This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File:                     Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier:          wN7VahcalS0X10TT9IAcKjDv3JLBDxUAlgR68WzZGHY=
Subject key identifier:   BB:1B:3D:B8:E2:7D:71:FF:1F:D4:DE:EB:14:E3:0B:EC:D2:AB:B6:2B
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer:       /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial:       019BF72D56B3A5C482F2E350A81BFD0C8A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number:          0FB6
Signing time:             Sun 25 Jan 2026 22:01:42 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:42 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:42 +0000
Files and hashes:         1: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: jjNQoMc1MgBNHDZiGkqDxRFyoAORHt5lDmFIKyf5UfM=)
                          2: mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa (hash: bNhTW0oGynm2yHcv08JZZ9D2dvlwn9a4rlXVwK15lNU=)
                          3: u5TTHw1xs_VZmXq0SW0y3xO1cGU.roa (hash: Dqfr/DYLvT8+a4pNm7nHH6jlz+8bHebHFDIps12J6io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:56:b3:a5:c4:82:f2:e3:50:a8:1b:fd:0c:8a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
        Validity
            Not Before: Jan 25 22:01:42 2026 GMT
            Not After : Jan 26 22:01:42 2026 GMT
        Subject: CN=bb1b3db8e27d71ff1fd4deeb14e30becd2abb62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f4:11:79:e9:06:6d:81:7c:c7:ad:be:e8:ae:
                    0c:a0:16:04:8a:1b:8d:8e:62:ca:e2:dc:64:79:56:
                    69:1d:2d:d0:ca:9e:73:94:31:46:2a:3b:ca:c0:4a:
                    17:df:10:ac:7b:b4:c8:a9:da:4e:32:86:8d:d1:ec:
                    cf:c2:ec:f2:c5:01:22:58:72:8e:7a:96:00:5a:ba:
                    98:7e:63:16:23:49:66:42:36:47:5f:29:99:fa:9e:
                    fd:ac:80:98:a8:a8:8a:5e:fb:c2:76:6e:c2:e3:4f:
                    42:06:2b:ac:1b:e7:a0:28:4e:30:b7:90:17:ce:24:
                    68:06:08:b2:b7:ea:a6:3d:2e:ee:46:fb:61:36:c7:
                    a4:20:5b:ce:2b:51:64:8f:a7:2f:3f:1a:07:7e:ce:
                    94:4e:91:4c:bd:ab:d9:12:68:4c:be:88:ce:9d:63:
                    8d:00:46:03:4d:ac:24:75:9b:86:05:14:59:2e:24:
                    83:22:16:cf:9a:b5:66:2b:c6:ac:db:ee:aa:a9:a0:
                    62:1f:4b:4e:8f:08:c9:11:65:ff:70:3f:34:6f:70:
                    2c:f7:b5:65:f8:b4:ba:56:d8:a2:7a:ab:6d:d1:89:
                    72:7a:22:2d:c4:1f:4f:c9:63:dc:20:ab:96:4b:9d:
                    00:e9:06:a3:dc:7f:ae:a2:c7:00:f4:dc:0f:2f:df:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1B:3D:B8:E2:7D:71:FF:1F:D4:DE:EB:14:E3:0B:EC:D2:AB:B6:2B
            X509v3 Authority Key Identifier:
                keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:05:fd:b3:0f:3f:a4:b2:b2:c3:ce:b0:2d:46:80:05:09:c3:
         de:b5:8f:71:64:64:f3:b6:16:7a:0f:04:5d:ef:29:1d:f1:35:
         af:74:24:a6:df:8b:6d:37:69:b9:81:b9:c1:42:25:c9:9d:98:
         3b:45:bc:82:c9:54:70:5c:2a:6c:a5:68:32:b5:62:cd:1b:c8:
         4e:99:ec:9e:11:e4:50:f8:2d:97:6a:a0:c5:fd:2e:e5:63:99:
         eb:0d:0f:ff:d3:68:55:94:75:3e:07:0d:8a:67:f2:94:d7:27:
         68:29:f6:bf:4e:e3:cf:9a:10:a3:28:44:f4:ae:9d:d4:88:78:
         c6:6e:68:1c:a0:af:c4:67:13:75:18:2c:0b:36:83:04:21:e1:
         39:f8:89:2d:e9:bc:8e:70:f4:f5:63:1e:ae:1f:8d:19:4b:be:
         33:45:e1:d8:49:34:63:81:ed:54:f4:73:1d:e2:a7:9d:82:ec:
         50:34:12:97:47:d0:44:22:01:31:a8:e8:65:92:63:60:30:25:
         0d:83:b5:b7:3e:83:90:cb:a4:9a:f8:f8:de:da:c5:4b:0b:11:
         e4:c8:01:f9:9e:8d:0e:78:6a:64:be:28:1a:74:2e:46:a5:35:
         cd:38:96:12:66:bf:09:c2:d9:f2:fe:ef:c0:65:45:07:32:f9:
         a7:f4:a8:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3LVazpcSC8uNQqBv9DIpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx
MTdiYWQwHhcNMjYwMTI1MjIwMTQyWhcNMjYwMTI2MjIwMTQyWjAzMTEwLwYDVQQD
EyhiYjFiM2RiOGUyN2Q3MWZmMWZkNGRlZWIxNGUzMGJlY2QyYWJiNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vQReekGbYF8x62+6K4MoBYEihuN
jmLK4txkeVZpHS3Qyp5zlDFGKjvKwEoX3xCse7TIqdpOMoaN0ezPwuzyxQEiWHKO
epYAWrqYfmMWI0lmQjZHXymZ+p79rICYqKiKXvvCdm7C409CBiusG+egKE4wt5AX
ziRoBgiyt+qmPS7uRvthNsekIFvOK1Fkj6cvPxoHfs6UTpFMvavZEmhMvojOnWON
AEYDTawkdZuGBRRZLiSDIhbPmrVmK8as2+6qqaBiH0tOjwjJEWX/cD80b3As97Vl
+LS6Vtiieqtt0YlyeiItxB9PyWPcIKuWS50A6Qaj3H+uoscA9NwPL9+2YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsbPbjifXH/H9Te6xTjC+zSq7YrMB8GA1UdIwQY
MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt
ZWVlZGQ5OWI4Y2M0LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0
LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwX9sw8/
pLKyw86wLUaABQnD3rWPcWRk87YWeg8EXe8pHfE1r3Qkpt+LbTdpuYG5wUIlyZ2Y
O0W8gslUcFwqbKVoMrVizRvITpnsnhHkUPgtl2qgxf0u5WOZ6w0P/9NoVZR1PgcN
imfylNcnaCn2v07jz5oQoyhE9K6d1Ih4xm5oHKCvxGcTdRgsCzaDBCHhOfiJLem8
jnD09WMerh+NGUu+M0Xh2Ek0Y4HtVPRzHeKnnYLsUDQSl0fQRCIBMajoZZJjYDAl
DYO1tz6DkMukmvj43trFSwsR5MgB+Z6NDnhqZL4oGnQuRqU1zTiWEma/CcLZ8v7v
wGVFBzL5p/SooA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:33 2026 by rpki-client