This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File:                     53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier:          5iHq1oquip/XoNisTVG7O6c7HIakt+5QSUhQ23FE460=
Subject key identifier:   7E:7C:3B:A1:CF:38:D9:88:B1:0F:30:72:1F:39:B9:51:E3:A8:6F:E3
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer:       /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial:       019C20CD4CE3F34A778243EA72DB60CBEE52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number:          0412
Signing time:             Tue 03 Feb 2026 00:00:51 +0000
Manifest this update:     Tue 03 Feb 2026 00:00:51 +0000
Manifest next update:     Wed 04 Feb 2026 00:00:51 +0000
Files and hashes:         1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: 7Y3vaItpU/tQPZwqi1fLteMiu+EqxtF29QJl+vW9OPQ=)
                          2: TQEZqwqBvL5LSKJlBpz9ZlwxI2k.roa (hash: h28Y5SLCkXSu2nNw0njBdHdQWxez9aqEeYAyLE+jLNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:cd:4c:e3:f3:4a:77:82:43:ea:72:db:60:cb:ee:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
        Validity
            Not Before: Feb  3 00:00:51 2026 GMT
            Not After : Feb  4 00:00:51 2026 GMT
        Subject: CN=7e7c3ba1cf38d988b10f30721f39b951e3a86fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b0:af:d1:0a:04:75:8b:c0:31:63:7e:e4:32:
                    66:ae:08:ab:22:8f:8d:b1:3a:23:af:0a:9a:57:28:
                    a1:ff:9c:29:f3:55:cb:db:ae:50:5e:a9:ef:62:50:
                    a8:bc:d4:47:2b:89:ef:a6:b7:0c:7a:e3:88:71:e5:
                    3f:59:7b:3a:32:99:5f:d4:2f:bc:ba:32:66:5a:0e:
                    a2:87:03:f8:56:7f:ed:99:76:3b:13:26:2f:50:45:
                    39:75:5c:b6:7d:06:a0:f9:fb:c9:97:6c:50:d2:fc:
                    44:e8:57:54:22:57:b6:87:72:ce:28:21:0e:be:c8:
                    9e:5c:03:01:dd:91:cd:a1:d6:08:c9:60:bc:66:10:
                    77:7a:74:a0:56:05:33:06:58:c0:06:72:5d:1a:cd:
                    af:fc:bc:a6:69:61:0a:b8:62:ce:21:7b:f9:fb:84:
                    15:28:37:0c:12:c5:c5:e1:41:8d:ab:42:00:1a:b5:
                    5d:99:66:f8:52:82:ef:a5:8a:c9:c4:fc:81:b5:7d:
                    f8:83:c1:e8:29:26:dd:50:41:40:c7:4d:8c:85:b6:
                    1c:26:51:30:f5:3d:21:d1:ea:0c:4c:d6:fa:bf:9d:
                    f0:42:f1:43:37:56:01:d4:c8:10:fe:aa:82:89:5a:
                    15:84:cb:cd:bb:e8:9d:28:e7:ea:7a:a3:9a:5f:7b:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:3B:A1:CF:38:D9:88:B1:0F:30:72:1F:39:B9:51:E3:A8:6F:E3
            X509v3 Authority Key Identifier:
                keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:89:a6:64:8e:38:b1:7d:2e:cb:8f:b2:ac:29:04:39:42:6c:
         6c:e8:57:02:18:b2:88:49:8d:f9:69:25:72:84:28:69:d9:61:
         4a:70:9c:1a:e4:ab:32:f0:ca:16:85:fd:9f:57:25:9e:0b:65:
         be:64:46:27:ff:a5:26:94:1f:f8:f7:21:8f:bc:a6:1a:f2:ea:
         95:ce:d7:23:b7:a6:15:7b:36:1d:83:d3:6b:a1:2c:9f:9a:92:
         ee:3c:72:ca:09:6c:38:87:cf:78:c2:1b:5a:e0:b3:2b:d2:85:
         92:a5:7b:e3:b2:9e:04:a0:09:40:7b:62:b6:c0:00:94:a1:1f:
         4c:00:62:32:3d:7c:77:68:27:61:33:06:2e:75:36:d2:d7:09:
         f5:de:22:03:e8:dd:2c:48:94:f7:c2:22:f0:f5:2e:af:35:45:
         b5:8f:17:33:2b:68:9c:e0:e3:ec:0c:dc:aa:e8:41:84:0b:4b:
         48:2a:c1:28:87:8b:94:1e:63:c1:f1:60:81:ee:7f:1a:11:c8:
         d6:86:6e:63:22:52:4f:d7:1d:d9:a3:18:fd:8a:19:cc:d1:43:
         32:b7:12:84:93:2b:1b:52:a3:35:32:eb:6e:68:29:44:dd:78:
         5b:4d:88:c3:21:37:5b:55:c1:c8:fc:b9:dd:df:3a:2a:b2:63:
         8e:1a:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 03:53:13 2026 by rpki-client