This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File:                     s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier:          EVdFDrcyfoX2bSKmf/BK2dTiR4O632QwRhSo8jgVPog=
Subject key identifier:   2F:6D:53:B3:42:82:F9:BA:42:87:8F:B1:27:0C:31:6A:AF:DD:B8:72
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       019B8127DB595AB28504834B3EE07675D4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number:          17AC
Signing time:             Sat 03 Jan 2026 00:00:31 +0000
Manifest this update:     Sat 03 Jan 2026 00:00:31 +0000
Manifest next update:     Sun 04 Jan 2026 00:00:31 +0000
Files and hashes:         1: 4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (hash: SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=)
                          2: eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa (hash: EZHtgyXuVhoKYg4ldCwReKSDjf4sa7sqciiJnV/pNsU=)
                          3: gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa (hash: MTngT7ag+SmUmwcOQxAC0+9glcY1SoAbKgViBkJyexI=)
                          4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: +ugQ/+ap3k4IRyJAUV0eX5t5ByqtHH5bny80DePzl9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 23:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:81:27:db:59:5a:b2:85:04:83:4b:3e:e0:76:75:d4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Jan  3 00:00:31 2026 GMT
            Not After : Jan  4 00:00:31 2026 GMT
        Subject: CN=2f6d53b34282f9ba42878fb1270c316aafddb872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:55:92:c3:b0:d1:51:36:be:a1:63:6e:78:
                    65:6d:cf:37:0e:70:4a:85:4d:cb:fb:5b:af:48:97:
                    1f:d4:cb:62:6f:90:2a:7d:b7:f4:60:d7:b1:49:74:
                    21:4d:33:b7:4e:c5:4e:21:59:61:75:89:34:fe:63:
                    0a:9d:4f:f7:14:7e:20:8d:55:ff:48:d8:5a:43:b6:
                    72:85:17:36:5d:c5:4c:6e:da:21:0d:d4:1e:4e:3f:
                    88:42:e9:fa:fd:65:83:b9:4a:42:7e:11:4d:5f:5c:
                    85:0d:35:f4:3a:a6:84:d0:86:43:90:67:31:6c:44:
                    23:fd:fb:9d:09:4e:9d:d6:1d:c1:84:c9:79:20:52:
                    dd:fc:f8:e1:c1:37:3b:92:2f:8d:6e:86:a2:37:62:
                    33:11:58:de:b7:09:87:62:a9:31:f2:52:43:58:9f:
                    4d:e6:cf:22:17:49:56:47:61:15:55:ea:45:de:29:
                    4c:74:ec:35:51:73:06:0d:47:07:01:82:dc:86:dd:
                    8c:78:8b:a2:7c:44:e0:0c:4a:92:c3:5b:0f:0a:12:
                    aa:fb:91:14:47:8f:ba:30:3b:c5:c3:62:b6:a6:15:
                    f8:1e:bf:d1:53:5b:ec:c9:ab:3e:62:be:62:f6:56:
                    92:8c:27:17:55:aa:07:21:d6:ea:fb:24:8b:54:d5:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6D:53:B3:42:82:F9:BA:42:87:8F:B1:27:0C:31:6A:AF:DD:B8:72
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:13:69:54:89:50:b9:8e:1f:bb:26:a8:c0:e0:f5:2a:e0:
         93:4e:38:80:db:59:f6:95:26:0e:74:0d:43:3c:88:04:4c:6d:
         79:96:22:1d:d6:ae:6b:ce:3c:36:7b:f1:37:5d:c5:d9:fa:f9:
         9d:74:65:de:55:75:a9:31:3c:25:40:f7:d5:c4:95:84:4c:ed:
         69:1b:9c:6a:99:72:79:1a:4d:71:27:52:19:5d:75:23:e6:9b:
         92:91:74:c4:e3:c3:fe:12:57:6f:c6:5c:52:c6:8c:76:86:de:
         6b:3c:57:ad:a5:3b:ea:83:44:29:b1:9b:61:52:00:b2:8d:d0:
         f2:50:a1:c5:26:0b:83:ae:16:79:03:de:ed:a9:bf:a0:e2:75:
         4c:eb:d0:60:f2:34:6a:ad:b6:48:a9:0e:86:4c:c6:18:9e:bd:
         46:a6:cd:be:b5:5a:75:85:47:41:4a:97:f8:c0:05:10:12:c8:
         e7:42:69:31:81:b8:39:3c:19:aa:d5:9c:63:e9:54:63:b9:fe:
         99:f6:38:f4:ca:5e:a5:53:2a:c3:20:87:0e:a3:20:2c:cf:89:
         05:b3:29:cc:5b:e8:82:c9:35:c7:22:eb:8e:aa:1d:16:48:6f:
         1d:bd:ee:28:fb:87:6f:48:88:d0:9d:c0:55:6c:6d:1c:d4:e4:
         e1:d1:5e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 08:21:14 2026 by rpki-client