This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          0tDXFQ42LHEgbkanF2ip0rWip9e1oYb8aM8ivOe4Oy4=
Subject key identifier:   57:7A:A4:C8:FF:3E:4A:77:E1:3A:A3:16:64:F3:FB:F2:C1:93:7A:EB
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       019BF8AD0EE304642AF5A7D5DD76EAB23663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          1824
Signing time:             Mon 26 Jan 2026 05:00:49 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:49 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:49 +0000
Files and hashes:         1: IEHhAsm6Xmdej2oCP8axb9PFCII.roa (hash: HMNMX3CTbZjbh0WFm8CFNKQuDtEwRiZo1B5DzDBXjYE=)
                          2: K6dmrbU49_IjvCVVpoSCda0DtfY.roa (hash: UEb7+sC3OMpTg7SsyM1skPMy+THsMiYjl1kHjQRs2y8=)
                          3: QH92-KbfL63ctZl3QrX0nIExypM.roa (hash: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk=)
                          4: WGAML1YjI5zAxq5PEqT3x_V8_tY.roa (hash: 8+17DXSjFxcEUdFqGfGDD9sHzlrlToFKTDXRvABhK4A=)
                          5: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (hash: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ=)
                          6: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: IvZZ+Vpj8mwGBDgk63kp5noDxVD4XZnKcLSxP50bwmE=)
                          7: w_LV1njNA-V7dFXJC3guIvKUQWo.roa (hash: NrG0kBcxPmetf+3OQDVHDWFcnwtwPSHPXue1LQZ+Zbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:0e:e3:04:64:2a:f5:a7:d5:dd:76:ea:b2:36:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Jan 26 05:00:49 2026 GMT
            Not After : Jan 27 05:00:49 2026 GMT
        Subject: CN=577aa4c8ff3e4a77e13aa31664f3fbf2c1937aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:10:61:1c:54:9e:8f:7d:74:b7:f6:71:b8:
                    26:74:6f:dc:80:56:6c:52:ff:d0:7d:a0:88:b5:d2:
                    15:e3:3a:6f:e4:41:5a:5f:d2:1c:dd:30:dc:6a:5c:
                    3b:c4:eb:00:ee:29:fc:81:2e:98:23:da:ee:40:3d:
                    11:d2:34:26:64:49:ac:c9:82:de:7a:61:78:c3:61:
                    f1:63:b7:6f:c6:6b:95:eb:07:54:a8:63:d9:d8:36:
                    f4:26:d8:60:f7:a2:9a:33:f1:22:f8:3b:62:ad:1b:
                    c2:d9:36:b5:7f:27:6c:0a:d6:39:53:88:be:c0:b3:
                    61:43:76:d7:b0:ae:e7:85:5e:2e:e4:db:25:91:c7:
                    3f:96:28:e1:f8:14:1b:b6:96:be:f3:24:67:f5:db:
                    5d:a9:aa:54:89:c1:7e:5c:51:0c:8d:9d:bb:df:9f:
                    64:9c:b2:46:a4:ca:03:e8:be:2d:14:8f:26:51:19:
                    d0:f4:37:50:d6:0d:cd:b3:83:23:9c:c4:04:8e:fd:
                    40:6c:6c:c1:0d:21:ba:28:53:29:99:1d:39:f4:b6:
                    36:55:11:7a:5d:db:c0:7d:ce:82:84:77:e9:cf:b8:
                    ee:65:20:6e:b5:f3:60:76:66:98:dc:99:25:80:e1:
                    b7:ff:02:98:29:8c:d1:09:47:c1:9e:c0:6f:e4:2f:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:A4:C8:FF:3E:4A:77:E1:3A:A3:16:64:F3:FB:F2:C1:93:7A:EB
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:00:29:15:1c:17:e1:01:41:ed:bf:48:4c:30:4b:84:65:c7:
         15:dd:93:b8:df:4b:cc:fd:bb:07:2e:cd:53:db:7e:f5:da:72:
         f7:41:88:b7:e0:e7:ce:92:cf:c2:1b:ba:5a:00:1c:43:18:e8:
         13:19:c7:fd:b5:c0:e8:ab:b8:bb:9b:f5:43:82:6b:51:37:37:
         e7:fe:b5:f0:4f:21:1c:c2:be:d1:dd:cd:73:d3:dc:27:63:5b:
         ab:20:a8:8d:c6:86:24:85:3c:87:75:7d:1f:93:33:5d:a0:65:
         cb:49:b2:58:58:ca:ff:b4:d1:0b:33:3a:39:78:dd:f4:36:d1:
         71:67:26:2e:3f:ca:91:20:41:09:e4:fb:ac:54:72:17:62:55:
         0b:a9:d5:cc:8f:5a:2f:dc:96:b2:5c:ac:1a:8b:f5:a6:25:0e:
         f2:57:16:82:cd:23:6c:7f:01:24:1b:27:1c:8f:a1:69:55:16:
         c4:69:0d:38:35:79:7a:50:5e:c7:24:35:57:c6:b0:df:a2:40:
         6d:7e:c5:51:b0:ff:66:c0:ca:3a:27:99:96:cd:ac:79:7e:82:
         9e:50:94:e2:cd:5f:19:ec:36:8a:ce:ab:7b:56:bc:6f:ac:b8:
         22:da:75:35:d0:18:0e:35:0e:da:60:a7:b0:43:f6:db:d4:ae:
         33:31:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:28 2026 by rpki-client