This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          c05C2fKdMSXCXpoCR4z/V1yhJ/90RgxzqeNqer0CcrU=
Subject key identifier:   EE:5D:4E:A9:8F:CD:FC:41:67:84:EB:02:01:D9:19:4C:1A:5F:5E:6F
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       019BF53E2F92A7A75DDF25F615E4766C3E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 13:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:51 +0000
Files and hashes:         1: 7y0LOepFUcA8OxNwETjP06eOGqo.roa (hash: FtFNn3fJLuNl3O3fnntEfGbv+32KsAHr3SqeYeHUCL0=)
                          2: CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa (hash: UAHd42O2KjlmEGP6gn2QJSSuqJWzfTB5HZHwnRpiaVs=)
                          3: JXnp6HlQC-5SqdfjYLJsbtC_UIQ.roa (hash: YlECxxfSPVhcfaZ4wCUWJKldj0fpn0G8ae7MLGJ3YLI=)
                          4: _UUS3q5BecQsPN01euTz6ZXEA3I.roa (hash: /n6cdrP+/xfyaY1mRVl4Rp3lZj1gk+c55nEDkiLkTlI=)
                          5: makv0shcZ5kNgnoatV93mdzUDzA.roa (hash: pcme59je8U1s3r4CfES9LEZanBL2hRJGysIwX84CTmo=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: Jmss5iN1Iyewz0xw5R3PK3Wt4H8vO6QpSic46mEFwtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:2f:92:a7:a7:5d:df:25:f6:15:e4:76:6c:3e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Jan 25 13:00:51 2026 GMT
            Not After : Jan 26 13:00:51 2026 GMT
        Subject: CN=ee5d4ea98fcdfc416784eb0201d9194c1a5f5e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:3f:4e:f7:aa:52:5a:b6:56:a8:65:e1:3c:
                    b9:cb:06:fe:78:a3:89:2c:45:76:56:6c:5b:8a:7f:
                    1c:60:0e:ed:51:41:c5:61:ae:50:d6:5e:bd:84:b5:
                    62:93:45:09:07:a2:a3:29:e1:96:44:9a:6d:48:9b:
                    80:9c:30:d7:ca:da:62:44:95:ab:cb:3d:74:3d:50:
                    0b:a8:82:8d:53:5b:e8:02:6e:6c:8d:95:19:4e:e1:
                    b8:7f:94:21:45:1c:b1:72:d4:b6:a2:35:81:d1:07:
                    96:44:f4:0d:c2:cc:2b:92:1d:da:0d:74:aa:60:72:
                    7d:df:38:7d:0e:f3:cb:2f:84:2f:10:23:93:d1:a4:
                    b4:4e:90:2c:46:b2:c1:ad:36:55:61:f2:27:c3:be:
                    c1:e8:7b:b9:83:0d:71:eb:99:3a:03:4d:dc:e3:8c:
                    c1:fd:42:64:7a:08:27:b5:2f:b1:2a:42:fb:94:18:
                    20:bd:36:3b:fe:ec:ef:e6:34:62:fc:be:45:1b:9e:
                    9a:ee:dc:d0:50:c1:03:d0:52:46:a1:70:c1:4f:c5:
                    ad:20:d9:37:a7:e9:62:cd:df:cc:cf:12:91:c1:78:
                    d6:f3:ee:28:52:43:50:97:34:fb:80:42:d6:d3:56:
                    37:da:0e:94:c2:16:e0:3a:53:1e:0a:4d:56:0f:65:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5D:4E:A9:8F:CD:FC:41:67:84:EB:02:01:D9:19:4C:1A:5F:5E:6F
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:38:b7:86:70:55:df:df:70:0f:30:72:dd:43:59:a1:14:b6:
         1a:b3:9d:3c:6a:88:d8:90:20:f7:bf:23:fe:4d:46:28:ae:fd:
         a0:4f:1b:1c:48:8f:25:23:b0:32:b6:2c:5c:13:22:d3:34:fb:
         89:78:75:a1:f2:74:f7:15:d3:9f:3b:af:4c:22:d9:cc:63:1a:
         e5:d2:8d:96:36:74:bf:01:41:7b:25:5c:d4:37:aa:47:35:a1:
         30:3b:c8:d9:08:74:f9:99:54:cc:15:11:3f:89:1b:41:78:55:
         7e:03:45:64:24:1f:43:56:32:fc:11:d6:3d:81:6f:95:9f:7e:
         98:e9:20:fb:c3:c5:fe:2b:b1:99:bd:d5:8d:8b:d4:e2:74:25:
         94:90:cd:ad:da:5e:34:d9:37:05:ba:ba:6a:dd:d4:71:9c:73:
         4c:a1:0d:2b:ec:24:ed:31:3c:ff:bc:3f:9e:75:3f:42:79:ce:
         e2:4e:25:bc:84:41:a3:60:27:57:96:a3:af:65:1c:ab:fb:99:
         98:75:34:ca:9c:f8:f1:73:74:07:85:a9:57:90:c0:fc:f0:19:
         f6:c2:e5:50:62:4c:cd:3a:83:1b:6c:cb:32:ee:b5:dc:49:cf:
         60:73:53:7c:e8:45:cd:5b:82:07:6e:55:d0:7e:5f:3e:a2:37:
         0c:a5:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:53:10 2026 by rpki-client