This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File:                     5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier:          CA8K/jDteHOm+t31esYgxLDtYb3gnotSRn1L+hc+dlM=
Subject key identifier:   06:6D:AC:82:21:C9:42:6B:1C:92:02:77:BD:59:E7:B8:1B:3D:81:55
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer:       /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial:       019B81283FD2FD7A73557C92D16B32246E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number:          153A
Signing time:             Sat 03 Jan 2026 00:00:57 +0000
Manifest this update:     Sat 03 Jan 2026 00:00:57 +0000
Manifest next update:     Sun 04 Jan 2026 00:00:57 +0000
Files and hashes:         1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: Y+S/ubQN1K0VkgI5X6d8C5TQKhjC1mG1DtkMTQ9CLII=)
                          2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
                          3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 23:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:81:28:3f:d2:fd:7a:73:55:7c:92:d1:6b:32:24:6e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
        Validity
            Not Before: Jan  3 00:00:57 2026 GMT
            Not After : Jan  4 00:00:57 2026 GMT
        Subject: CN=066dac8221c9426b1c920277bd59e7b81b3d8155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:af:e1:c7:b7:f9:b5:0a:3c:bb:9a:14:5d:
                    5e:d4:13:ab:3b:7b:d6:5f:5f:96:a2:ec:c0:98:5a:
                    f3:02:41:77:5f:35:f0:39:46:e2:4a:64:16:21:72:
                    5f:4e:8f:6d:b5:15:e9:56:29:41:27:0a:90:5d:2e:
                    43:94:1c:ce:e0:88:fc:96:21:4e:55:06:01:67:a7:
                    51:4d:c3:09:d9:e8:81:41:83:fe:4b:15:37:74:de:
                    f1:2c:94:56:4d:31:47:70:36:d0:e8:c3:00:71:f4:
                    3a:f7:ee:30:52:d8:b7:40:e0:f7:19:5c:33:e1:73:
                    ec:83:42:b4:19:96:24:4e:29:d1:46:0b:5c:1c:2c:
                    2d:47:06:20:df:1d:49:51:35:4e:1b:e6:dd:cd:f5:
                    45:ef:71:3b:c5:70:e2:2c:5d:bd:b9:e9:35:50:15:
                    38:3c:38:1b:6f:48:9c:9d:57:9c:82:e8:d8:22:c8:
                    2d:55:23:89:3b:69:ac:b8:87:17:28:79:17:b7:36:
                    70:7a:f2:a1:65:c4:44:f8:1e:06:61:bd:36:9f:b4:
                    cc:f0:8a:0d:d0:25:8b:c0:1f:40:95:a5:71:65:05:
                    81:75:b2:52:f1:0a:51:cd:f0:d5:31:18:eb:f9:15:
                    b1:f4:9e:36:57:14:2b:3f:cd:76:b8:5e:90:b5:54:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6D:AC:82:21:C9:42:6B:1C:92:02:77:BD:59:E7:B8:1B:3D:81:55
            X509v3 Authority Key Identifier:
                keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:62:18:eb:28:3d:37:32:df:e8:59:cf:3a:35:46:ec:98:b6:
         6d:60:25:72:81:4f:81:9b:72:b4:64:f1:a5:f0:71:e0:3e:7a:
         bf:41:8a:0a:aa:3e:d0:e4:41:36:d1:1e:90:eb:2b:11:f7:33:
         0e:16:ea:c0:ad:40:97:69:41:8a:01:b3:51:c5:a2:0d:54:67:
         d1:dc:b3:fd:1b:74:e6:8b:d1:32:e3:88:de:9e:91:4e:7c:a8:
         df:2e:09:d8:43:c4:2e:b8:43:ec:18:aa:7e:8c:2a:b1:d8:f1:
         4e:1f:e9:54:71:79:68:e4:ea:77:7f:ea:c5:12:fa:99:da:ab:
         41:0c:cb:ba:59:eb:8f:56:f4:1a:10:5c:bd:33:55:99:be:0c:
         9d:89:c4:67:6d:10:80:e6:b7:bd:b2:87:56:b5:a1:75:de:ed:
         1f:f7:ac:6d:eb:85:b0:c1:65:8a:09:c6:34:0b:d6:69:61:7b:
         29:d7:06:b0:0b:44:ec:b9:3f:bb:98:ec:e3:38:b3:58:fb:f7:
         57:6e:8c:e9:30:89:33:77:be:b0:f9:87:7a:7d:13:b7:62:64:
         29:b2:98:01:ce:ca:4b:50:22:d3:58:57:66:d3:9c:bf:9c:8d:
         9a:19:35:48:06:f3:41:18:b2:3f:04:fb:3d:6b:4e:47:66:01:
         27:90:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 08:21:04 2026 by rpki-client