This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File:                     55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier:          1uZMcWRxYf/gdmYTB+ZXLzdtD4O62+SnlsMe3m9PFew=
Subject key identifier:   5A:08:7E:99:0F:B1:09:A0:0F:10:3F:A8:22:88:78:AD:47:44:53:53
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer:       /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial:       019BF619BA9E57A57D21DCD6E4F7F9F91BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number:          14C8
Signing time:             Sun 25 Jan 2026 17:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:39 +0000
Files and hashes:         1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
                          2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: SuzCTEeD9AsWGCk3KiO784fqQUZrpiFnplo/7HqnVy4=)
                          3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:ba:9e:57:a5:7d:21:dc:d6:e4:f7:f9:f9:1b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
        Validity
            Not Before: Jan 25 17:00:39 2026 GMT
            Not After : Jan 26 17:00:39 2026 GMT
        Subject: CN=5a087e990fb109a00f103fa8228878ad47445353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:c5:90:db:df:2f:63:dd:30:8f:73:db:20:
                    3e:83:66:ec:10:b2:cb:18:9c:e9:91:05:f4:74:47:
                    ea:b8:73:99:b7:6d:e8:6a:90:a6:5e:a2:af:c1:1e:
                    c7:f5:a7:36:a6:e1:16:d2:b5:b9:75:3b:b0:c0:f3:
                    c1:7d:89:0f:31:b3:78:ed:6d:50:72:7f:d5:f4:8b:
                    ec:6b:0f:5c:e0:eb:be:d8:69:61:57:9c:02:65:01:
                    69:31:29:da:f5:bf:11:3f:af:1e:57:42:34:25:0e:
                    68:60:16:e8:00:04:7e:d4:1c:b8:22:da:50:cc:a5:
                    20:1e:f7:0e:20:b5:58:33:af:55:d7:24:17:17:12:
                    6f:bb:38:2a:99:04:43:95:6b:1d:77:89:22:15:5d:
                    87:de:a1:7b:09:55:66:63:05:78:a0:7f:2f:df:c1:
                    06:4e:0a:df:2c:c2:75:4b:f9:dd:47:5e:af:94:28:
                    6d:4b:7e:7e:fe:04:bf:d3:28:0a:65:49:2e:d9:df:
                    63:8c:df:4b:63:dd:0a:55:3a:18:35:30:bb:64:9b:
                    0e:f6:bc:c7:82:12:e6:b2:0a:ca:ee:fb:47:4d:bb:
                    7f:5f:98:c7:d7:fa:66:c4:4c:ef:b8:dd:43:87:c1:
                    54:e9:1e:b1:96:b4:0d:23:45:d8:57:e6:b3:2b:b4:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:7E:99:0F:B1:09:A0:0F:10:3F:A8:22:88:78:AD:47:44:53:53
            X509v3 Authority Key Identifier:
                keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:6e:b4:52:e3:b8:3b:b9:c4:a1:96:c3:37:3b:8c:bb:f6:db:
         84:7c:b1:b3:43:b0:e2:fd:a1:47:33:92:5f:a8:90:a2:2b:fd:
         6a:89:c3:f2:32:39:99:bf:61:04:c0:a5:4c:8e:29:96:26:2e:
         f8:85:6c:0e:aa:f7:c3:10:8e:48:dd:e5:88:58:96:3d:e0:2c:
         34:96:d5:6f:94:62:6e:7e:0e:1f:dc:09:b8:63:ee:1f:b0:5f:
         38:30:7f:1c:36:65:97:28:62:42:13:cb:5a:1e:1a:ae:23:3f:
         e6:e2:9e:ee:67:30:f5:88:ff:67:9b:a0:59:1e:b2:d3:d5:75:
         0b:d5:1c:4b:7d:9c:75:61:c9:0b:40:e4:84:9e:c9:fc:33:e7:
         51:9c:d1:01:8a:cc:69:1e:5f:76:85:a7:b9:db:ff:6a:ed:76:
         39:86:75:11:0d:99:31:19:da:19:d4:41:45:f1:45:a1:2c:e8:
         db:4f:7c:04:a6:67:29:56:ab:12:f6:85:a0:61:c8:9e:73:e1:
         30:37:7d:50:4b:01:05:d3:29:64:e4:0a:4c:d8:a3:d2:79:3a:
         22:68:29:8c:de:0c:33:06:2f:cb:9d:63:cd:c0:3e:16:fc:1c:
         d5:f2:d8:e1:f3:cf:05:c4:d3:2e:b0:f8:23:33:72:ed:cc:61:
         1c:4f:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:41 2026 by rpki-client