This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          QaihXvKz91uHq+FIbxu8baxITIEbdhaNEF93dUlKCnI=
Subject key identifier:   0A:DD:26:4D:42:E4:78:AD:F2:8A:5E:59:64:07:3C:5C:36:BC:96:9E
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       019C1C150C07F294988D6B1EAE800576003C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          17FD
Signing time:             Mon 02 Feb 2026 02:01:07 +0000
Manifest this update:     Mon 02 Feb 2026 02:01:07 +0000
Manifest next update:     Tue 03 Feb 2026 02:01:07 +0000
Files and hashes:         1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
                          2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: rhOVos6Nz6OxFfwPbk5Z5t+GMa4Cr5F79fNm3uQIyP4=)
                          3: Oa_sii1Clbbek1SF0NauE94faXI.asa (hash: YEmLQlVRuHxGBIqwaUaToyDICFpczhTHLQZcRXVFos4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 02:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:15:0c:07:f2:94:98:8d:6b:1e:ae:80:05:76:00:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Feb  2 02:01:07 2026 GMT
            Not After : Feb  3 02:01:07 2026 GMT
        Subject: CN=0add264d42e478adf28a5e5964073c5c36bc969e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:be:de:b3:cb:35:a3:79:1c:4e:9f:9e:10:
                    1c:fa:46:5b:c2:22:b9:28:c0:2e:7f:31:c6:f2:80:
                    09:5d:74:31:a8:4e:93:94:97:94:78:51:35:48:7d:
                    2f:1e:ea:46:6a:27:24:3b:f2:56:7c:c3:07:72:df:
                    a4:8f:75:80:07:72:87:b2:ec:0a:44:46:d0:c3:d8:
                    9f:7b:aa:dd:14:41:33:9e:3e:00:b2:77:23:25:fc:
                    be:28:7c:f3:41:3b:f9:44:40:83:21:f7:26:7a:66:
                    98:04:8c:09:50:a4:8d:af:65:66:9a:70:47:4c:93:
                    10:3c:6f:de:60:25:e5:f3:ab:57:5f:79:84:a0:1b:
                    a2:2e:6f:84:58:f4:6e:f7:37:ba:42:0b:48:fa:38:
                    61:cc:ca:a8:50:b4:49:03:44:29:85:91:4c:a0:80:
                    57:2d:9a:4f:e6:61:84:45:e2:33:50:94:2e:34:d4:
                    f8:07:c6:0b:c3:ed:e4:62:bb:8c:23:df:42:0c:57:
                    d5:a1:fe:7a:ec:25:56:50:51:bd:57:4c:cb:a5:77:
                    c8:6f:90:a3:46:5b:0b:24:fe:53:fc:00:69:e7:c2:
                    50:18:54:cd:b4:36:3f:63:e8:58:25:e0:3d:4e:3f:
                    b6:dd:d8:65:5a:35:c7:b0:8c:9c:b5:5e:23:2c:49:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DD:26:4D:42:E4:78:AD:F2:8A:5E:59:64:07:3C:5C:36:BC:96:9E
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d7:26:1e:01:f0:0f:13:00:75:bb:42:3a:a2:09:ee:d0:94:
         cd:13:ee:70:90:e8:6b:79:1f:6c:0a:a5:55:15:a6:d0:8a:1b:
         79:8f:0f:f8:3e:bd:2d:1e:21:8f:21:7f:b0:74:38:1e:28:2e:
         53:d7:6c:46:63:ca:c3:55:8b:7b:ab:8b:55:9b:d2:0b:29:d9:
         24:78:7f:4a:19:94:df:06:e4:0a:d6:1f:3c:a1:ae:d3:90:5e:
         7d:a9:28:ef:fa:9d:5d:84:b8:f3:2a:96:f7:23:6c:8a:bf:01:
         49:56:5b:2a:21:0d:c3:ac:51:f8:42:75:d0:02:e6:27:b1:89:
         49:32:32:7c:09:26:94:6f:d5:0e:3d:8f:d8:81:97:ad:d5:62:
         2c:d7:3a:d7:42:20:9f:30:53:27:c5:a3:48:ae:0f:39:97:e5:
         dc:e3:a7:fc:eb:18:c6:96:48:f3:69:66:6a:c9:65:83:c9:ef:
         5f:34:b1:9e:97:03:c1:d3:cb:94:14:0d:b4:6d:59:b0:7f:8d:
         3c:e9:77:59:a9:26:05:a8:c3:c5:70:bc:59:e0:b6:5c:35:af:
         34:35:e6:3e:0b:c8:c2:4f:20:7d:46:30:ef:9c:68:88:79:13:
         cc:eb:c7:03:1b:b6:57:32:0a:42:12:5d:58:4d:28:b7:42:ff:
         1c:fd:68:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:15 2026 by rpki-client