This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File:                     rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier:          I27stnmRcBbaQ+vTuoAC79Gae4LTTevIrJ9oguDlapY=
Subject key identifier:   98:C8:BE:C4:7C:0E:2B:F1:24:9A:76:9C:FF:5B:53:32:80:EE:7B:52
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer:       /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial:       019BF5AC1E06515D576E6F52BC76E57B6C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number:          1573
Signing time:             Sun 25 Jan 2026 15:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:56 +0000
Files and hashes:         1: ErNXrycTzph6JSf18PtwwsQoz2w.roa (hash: JFPJWJTX9AS74O2qvrW7DFe57VW6uqTN8mG7Rp0yt+w=)
                          2: SZE5e1h7vVE1K8b37udvVnSNQcM.roa (hash: DCVuhDnUxaJKtTV6uLri/M27ey5GSqDohY5/pt5Ejsk=)
                          3: Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa (hash: GuAHOBM9mGxQz1BFFSnguR68MvXbC1uYn6q2dEBSyQ0=)
                          4: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: 929YHjDYPLfRvlfY+Y40LyQE+DBr5odqiQirBKEEU4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:1e:06:51:5d:57:6e:6f:52:bc:76:e5:7b:6c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
        Validity
            Not Before: Jan 25 15:00:56 2026 GMT
            Not After : Jan 26 15:00:56 2026 GMT
        Subject: CN=98c8bec47c0e2bf1249a769cff5b533280ee7b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:7b:c1:11:c8:19:44:88:64:3b:c4:bf:6a:
                    13:ee:1f:00:9f:df:27:2e:7f:88:85:a6:af:da:3f:
                    14:eb:13:48:cc:01:6c:83:b4:87:23:7e:4c:22:8e:
                    84:cf:8f:4a:49:c1:a3:2d:8d:71:2a:58:b0:92:52:
                    bd:12:03:49:be:08:e1:34:64:ab:fa:0f:15:78:49:
                    d0:45:f7:08:5a:66:6a:2c:70:7d:9f:9d:a8:f4:ee:
                    3d:66:22:26:91:61:80:37:06:84:c2:7d:81:45:da:
                    82:58:6d:9e:dc:89:bc:f6:87:11:20:77:06:b9:5e:
                    b0:9e:46:2f:2d:76:99:5f:52:97:16:1c:02:7b:73:
                    81:47:eb:29:92:44:6f:50:dd:08:8b:3d:26:37:9d:
                    2a:ce:3d:de:27:ef:8f:2b:06:19:e0:cb:4e:9b:1a:
                    a9:f9:62:83:ca:fa:a6:8e:55:ac:43:8d:d8:e9:d4:
                    1a:bf:ae:06:59:f0:e9:fe:e7:14:95:45:0d:40:41:
                    1d:3a:a3:8c:16:3c:b5:58:f7:9d:0b:ee:b1:8a:49:
                    fb:b7:19:fd:64:d8:23:d6:f8:30:0b:82:9f:63:4d:
                    13:7d:d9:56:99:11:d5:66:ee:da:39:54:92:12:d5:
                    b3:c3:cd:b4:a5:78:25:51:72:63:fd:43:3e:a6:30:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C8:BE:C4:7C:0E:2B:F1:24:9A:76:9C:FF:5B:53:32:80:EE:7B:52
            X509v3 Authority Key Identifier:
                keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:21:de:d4:ba:fa:85:a5:10:a3:cb:ca:9b:32:0e:17:62:30:
         07:40:fc:d8:aa:39:81:5c:1b:d2:ea:d1:5e:b0:aa:49:eb:a0:
         5b:ac:34:29:43:16:59:e5:c3:a3:43:d8:7c:e7:d8:16:b3:16:
         36:e4:10:1b:15:88:85:5b:37:6b:f3:1e:04:b7:a6:5b:9a:c1:
         c8:20:fa:69:ca:f4:59:b6:da:e3:b4:9f:38:9f:a7:f9:31:0c:
         0e:21:4a:27:b3:5e:37:8d:68:7d:b7:d9:39:b1:64:51:c3:b5:
         25:7c:37:0c:22:01:83:6b:5b:fa:f4:b1:b1:d8:f4:80:66:9c:
         8b:d6:78:36:fe:cb:94:39:98:ad:c1:1d:ae:cc:17:b0:ad:e1:
         10:58:a6:65:c6:86:94:fa:8b:38:28:8f:d6:e0:92:be:2a:5b:
         c0:1a:1d:05:21:2a:87:6f:f8:b5:4c:3c:fd:d9:f0:53:84:41:
         78:94:ef:52:88:a7:ea:2d:f8:ac:4e:df:a9:77:df:44:b1:ad:
         4c:e2:57:96:2c:0e:82:ee:86:77:25:f3:3f:6e:c0:50:3a:d2:
         be:64:fb:70:d8:cf:cf:5d:2c:bf:a7:21:00:65:c3:e8:be:a5:
         49:6e:41:30:a5:c1:ce:2c:d1:30:57:ea:c5:71:ec:72:d5:2a:
         e8:b1:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:14:12 2026 by rpki-client