This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File:                     5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier:          pT2SblysYy5OuXr/XIz9ts81hh/hmrj+ZhRNZZDfvgA=
Subject key identifier:   A0:52:3E:04:D3:4A:8A:D1:0C:AC:B5:8A:34:DE:B6:C0:22:B6:03:A3
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer:       /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial:       019BF57528829C135DBB377210B71A542A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 14:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:54 +0000
Files and hashes:         1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
                          2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: ++sl8m5hOk8+VObpe95jUU3GU2eTvATy9ts8rRvZ+OQ=)
                          3: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:28:82:9c:13:5d:bb:37:72:10:b7:1a:54:2a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
        Validity
            Not Before: Jan 25 14:00:54 2026 GMT
            Not After : Jan 26 14:00:54 2026 GMT
        Subject: CN=a0523e04d34a8ad10cacb58a34deb6c022b603a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:71:29:b5:72:e9:88:55:b4:f2:1f:f1:03:
                    c6:89:12:c3:34:81:64:7e:3f:46:f2:16:40:e1:ab:
                    64:43:4f:9f:e0:3c:a2:84:a8:4e:22:e0:3d:fc:2e:
                    3d:fc:4c:78:35:c4:42:c3:b5:3c:93:41:4f:62:38:
                    ce:bb:44:5c:a8:c7:c2:a7:52:aa:ae:07:e6:62:5c:
                    63:1c:3e:92:7e:e0:6b:48:f0:23:83:15:11:f4:f2:
                    3a:15:0e:92:f3:ca:0f:69:4b:df:32:a2:32:27:49:
                    6c:01:58:37:21:c6:d3:13:4b:29:12:7f:0b:dc:f0:
                    91:84:4e:e5:30:01:d3:d3:88:79:e0:b9:06:66:8f:
                    b6:56:df:da:93:ff:41:5c:4f:b6:ac:8a:41:6b:a8:
                    26:2a:17:ee:f5:88:4f:55:aa:93:15:f8:ba:e1:af:
                    c9:ca:f5:f6:00:6b:d2:41:df:00:4e:d3:e3:7e:fe:
                    15:05:84:b6:c2:13:bb:d8:15:7f:6f:fc:ec:f8:5e:
                    ca:16:bb:3c:29:e5:cc:ac:34:ae:e1:1e:15:7e:0f:
                    67:36:17:8c:09:27:1e:bc:8c:16:6a:8f:d6:14:4a:
                    b1:70:78:12:50:30:54:18:87:0f:a8:21:2b:5e:62:
                    39:5e:ee:95:90:dc:df:a7:63:ec:dc:3c:32:e6:3e:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:52:3E:04:D3:4A:8A:D1:0C:AC:B5:8A:34:DE:B6:C0:22:B6:03:A3
            X509v3 Authority Key Identifier:
                keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8d:90:a7:2e:4b:c7:da:f5:ce:ce:9c:3d:38:8f:c1:a2:dd:
         f1:67:1f:5f:5e:90:3d:2e:93:04:3f:5d:4a:62:b1:8c:67:03:
         c7:ff:14:27:9d:4a:96:4a:a8:12:31:6a:c5:8a:5c:8f:e6:2c:
         dc:dd:22:f4:f5:6d:80:02:33:55:84:b2:6a:8c:cf:47:f5:ed:
         e2:d6:53:bd:9b:b8:58:d0:8a:2a:5c:5d:da:f3:9a:63:28:4d:
         8b:73:09:29:ed:50:c6:4e:20:66:51:94:92:79:6c:27:a0:30:
         d1:b2:b1:3d:f2:be:ca:51:25:ce:59:ab:57:f7:f1:12:fb:bf:
         56:a3:03:e9:e0:7b:1b:5a:a3:5e:b6:ba:c1:f1:cf:9d:38:ee:
         29:f2:4d:7f:5b:14:8e:70:04:b4:cf:92:c3:08:c4:a2:f8:69:
         bb:83:aa:d6:78:9a:59:cc:3f:73:f3:ec:f5:f6:09:56:6e:dc:
         6e:9e:bb:e1:63:99:78:c7:b3:d4:37:0e:d1:86:72:b7:a0:d6:
         53:27:a4:26:15:6d:03:5b:1c:92:34:bc:19:94:f3:90:d7:e3:
         55:29:21:08:1a:3a:46:89:fb:d5:0b:7a:df:bc:22:55:b6:14:
         ea:43:d0:36:c9:82:1d:1c:2f:ee:ed:ac:eb:d9:fb:83:99:3d:
         8e:a4:d3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:46 2026 by rpki-client