This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File:                     RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier:          xhvA1fAkjA8D6/aoRQNb//lOGNTBI66LGEJg2vUkmSU=
Subject key identifier:   5A:5F:4D:86:9F:07:BC:64:CF:2C:47:10:D1:72:6C:84:DD:E3:D3:7D
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer:       /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial:       019BF31903F3402A0DFFB4014650905D31D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number:          173F
Signing time:             Sun 25 Jan 2026 03:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 03:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 03:01:01 +0000
Files and hashes:         1: 0GmT4kuhECd7fZ-tmbGsaxD0Rq0.roa (hash: 2zRsav5IEfSlzcwSQLfdTFA0TTacyX5/9RQCzwFOfMo=)
                          2: 0qaV7J9RK3kRvbrwOrLwGL-59is.roa (hash: UvPJ59WZ0VSeeSOBjE40xguTq+GAWfJ5QMJ5cMTtGWE=)
                          3: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: egyWQZPJtRQDKAtW/4bbfmRZvHkfhB7GJFSR0pqeXaE=)
                          4: YjNMtDRzs2TGP5-x14XVzmAfxFs.roa (hash: FsTc0fpESg1ct7d6odO1YuCSb5A2XaTydzLOePR872I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:19:03:f3:40:2a:0d:ff:b4:01:46:50:90:5d:31:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
        Validity
            Not Before: Jan 25 03:01:01 2026 GMT
            Not After : Jan 26 03:01:01 2026 GMT
        Subject: CN=5a5f4d869f07bc64cf2c4710d1726c84dde3d37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:86:25:aa:99:cf:65:f3:76:31:f0:8f:8f:4d:
                    c0:3b:8f:be:f5:81:f1:ae:92:6c:a6:ff:f0:c2:fc:
                    a5:cf:bf:8b:d5:9e:e2:3b:e2:c2:35:b7:c2:c6:29:
                    0d:d5:ac:7f:cb:1b:27:78:b2:f4:3c:2a:6a:9d:e6:
                    84:57:da:27:01:f0:4f:77:50:e3:25:b3:e2:9b:c2:
                    fb:9d:85:c2:66:aa:7d:33:c0:49:ce:9f:95:8f:3f:
                    ff:35:d5:1f:74:b0:4c:26:3e:d0:89:04:c3:80:4e:
                    1a:33:cf:be:95:ee:b2:0e:1e:f2:20:f7:24:a9:ad:
                    a5:8a:fa:68:d4:05:80:aa:5e:76:19:e1:29:a9:09:
                    e6:7c:f2:c9:44:92:83:d9:f5:38:63:d3:e2:df:8f:
                    30:5d:a5:8c:d0:20:22:b8:1a:1f:b6:c3:f9:39:32:
                    4f:1a:a5:eb:86:9d:25:89:e1:06:2b:8b:61:42:57:
                    9f:52:5a:bf:39:d4:6c:bb:18:d9:d0:f6:7d:eb:86:
                    32:e4:45:4f:0d:be:49:ef:45:ab:50:d4:83:14:50:
                    07:63:98:c1:1e:b4:56:00:1d:f3:d2:ed:e8:e4:26:
                    08:12:9d:05:a6:1b:4d:90:cd:a0:d3:62:e6:47:52:
                    56:c3:16:83:26:eb:9f:a6:ac:fe:36:13:43:09:df:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:4D:86:9F:07:BC:64:CF:2C:47:10:D1:72:6C:84:DD:E3:D3:7D
            X509v3 Authority Key Identifier:
                keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:09:4d:76:b4:a1:07:1c:43:39:71:55:9a:ae:ab:00:df:05:
         56:bb:54:00:8f:70:bc:aa:91:7b:d2:f2:a3:fa:c4:6b:09:65:
         ef:31:88:4b:bd:4f:80:ed:1c:ef:4b:21:c2:4c:eb:eb:fa:60:
         3c:2c:75:f4:06:f8:c1:5f:6e:57:b9:64:61:53:b4:37:d2:34:
         52:d7:82:89:a4:3d:f3:76:ab:70:b6:12:69:02:3c:ac:3d:e9:
         47:f9:af:47:52:0b:ae:90:ae:de:33:f5:39:d9:b7:fb:c0:b6:
         75:8c:3b:d4:61:19:c0:16:18:95:be:ac:fd:1c:07:15:4c:c5:
         76:5b:38:3b:86:96:c6:a7:2c:77:5a:38:5f:b7:69:63:19:04:
         c5:6a:25:da:0e:96:c7:aa:bb:31:2d:af:f8:59:fe:d5:49:a4:
         43:32:b7:b4:ac:2e:80:eb:d1:48:46:cf:ab:15:12:7f:f8:ab:
         46:55:f0:05:e4:fe:e9:f2:4d:cf:0c:22:aa:d0:a8:40:d0:99:
         26:e7:03:13:52:02:ac:55:b9:05:7c:41:a0:f7:d3:51:45:36:
         8c:19:2f:b5:24:bc:55:a7:cc:b6:7e:b3:2b:b2:5a:8f:c3:5c:
         46:0d:73:15:29:7c:57:da:6a:0c:83:ea:99:8b:8f:49:51:16:
         f0:2a:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:28 2026 by rpki-client