This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
File:                     X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json)
Hash identifier:          8XSrQqX3QU2D+yIIH5JKN+ZICLI2MhSCmyNJb/iwJmM=
Subject key identifier:   6C:61:7A:91:33:DD:53:BD:E0:AE:93:C9:7A:91:31:84:8E:0F:56:14
Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C
Certificate issuer:       /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
Certificate serial:       019BF72CBCD67655585AB42FE510955D534C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
Manifest number:          85
Signing time:             Sun 25 Jan 2026 22:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:02 +0000
Files and hashes:         1: 6PCZUJB3ipwVXLiyKcyJrFQu4wQ.roa (hash: m4ynyhKu4YCsiRrg6pHmEytuHr7lJuhn9fuEsyhPlJc=)
                          2: RSn4Rta_bXNv3CwXzujbccH1OFg.roa (hash: u91EszWBmEzPPN3l4JlIjEAr3qn1UwMpor2kyeXCrvI=)
                          3: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: XnfDwLGc5M+c/tYs+opYk4OU0B2+DTae//TjyiGQu+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:bc:d6:76:55:58:5a:b4:2f:e5:10:95:5d:53:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c
        Validity
            Not Before: Jan 25 22:01:02 2026 GMT
            Not After : Jan 26 22:01:02 2026 GMT
        Subject: CN=6c617a9133dd53bde0ae93c97a9131848e0f5614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:79:1a:02:94:61:2c:32:ed:f6:36:66:7f:
                    b6:de:52:4a:80:46:d8:28:96:91:ab:da:7d:3d:7f:
                    df:2d:c7:e2:46:85:1d:a3:c4:51:c2:25:34:75:ec:
                    7a:1e:e7:7b:1f:09:f4:95:df:7d:47:fd:0f:c6:9b:
                    c4:01:ba:b7:38:e6:a3:2c:44:11:24:2a:3e:38:38:
                    c1:47:c8:64:15:f9:d8:6c:da:56:6b:52:a5:63:25:
                    17:39:40:ac:37:f0:be:d9:d6:fe:26:b6:fe:bf:a2:
                    29:6a:0d:a4:ba:1d:1d:61:b7:6d:8d:d3:72:ed:f3:
                    d4:b6:1a:14:b0:78:cf:9b:68:3f:4d:bd:5e:ca:ec:
                    91:67:c1:b9:f4:55:b7:a4:79:2f:7a:62:21:5a:e2:
                    40:4f:4f:34:c4:fa:c2:da:d9:ee:0d:96:51:f8:1c:
                    4a:84:07:94:64:ff:10:e2:59:a7:58:a9:f4:2b:3f:
                    fa:a8:32:58:be:90:b1:d0:a1:5a:3d:5c:8d:a4:c0:
                    58:85:e5:35:73:e4:9b:de:bf:46:00:08:e9:f3:31:
                    41:53:92:58:ab:14:8d:66:bc:15:f6:54:5f:b1:8b:
                    5e:67:c0:2b:ce:42:d6:eb:b6:4d:b7:73:4a:8c:8c:
                    17:00:8c:3e:71:f7:b4:8e:07:4d:ea:8d:4b:f2:84:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:61:7A:91:33:DD:53:BD:E0:AE:93:C9:7A:91:31:84:8E:0F:56:14
            X509v3 Authority Key Identifier:
                keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:23:96:b1:f6:b9:b5:50:2a:56:a1:62:10:c6:71:61:fa:
         d2:34:45:87:d4:0c:f5:35:a7:04:15:8b:73:2b:dc:10:07:b0:
         d7:b6:d7:f5:d2:06:b9:5b:46:60:32:62:16:4c:f3:45:25:58:
         ea:e9:ed:fd:53:3e:94:5a:1b:b8:04:65:59:cc:d3:7b:5e:11:
         e7:3a:80:7e:d2:55:ec:46:28:f3:c8:50:b7:5d:63:a0:eb:26:
         d3:c2:5e:ee:03:33:15:0f:36:5f:d4:13:0f:57:0a:16:03:1f:
         63:93:9c:ba:2b:9f:10:29:d3:04:07:14:59:8b:49:2b:c6:98:
         e7:ca:ff:41:a5:c6:54:bf:b5:88:7c:45:2c:44:b6:2b:c9:98:
         75:ae:1d:2a:cb:4c:e4:db:fa:1a:b9:23:4b:29:a1:9d:a1:0f:
         94:89:23:87:f7:ee:e0:c6:60:9b:42:a0:43:c4:c6:49:d3:45:
         9a:45:1f:3a:3d:32:40:b1:13:87:67:0a:98:a0:38:e5:7a:84:
         c4:f5:d6:1f:7d:2c:3b:a3:84:66:d6:75:60:f9:43:76:77:3d:
         79:98:b2:d4:61:2a:82:d7:43:8e:cd:43:c7:52:41:f6:28:e0:
         2f:ff:90:34:9b:22:c3:8f:d5:e2:6a:07:f8:95:e5:0a:5f:85:
         b0:02:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:39:56 2026 by rpki-client