This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File:                     5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier:          2jNVcLwktdsW/4U4FISlfuVE6kxgu3TAXAT2dhMk3Qs=
Subject key identifier:   EA:18:2D:DF:2F:A6:5F:D5:9A:C9:54:D3:05:E2:6F:1E:9C:A6:BE:F3
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer:       /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial:       019B9EC589A0E80ED7E8B20D71F0F96B3CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number:          1774
Signing time:             Thu 08 Jan 2026 18:01:44 +0000
Manifest this update:     Thu 08 Jan 2026 18:01:44 +0000
Manifest next update:     Fri 09 Jan 2026 18:01:44 +0000
Files and hashes:         1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: ZTlbp937YzNbNQrxuymSHJz2JU88GMgOGQUE5/71VOI=)
                          2: mt8BxRlzzPaaJ7YP89nmlvEShOY.roa (hash: 5h7uCM+sM17krF3KDYCTkEInjz6mxypULE5ia4pGUZA=)
                          3: zh2lJfC9-wfMTO9Kozt8KhhvQ6k.roa (hash: rv7yBHp8N5Gh/amJUvtJbCTehW8L+CBJUllqP/PiPaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9e:c5:89:a0:e8:0e:d7:e8:b2:0d:71:f0:f9:6b:3c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
        Validity
            Not Before: Jan  8 18:01:44 2026 GMT
            Not After : Jan  9 18:01:44 2026 GMT
        Subject: CN=ea182ddf2fa65fd59ac954d305e26f1e9ca6bef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:60:0f:92:cb:8d:4a:16:6d:f7:32:4b:51:4a:
                    4f:e3:1c:19:53:58:3e:3d:38:65:ef:66:37:c4:19:
                    26:40:ea:dc:49:fb:ef:b3:5a:27:be:90:39:81:dd:
                    95:57:17:9d:ae:08:55:09:94:03:04:0a:d0:39:06:
                    95:45:2c:40:8a:04:88:f7:d6:6f:5a:68:13:ac:4c:
                    aa:d8:f2:dd:53:bc:c0:84:03:05:c6:1a:6a:41:b6:
                    66:67:1f:75:8b:d1:fd:3a:f6:0b:78:8a:20:cb:eb:
                    51:3b:a0:ab:09:57:b9:92:66:95:19:07:d4:3e:9b:
                    4a:aa:d0:fc:04:34:2f:4b:7b:7d:91:3c:b9:53:1d:
                    58:fd:39:a5:69:b5:0b:ff:5a:dd:00:39:0c:f0:d8:
                    fe:a0:a9:ee:42:4b:6f:8d:df:1f:b3:87:1f:30:ee:
                    12:c9:98:41:f8:0b:c5:b1:f7:c9:89:3a:92:81:ab:
                    4d:94:a8:e8:c9:22:05:10:ac:27:bb:43:77:aa:6d:
                    3b:7d:45:cd:0d:37:78:4b:33:62:64:49:aa:0d:35:
                    b3:58:92:07:c7:42:01:5c:2d:5e:a6:40:c8:41:51:
                    1a:dc:72:e7:f6:1e:a2:a1:17:e2:3a:bf:86:40:4e:
                    cc:ad:fb:2d:ec:00:6c:6a:1e:4f:eb:37:88:14:fc:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:2D:DF:2F:A6:5F:D5:9A:C9:54:D3:05:E2:6F:1E:9C:A6:BE:F3
            X509v3 Authority Key Identifier:
                keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:d6:cb:99:6c:e1:68:4f:25:a1:dd:1b:40:c8:8e:d4:f1:
         3e:ab:96:38:40:33:a0:64:da:3e:22:3f:6f:c8:74:6e:63:bf:
         1d:d3:e3:16:e7:9f:7d:7b:71:76:75:43:22:ea:b1:ad:e6:2a:
         98:30:f0:c8:84:08:6e:bd:38:1f:39:b9:84:8b:d3:89:ad:b8:
         8e:6f:34:79:bc:98:3d:29:79:e0:e0:68:cd:e7:ea:e5:91:c8:
         78:dc:dd:68:6d:0c:dc:ef:95:0d:e5:59:29:bc:4e:3c:69:39:
         cf:ef:05:a5:68:a5:32:59:dc:c2:e7:bd:40:5a:ab:92:0a:fd:
         7b:b1:b1:e3:ef:8d:ea:c3:71:0d:b2:b5:10:2a:f6:e8:17:f2:
         ba:70:00:fc:df:ef:ab:e5:72:55:e9:ec:52:94:09:7f:dd:1d:
         73:30:b1:27:be:a9:78:95:94:3b:f4:0e:19:7f:52:51:06:76:
         22:b5:b8:aa:7f:52:13:47:bd:ad:4b:02:23:55:30:89:b3:f0:
         5e:d6:83:9e:8e:04:ab:b8:63:3d:35:42:fc:78:10:db:ad:95:
         2d:e3:26:ae:09:54:35:7b:b5:7b:de:3f:20:be:d9:14:c6:22:
         19:24:31:a8:42:f6:43:e7:42:46:25:82:ea:2b:7c:6f:c2:c8:
         8c:45:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:13:24 2026 by rpki-client