This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File:                     1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier:          mwq4l+CnoZko+TaOy2dq3TsdX6p0tN8NlKxjaNFo4Ck=
Subject key identifier:   A1:6B:E2:74:3F:1C:85:10:9E:ED:BD:82:1E:E9:D8:19:D5:25:86:B1
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer:       /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial:       019BF83FEE7385F7CD0CA3849DAD2316B0E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number:          03E3
Signing time:             Mon 26 Jan 2026 03:01:37 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:37 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:37 +0000
Files and hashes:         1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: oqj5P2f0kF4y7oNyoggoDw2v+gNw+k35eoIjZcoPnn0=)
                          2: xzZmjyBgUA5PVhf5CC_hJNwcVzY.roa (hash: NZxy7sLP8vd+st6fA6TY6gFnYnOKj2RudHOzgNs7jsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:ee:73:85:f7:cd:0c:a3:84:9d:ad:23:16:b0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
        Validity
            Not Before: Jan 26 03:01:37 2026 GMT
            Not After : Jan 27 03:01:37 2026 GMT
        Subject: CN=a16be2743f1c85109eedbd821ee9d819d52586b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:c7:f5:60:fe:88:0a:dc:ed:e2:f2:54:a2:
                    79:f7:0a:d7:10:22:c1:8e:69:6c:c2:c1:9b:51:a3:
                    68:35:40:49:f2:35:11:38:64:ac:cd:89:bc:ec:24:
                    f8:7c:78:f4:1e:1a:13:0c:2b:a8:64:ff:93:d3:3b:
                    f6:51:d3:62:4d:fa:98:2c:f3:89:fd:0b:f4:3f:04:
                    3a:03:fc:ff:5f:fa:4d:fb:3f:1d:fe:1b:6f:34:ed:
                    d4:78:cb:35:6e:e4:b9:f5:71:f5:b8:3f:a6:06:72:
                    f5:03:fd:65:73:f0:31:bd:49:be:e4:7f:f5:8d:cb:
                    eb:80:37:e9:6c:c7:61:11:6c:96:71:73:01:97:1b:
                    49:b7:01:83:5d:d1:c7:fc:6e:fa:1a:46:ee:41:72:
                    6f:56:17:da:56:f8:fe:47:d4:d2:d8:dc:43:9a:22:
                    13:f2:be:b0:32:c5:62:f0:c7:48:3c:07:78:c8:bd:
                    39:c1:48:ab:be:58:9f:1b:81:f5:61:01:8e:e6:c1:
                    c6:90:17:0d:57:29:43:7a:72:90:7b:22:07:73:95:
                    68:e7:3c:9b:d9:ca:78:94:ba:ad:36:1f:fb:51:c2:
                    3f:28:e7:19:dc:72:7a:4f:0a:3d:ea:eb:2a:ef:4b:
                    2c:c2:95:28:f4:c2:00:62:f6:15:04:b7:86:fa:89:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6B:E2:74:3F:1C:85:10:9E:ED:BD:82:1E:E9:D8:19:D5:25:86:B1
            X509v3 Authority Key Identifier:
                keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:66:44:e0:26:92:0a:a6:a8:8f:94:cd:e6:e6:34:12:d0:0b:
         7d:9d:bc:34:56:04:f1:ee:a1:2e:4d:4f:32:0e:3d:3e:dd:ab:
         c7:00:64:82:56:bd:b9:13:ef:18:b6:55:f6:3a:cf:03:df:85:
         aa:5e:83:21:ea:b5:f6:15:f5:23:f5:2f:03:24:39:d7:6e:ab:
         22:87:d9:5d:d3:5b:50:0a:97:4b:67:95:2e:eb:d6:5c:9b:5e:
         6c:fa:fa:3a:46:ca:93:28:61:aa:5e:66:6d:46:7e:2e:52:9d:
         d1:f9:38:9f:48:34:71:c6:18:e6:0f:de:0d:e1:11:5c:6c:87:
         9d:7f:cb:09:b3:af:ce:aa:cc:8f:02:79:52:cf:3b:14:5c:ee:
         c3:cf:7f:a2:0f:7d:0c:fc:c3:92:2e:02:74:be:e5:0f:33:f9:
         8d:c9:fd:e4:ef:ef:b8:8f:91:ee:b1:6e:ab:2f:f0:4f:5a:1b:
         a3:2c:38:c4:ae:63:b5:b2:2b:a5:60:9b:18:b5:71:55:32:69:
         e2:4c:88:b6:a2:80:ac:dd:2a:eb:10:d0:86:23:08:be:21:72:
         b9:1a:06:be:b4:1f:f0:82:f2:ac:33:fc:93:82:20:61:c2:c5:
         ae:01:b1:68:3a:65:96:d9:dd:40:dd:87:b5:ff:c8:44:98:af:
         ab:94:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:21 2026 by rpki-client