This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          uZRsvdtyXMEnPCaJhyzy2Ypwc3KsarkhFCAR+glm/Ow=
Subject key identifier:   45:25:79:41:8F:34:EB:07:95:2F:61:64:78:6B:18:27:16:93:95:1D
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       019BDFC96D79D0B2B1370BEC27372362279D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          181D
Signing time:             Wed 21 Jan 2026 09:01:18 +0000
Manifest this update:     Wed 21 Jan 2026 09:01:18 +0000
Manifest next update:     Thu 22 Jan 2026 09:01:18 +0000
Files and hashes:         1: 22npFef-j0M49cVlWvOM23fYAyU.roa (hash: 9BoQFEFFXQE63XppyCXHiu5uKpdTCmc2QeSL3Gkzz8I=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: 6L+nwcMHdOr50IrNbGQb7lj68naqRmObnQ03CZmbWmM=)
                          3: 8oxtTnvpd2_ke4zwj7aMfBhyW4A.roa (hash: 7IjKBH0yCgpHTXLTsHrNCb/Cn+6s8o46F6a2US8IQaI=)
                          4: Q2WoaYJ2Mj_7G7I9Y6I4pPLLJi8.roa (hash: heDfoYDNIQ7bB0XJ90BIyZD9NkiqghbSq/mIzF+Kcns=)
                          5: ZBv-tqzx_gaItXN6I7J1hMlcTgw.roa (hash: BjULVWcZIgFcGGgq3BGplnOKV+IjQ8KEIr+LuLjISXc=)
                          6: jU54PtK7fmV3I1k6Zz4STzHa7uU.roa (hash: n4j20nAc1oo7iJ6xqgFI3X9jLm6gXZeE5K8K6RiRKUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:df:c9:6d:79:d0:b2:b1:37:0b:ec:27:37:23:62:27:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Jan 21 09:01:18 2026 GMT
            Not After : Jan 22 09:01:18 2026 GMT
        Subject: CN=452579418f34eb07952f6164786b18271693951d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:7a:fc:42:51:a8:ed:70:24:e5:e7:d7:2b:
                    06:11:c3:b0:ce:df:6c:57:43:02:0e:af:08:ee:31:
                    79:fb:c1:1f:7c:35:6c:09:5a:9c:0a:ab:e9:af:af:
                    73:83:31:00:c4:7b:6c:b5:a9:f7:a8:64:2e:d7:2b:
                    9c:8a:2c:f4:eb:62:c6:a4:77:c0:b0:dd:fe:53:41:
                    21:94:3d:81:d7:65:70:73:32:b2:24:3c:f0:f4:51:
                    a5:38:b6:97:9e:16:d3:2e:b7:9d:d5:ba:a1:80:fe:
                    16:b9:f7:58:b0:c4:02:44:99:40:76:62:7a:da:0b:
                    31:98:49:5b:ca:58:46:3f:33:a8:23:a8:2d:ec:e6:
                    62:a7:5f:da:73:ba:b9:dd:f0:2b:1b:8c:0e:f7:61:
                    0a:6a:f4:ca:76:3d:9c:64:e9:b4:a3:ef:aa:27:96:
                    ab:e9:46:65:26:a3:5d:4e:3b:7c:10:e8:eb:24:a4:
                    d4:55:36:f0:9a:ad:b0:6e:1c:0e:0e:2e:68:61:3d:
                    19:43:c2:d4:34:68:da:d3:d0:b1:b7:9c:e9:59:ef:
                    22:e2:5a:40:67:4f:ea:8d:d7:92:b7:09:80:95:03:
                    12:5d:ad:e6:04:4e:02:39:65:6e:5d:39:a4:59:b5:
                    f6:c3:d2:8b:f5:4e:53:e9:3b:58:98:3b:de:67:7f:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:25:79:41:8F:34:EB:07:95:2F:61:64:78:6B:18:27:16:93:95:1D
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:26:6a:85:4c:73:0f:5c:df:fb:4f:34:82:3a:46:8b:f9:
         e9:79:5f:c3:6b:1c:c0:b1:c4:fb:2d:6c:df:17:bb:d7:08:91:
         b9:ba:ae:48:65:cf:94:08:95:05:d2:00:2f:a1:e5:26:ab:da:
         07:0e:7f:db:bd:87:6b:73:31:bb:e4:e6:4f:3d:09:ee:35:95:
         69:1e:16:6f:87:55:2f:6b:a7:b0:b6:1d:05:4b:32:58:d9:b3:
         67:94:b1:f9:f3:2c:8b:ce:d4:c8:96:4c:55:1a:50:87:70:44:
         f5:94:24:7e:9f:4e:2d:24:46:46:3c:07:2d:88:69:8f:61:63:
         b5:4f:4c:e1:a5:2d:2a:c3:45:0b:d8:42:03:3f:ed:5f:93:28:
         c0:bb:d0:85:bc:0a:05:b8:3b:a3:aa:33:21:a7:67:66:c3:67:
         01:5a:9a:c7:aa:f4:f9:45:ab:99:40:ea:b8:54:a8:c4:e2:2b:
         c0:4a:ac:7e:b3:50:6e:47:60:df:7a:50:91:98:48:33:03:6d:
         f2:cb:c2:cf:4a:7b:ed:6c:8c:db:22:8a:a4:c8:18:6c:c2:3f:
         85:5a:76:af:81:76:53:f7:33:be:c3:b0:88:2b:40:76:e0:99:
         d0:49:12:fa:38:81:f9:72:09:a0:28:56:f4:6c:26:f1:8f:1a:
         73:7b:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:22:36 2026 by rpki-client