This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File:                     XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier:          2f5ZkTm7ogpzZdW1xCpVUosSI/HxX1fuPCVfI4TJzPE=
Subject key identifier:   8A:AE:0A:82:75:1F:5D:4C:2C:C4:68:70:62:82:6D:7E:AF:5C:AD:AD
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer:       /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial:       019BF8763731F6E67FD951FC97543D3C63B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number:          124B
Signing time:             Mon 26 Jan 2026 04:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:55 +0000
Files and hashes:         1: LlXWpROIqtL6tp6Aj-IFy29MFjs.roa (hash: KdLr/tJ9VzR7ewN9N+GnPwm/+RI9By2q5ZnpA8EcZVY=)
                          2: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: exdDz0pbXfnQ4jS3vqOvug3y1jobgAXrMmcl5HcZkr8=)
                          3: YiSRyD3T9EqkxC_vsLTbpd4-1ic.roa (hash: rH3OH+nKD7gxgdOxb/Eod9szmTSLhYFd7UVaSZRZpws=)
                          4: v5AikuLbt2o2wZFx81AkxLKlbbE.roa (hash: 7KPccZgy5MWb3ejH0HLnxvwj1pO1ZpFKozpP20aOke4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:37:31:f6:e6:7f:d9:51:fc:97:54:3d:3c:63:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
        Validity
            Not Before: Jan 26 04:00:55 2026 GMT
            Not After : Jan 27 04:00:55 2026 GMT
        Subject: CN=8aae0a82751f5d4c2cc4687062826d7eaf5cadad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:e7:9a:17:24:53:62:3c:b6:ad:22:71:0c:
                    7a:80:49:c5:6e:a2:26:30:2b:35:ee:93:43:24:a4:
                    c1:0c:0a:6e:56:45:d1:9e:13:a0:ea:95:39:ae:db:
                    2d:d2:3c:d8:7b:de:cc:1a:dd:53:e4:6c:5e:95:79:
                    18:ab:55:a7:08:b7:03:e2:20:72:7c:47:6e:86:70:
                    ba:5d:a2:91:6b:1e:40:c2:da:84:b4:31:34:fa:8a:
                    34:bb:d0:7e:29:37:26:4d:c7:ea:87:37:82:a8:ad:
                    80:92:51:3f:c6:49:83:20:d8:0f:09:4b:d3:24:5f:
                    5d:5d:c8:d9:f3:6b:3f:37:a2:6d:00:21:51:be:ed:
                    bc:64:1d:82:8f:99:c1:3e:68:a4:62:64:5e:f1:ce:
                    33:c7:1a:4d:f7:55:3c:26:3a:50:b7:ee:37:eb:98:
                    5e:7f:15:46:74:06:15:b0:8e:4c:4a:56:ec:05:6f:
                    b5:49:0a:c7:3b:58:70:53:10:44:3e:d0:be:6a:44:
                    2f:7a:ec:ea:5a:9d:66:bf:d1:14:8a:9d:26:43:a2:
                    44:98:66:53:d4:ee:34:43:d8:ad:ed:0f:60:d6:1a:
                    66:51:94:35:88:51:57:f4:7b:05:57:90:a1:b8:d2:
                    4a:e5:0b:ad:95:3e:df:e8:fc:5d:20:e0:3b:96:d7:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AE:0A:82:75:1F:5D:4C:2C:C4:68:70:62:82:6D:7E:AF:5C:AD:AD
            X509v3 Authority Key Identifier:
                keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:78:dd:fb:b7:54:a3:c5:3f:d5:f4:a3:1c:b6:14:24:23:e2:
         1a:25:17:19:79:a9:a8:48:c2:26:8a:fe:c7:4e:91:ac:37:33:
         a5:60:63:c9:2f:c3:1f:34:60:6b:52:48:e5:ce:11:73:f5:e6:
         45:12:24:ab:76:07:36:0e:09:f2:b1:19:55:c6:c5:77:98:ac:
         e9:b7:b1:a5:7d:19:77:dc:27:16:81:89:dc:2b:32:4f:f7:a4:
         03:9b:37:92:4f:71:4c:49:06:91:85:ab:60:80:d7:2c:b5:0d:
         a7:e5:08:98:a8:6f:d3:68:c8:88:fe:b5:8c:8f:28:9f:45:4f:
         9c:a3:ed:93:dc:0e:a6:05:18:98:b7:ad:46:d1:18:c5:0b:a5:
         d1:aa:b0:3d:de:58:33:db:c1:14:7f:cb:26:be:7f:17:3e:20:
         3b:0e:1f:1f:94:9d:7c:5a:f9:50:98:68:fa:8b:e7:db:35:f3:
         fa:2d:c5:d4:1c:86:95:1d:3d:b8:c2:3d:d9:df:78:30:8e:17:
         6f:8e:74:63:f6:6f:81:34:78:f1:05:16:a3:de:c8:2f:16:0e:
         01:e3:3f:33:9e:39:a8:0c:b6:da:59:e2:c1:c4:03:43:83:4c:
         57:7d:47:79:d7:45:6d:68:b6:f2:6a:cc:04:d9:70:cd:c3:8e:
         40:2b:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:45:56 2026 by rpki-client