This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File:                     _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier:          Vn86cA6R2NHim4VH9qRB/J6YskuXPhZ4L3QQxbAOeJw=
Subject key identifier:   26:E5:4A:77:BA:75:75:30:B5:34:46:DC:09:0D:B3:FF:0A:F8:C8:DF
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer:       /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial:       019BFD2EA2B5D1A80CA47B62024CB816F302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number:          0D9B
Signing time:             Tue 27 Jan 2026 02:00:50 +0000
Manifest this update:     Tue 27 Jan 2026 02:00:50 +0000
Manifest next update:     Wed 28 Jan 2026 02:00:50 +0000
Files and hashes:         1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
                          2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
                          3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: O/czcVWhRu0m6IAuBR74zNq7puuPE5BXWPCV3W9LuTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:2e:a2:b5:d1:a8:0c:a4:7b:62:02:4c:b8:16:f3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
        Validity
            Not Before: Jan 27 02:00:50 2026 GMT
            Not After : Jan 28 02:00:50 2026 GMT
        Subject: CN=26e54a77ba757530b53446dc090db3ff0af8c8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:c4:5f:1f:4a:da:63:0b:ef:2c:9d:d6:d8:
                    e9:ed:ea:cb:53:8c:94:14:92:95:d6:1c:5a:b2:7d:
                    53:c4:75:d3:bc:0d:90:00:db:2b:95:e7:f7:3d:6f:
                    a3:e0:b8:8e:71:fc:60:92:ea:e0:a4:16:1b:4c:46:
                    8a:f9:41:08:85:1e:9d:ce:46:4c:1d:3a:4b:07:1e:
                    80:8b:8d:e5:c2:62:e0:4c:26:5d:7a:30:04:26:9c:
                    d3:45:6e:75:82:ef:52:3b:ba:3a:fc:f3:40:74:2e:
                    48:b4:0e:45:df:c7:d9:3d:76:e8:10:3e:c4:7b:e7:
                    f9:af:76:7a:59:aa:21:6e:0e:90:25:74:32:d8:a9:
                    d1:05:6f:29:01:1c:67:71:b0:16:f1:1c:7e:58:d6:
                    87:17:7e:9f:a3:76:e2:40:b9:00:91:cb:ae:82:91:
                    42:64:56:a5:31:54:bd:e5:30:ce:52:89:db:d3:5b:
                    c2:d5:fa:ff:6e:fc:36:2d:67:57:14:e3:50:cf:e3:
                    d9:3a:1a:80:df:ad:13:d1:63:c8:9a:22:38:dd:4d:
                    1d:33:b5:74:17:97:07:ad:25:93:63:51:10:9c:cc:
                    2a:0c:af:1f:26:30:73:bd:2f:95:fb:8b:20:c9:af:
                    9d:54:a8:da:38:ce:c3:48:89:e6:21:df:c0:b9:b9:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:4A:77:BA:75:75:30:B5:34:46:DC:09:0D:B3:FF:0A:F8:C8:DF
            X509v3 Authority Key Identifier:
                keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:76:3e:15:81:e7:8b:5e:11:fe:fd:37:5b:ab:20:65:28:
         5c:66:96:f2:5b:67:3f:2d:1a:d2:01:47:9b:8c:25:c4:03:d6:
         6f:00:4d:13:17:ac:42:42:b5:aa:48:63:79:cb:a3:7c:68:44:
         9a:a1:54:ee:9e:21:34:d4:83:08:19:8a:5b:26:91:55:63:7a:
         6b:13:5e:34:26:94:7f:e9:06:a0:36:2e:04:d5:e0:cd:53:31:
         45:31:26:eb:9f:0d:47:2f:8e:58:d4:26:19:96:79:48:76:f7:
         9d:d8:29:59:af:51:fe:da:97:76:a7:73:9b:73:67:39:84:6a:
         e2:e7:9e:85:62:34:20:42:5f:b3:e7:35:93:6f:eb:15:d7:3b:
         3e:ba:58:7e:1b:ee:d5:3f:53:cc:e1:51:1e:69:3e:29:50:94:
         ae:94:07:21:26:28:3d:e9:94:f4:cf:82:28:f2:6c:81:07:72:
         f2:db:73:8e:51:ea:a3:f3:4e:da:79:2c:ab:7b:4d:f5:8f:c1:
         58:33:a4:48:9d:c3:12:4c:48:92:a1:97:d6:58:fd:c9:1a:90:
         67:13:2b:d6:c2:bd:47:38:fa:85:91:3c:f5:f0:18:54:0e:b4:
         a0:c0:0f:a3:ec:62:ed:f3:b1:34:7e:2e:87:24:a4:2c:2c:91:
         02:9a:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 10:42:39 2026 by rpki-client