89:f1:43:26:fa:21:
                    17:48:d3:ef:1e:cb:04:ef:4a:26:55:75:c4:ab:6d:
                    31:f4:02:a3:7e:a8:d9:25:38:62:70:28:02:8f:aa:
                    c3:0b:04:da:d9:fe:0c:98:cc:2e:a1:8b:89:f2:26:
                    b1:90:75:cd:8e:7e:d8:6e:12:58:e8:a6:9c:fa:31:
                    1f:7c:3b:16:12:de:ac:7c:eb:c1:18:fb:bc:8e:ac:
                    e6:b9:f8:fe:28:e1:de:6b:57:25:99:95:a8:7f:2c:
                    31:02:43:d5:cc:29:1a:af:36:ac:74:9f:6c:ab:ff:
                    38:d4:bc:96:01:a0:64:19:63:63:af:1a:80:01:b9:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:B5:27:7D:DE:A4:98:30:26:E8:66:6B:82:87:94:30:4C:3C:72
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ff:ea:52:8f:50:9c:6d:ca:e8:6e:9e:62:30:69:6e:44:44:
         b7:94:de:b3:da:90:e1:54:d1:99:f8:ac:ba:3f:a6:be:99:c9:
         c4:6e:13:88:df:9f:95:8b:5a:7f:74:eb:d7:20:70:f6:b0:94:
         37:6e:07:02:71:8f:2d:db:dd:22:1c:7f:e5:30:9f:b4:70:e7:
         b1:2c:de:4a:3b:68:a9:c2:70:5d:bd:a7:c0:53:60:6c:d8:7b:
         83:90:c9:d7:d8:1c:1a:c4:a7:5f:52:9f:1f:8a:f6:ba:f6:4e:
         67:18:4a:f8:25:a8:53:07:6a:8d:b8:84:ce:0f:a1:29:df:a6:
         0a:13:65:0d:d8:f7:6c:69:5f:74:cd:ad:6c:50:3a:b9:37:08:
         92:e6:53:d6:8c:03:22:58:81:c0:ba:7b:77:92:bc:0e:36:1d:
         8d:86:e4:d7:bb:26:23:2c:9e:f3:fb:26:fd:4a:a6:a1:01:79:
         fb:c2:f7:d5:18:16:5a:2f:c5:38:91:5f:aa:eb:47:fb:03:7b:
         e1:8c:91:d3:51:1f:74:21:6a:45:23:43:ae:d7:0c:8e:e1:73:
         51:8d:52:05:87:17:42:7f:c3:83:3a:f7:fa:0d:e4:35:10:a1:
         bf:f0:39:fe:16:7e:83:5e:e7:3c:b9:36:cf:8e:10:0c:a4:b7:
         cb:7c:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:19 2026 by rpki-client