This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File:                     Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier:          /z7qR6nyvsh7m86QBnN7S0zcbeQDIslzDX32IjuRwk4=
Subject key identifier:   99:5C:06:01:B7:44:12:4F:23:A7:C3:14:E9:A3:8B:29:7D:64:73:8D
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer:       /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial:       019BF687D4D488B8244A9D7771968F5B2707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number:          05F5
Signing time:             Sun 25 Jan 2026 19:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:55 +0000
Files and hashes:         1: 8_kucGIrmgrww2gQuMj2PaOsbZQ.asa (hash: 959Y1QCy7S6Njd/ATDYfLCDvVcTQhA7oCE0SACZTltQ=)
                          2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: ctNID+zPw++28gsOm3svsJ5y2wIjWTZQTaxuHj0dwN4=)
                          3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:d4:d4:88:b8:24:4a:9d:77:71:96:8f:5b:27:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
        Validity
            Not Before: Jan 25 19:00:55 2026 GMT
            Not After : Jan 26 19:00:55 2026 GMT
        Subject: CN=995c0601b744124f23a7c314e9a38b297d64738d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:8e:3a:49:b5:bb:d4:36:59:63:ea:69:25:
                    65:17:5c:ea:a2:6d:f5:dd:bb:c2:a0:7c:3f:27:6f:
                    38:c7:17:73:50:e9:04:f0:30:8a:99:7b:c6:80:b3:
                    90:e4:59:11:8e:c3:73:7b:20:a5:0b:f8:08:fa:2f:
                    37:c5:f1:fb:cc:07:f7:89:d0:f3:c0:24:87:a8:08:
                    be:18:95:1b:c7:01:1d:fe:d8:ab:d1:72:7f:8c:e8:
                    3d:17:d1:1f:bf:1e:b2:40:c8:ed:97:ed:00:16:01:
                    49:3a:e7:a8:1b:58:a0:49:39:41:f5:5e:d8:8d:d6:
                    b1:cd:42:48:fd:9b:ef:cc:e3:55:a9:10:5a:c4:c9:
                    68:e4:54:f4:70:e0:8b:cb:f7:c2:59:15:79:70:94:
                    de:8a:30:95:62:fb:70:c5:8e:bb:c2:fc:0d:19:1a:
                    a9:77:21:8c:d2:3a:e1:a1:2a:a8:c7:d8:a6:e5:6d:
                    17:3a:a9:bf:c2:2b:1c:ed:27:56:68:9e:45:0a:88:
                    f7:5e:3b:5b:6f:6c:3b:88:e7:d1:78:d7:09:7d:71:
                    11:8f:3a:7f:20:6b:e6:c2:a3:5c:87:ba:d5:72:53:
                    1d:8f:d6:e8:d2:fb:a8:49:36:86:d4:12:c8:45:dc:
                    18:6d:af:9c:00:0f:ee:de:61:b5:6f:1e:1d:57:60:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5C:06:01:B7:44:12:4F:23:A7:C3:14:E9:A3:8B:29:7D:64:73:8D
            X509v3 Authority Key Identifier:
                keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:36:77:c9:4d:2b:0b:0f:c5:f4:e1:99:5f:8c:d7:99:7c:
         4b:75:98:f5:d2:ac:5f:d6:72:d1:49:6d:82:ab:10:ec:b4:e6:
         63:c8:83:33:8c:1e:2b:97:7d:f7:eb:68:c1:3f:69:d9:05:a3:
         2c:bf:d5:21:29:5b:84:f9:55:31:a5:fa:62:c4:a6:48:68:55:
         b2:6f:a1:84:10:84:fd:b1:9f:d1:e9:e0:71:b6:0d:ec:6b:f9:
         46:ad:2a:fe:6d:7b:c3:b2:fc:38:3e:3d:85:ab:08:db:61:1d:
         5e:3c:e4:51:06:29:f1:a3:a7:fd:8d:f4:9e:65:ac:f3:cd:e2:
         f3:75:7d:16:4d:b5:48:63:f6:2b:cf:d7:23:49:49:6f:06:2c:
         6f:e5:b5:58:e5:5e:27:60:c4:f0:eb:c4:a4:26:e8:7f:4e:8f:
         88:94:b5:0a:94:59:e9:1a:23:ba:c2:c0:7d:2a:f8:b9:92:c4:
         ae:76:87:99:07:69:96:9e:3d:2d:2b:41:d4:65:f2:d6:64:eb:
         91:96:13:f7:e3:95:6c:9b:0b:20:34:49:7f:0a:d6:fa:30:75:
         06:36:f5:57:88:57:be:c4:a6:08:c7:45:87:e6:36:03:7b:77:
         e4:74:f5:8d:c5:81:9c:4b:df:9e:f5:0c:ee:a7:af:1a:28:2b:
         b5:44:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:52 2026 by rpki-client