This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
File:                     5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft (raw, json)
Hash identifier:          BzEau9f/YnHJmuS2FCtT3EDrVqPSj1hvbeLH9HvJ/Ls=
Subject key identifier:   DE:80:5B:6C:C9:F5:BD:53:B4:27:0C:D9:5D:7D:25:21:81:78:A6:EC
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Certificate issuer:       /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial:       019BD68F70FED60901D584A0854103238A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
Manifest number:          10A0
Signing time:             Mon 19 Jan 2026 14:01:23 +0000
Manifest this update:     Mon 19 Jan 2026 14:01:23 +0000
Manifest next update:     Tue 20 Jan 2026 14:01:23 +0000
Files and hashes:         1: 5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl (hash: xL6SCu9SK325LyPVA9HDgI/N5T7rnw1KqNfxJaxIqvE=)
                          2: AHMMR6EYDrQMxtQlnkSulO0X6jU.roa (hash: 3sv84sSITu71ClB0zVRpfx2vaESjgHX6LKDrGF5Yu28=)
                          3: oN6-8TjcpnWOi19_YcKHjgP4exg.roa (hash: XKqFhmz4qM1QAqbdgj7Ft/qb7sgIFeQcaicCKYT8doU=)
                          4: oVYqrlFhD7zcwh_F2ONVqQJ2mdQ.roa (hash: Yn6vN33kb9RjwKZiBCTU79r+CEwj1FzkLh9/leqQkWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:8f:70:fe:d6:09:01:d5:84:a0:85:41:03:23:8a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
        Validity
            Not Before: Jan 19 14:01:23 2026 GMT
            Not After : Jan 20 14:01:23 2026 GMT
        Subject: CN=de805b6cc9f5bd53b4270cd95d7d25218178a6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:9b:b3:03:dd:a2:df:c7:f2:76:9b:01:cb:
                    3b:ed:5d:5d:a3:04:d2:50:6d:c6:4b:c2:36:da:db:
                    e4:5f:8d:e7:57:07:3f:d9:a9:f0:57:25:37:57:df:
                    e2:80:ac:d3:97:ab:97:4d:f1:4b:71:0e:60:be:33:
                    cd:64:ef:e0:be:67:7d:80:07:9f:bd:38:82:99:47:
                    d0:8b:cf:f2:bc:40:1b:9b:52:a0:9e:c3:cf:41:51:
                    b1:8f:8b:1f:41:00:9a:88:14:e9:b0:be:04:e1:d8:
                    41:08:98:da:43:14:77:8a:6b:f1:9a:e6:4f:59:79:
                    dd:5c:1d:98:d5:e1:94:b5:55:63:48:96:da:01:18:
                    9d:ae:ab:e2:75:44:95:c7:90:4f:03:75:db:d5:40:
                    d4:83:95:79:2e:78:74:dc:ef:d4:58:69:46:2a:1e:
                    5c:d4:c8:66:cf:0a:da:e8:53:ca:f9:80:bf:1e:31:
                    dc:67:fe:de:5e:f0:4f:16:48:15:36:ac:f7:57:d2:
                    bb:1e:e1:39:70:92:89:43:a4:02:4e:5f:f6:43:13:
                    34:48:55:74:d5:14:a8:2a:74:8a:33:89:af:b6:fe:
                    1e:98:b0:45:18:5c:2b:e9:d5:e2:43:b4:a0:00:d5:
                    8f:9c:e8:ca:00:de:72:12:90:ab:e9:37:c5:b6:bc:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:80:5B:6C:C9:F5:BD:53:B4:27:0C:D9:5D:7D:25:21:81:78:A6:EC
            X509v3 Authority Key Identifier:
                keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:67:46:ee:3b:ff:dd:a0:3d:0e:a3:9b:40:23:30:7f:2e:79:
         47:59:b8:93:6c:7d:ac:15:08:9d:8b:8c:9a:bf:47:45:58:f4:
         ea:88:da:f0:92:ef:c9:06:83:22:4a:32:98:ef:24:85:4c:b9:
         4f:35:69:15:ba:3f:66:59:46:a1:8b:d1:02:cb:71:90:71:05:
         ed:a4:e8:61:3f:f0:cf:75:5d:c8:a9:d7:b4:b5:97:26:7a:9a:
         34:3e:22:c5:cb:2b:20:76:bd:7f:2d:f0:b4:14:03:e1:60:f3:
         4d:72:82:7d:01:c1:f4:dd:d7:89:70:90:7b:01:78:0b:3e:9c:
         5f:13:2e:cc:42:75:b2:f8:51:db:7d:17:59:fc:1c:c5:af:48:
         b4:69:ae:74:69:c6:c1:6e:c8:8f:8d:78:eb:bf:c5:df:d0:16:
         1a:73:a7:fd:c7:d2:8c:07:4e:b8:96:a6:16:0b:0a:6f:73:23:
         fb:8c:29:05:7c:11:87:82:3a:a4:90:7d:ee:e1:7c:d9:ab:16:
         12:9b:d5:3b:a4:f5:1e:50:48:2f:8c:a5:1a:fa:26:d3:31:6f:
         c7:6a:54:b0:bb:55:73:a6:41:0d:73:31:7b:c7:31:3e:84:a2:
         e4:7c:7c:db:4b:96:6d:ca:98:99:80:8f:a4:34:47:f6:cf:87:
         0b:3b:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:01:55 2026 by rpki-client