This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File:                     rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier:          jDrxaPFruaU7SKIDBg4Km9DyUx+TB51fUTmhh27PVpU=
Subject key identifier:   1E:25:26:CB:B5:BC:6C:4F:3C:D2:E3:D2:6D:49:64:94:65:D9:DA:02
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       019BF91B33E0A2052AC7BCAB3DC62A564A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 07:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:07 +0000
Files and hashes:         1: Yk8K_yjB7gE3OoJVuZNkwQupR_M.roa (hash: tY5f7xqEp6Riff6tKlIsz63Q7nyfWnAQu/RKC5YJYpg=)
                          2: ax2msnEEnBpql0wtfN6LKLilaEw.roa (hash: khBC79DhTJMtOh4PAW+/zA1ZipTlEKexyh0uRxokVU8=)
                          3: k26mF9MmuzhiFpBjSAPIbbJx6NA.roa (hash: expI8ju4pO9T2VDPcQtkx64FF7f+z+QlEkn5dvh9hp8=)
                          4: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: 3XQbJxCrKHgqmcZygR2o6oJJJU7FZy3iHX4seOs/Aac=)
                          5: u1kMFExxSy9w7Ndw_xKckqwMp50.roa (hash: fWU8uqj9vLth8eAvIcefHvbFMC/gjcfidrkqDKu8wEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:33:e0:a2:05:2a:c7:bc:ab:3d:c6:2a:56:4a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: Jan 26 07:01:07 2026 GMT
            Not After : Jan 27 07:01:07 2026 GMT
        Subject: CN=1e2526cbb5bc6c4f3cd2e3d26d49649465d9da02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:b8:39:51:9c:85:7f:1d:e2:0f:58:ae:ba:
                    4d:2b:c0:80:6f:a5:08:e7:ff:0d:18:08:26:f4:c3:
                    69:fe:81:4d:4b:77:49:56:36:ab:81:c0:4b:70:16:
                    99:58:7e:1a:c0:7d:4d:8e:e2:d5:68:60:e0:e5:83:
                    a8:1f:70:65:37:5a:7b:1d:45:bb:9a:f0:6c:f4:f4:
                    e0:52:97:6e:db:d3:ce:25:9c:d9:2c:d1:2e:0d:1e:
                    b7:1c:ee:f6:b4:e9:9c:9d:7b:1a:db:a7:41:d6:d1:
                    c9:e6:78:11:b1:ff:39:ba:43:d6:18:be:69:6c:28:
                    46:d1:9d:ac:18:cd:46:1b:02:4d:de:ad:93:8d:cc:
                    ac:57:9c:b4:1f:85:a2:46:95:10:44:1d:10:d9:2a:
                    98:ae:e3:07:e4:33:d0:35:b6:98:19:58:5b:91:ac:
                    30:d2:fc:a4:23:de:10:5c:8a:aa:56:c3:00:bb:e2:
                    f9:63:9c:2a:e8:e4:c8:c0:8d:52:2b:40:c0:cd:9d:
                    0a:ef:8d:d5:37:73:3f:f6:d7:ab:a4:e8:68:5f:c7:
                    f3:53:fc:80:aa:4b:ac:8f:dd:b6:4f:17:22:14:32:
                    a5:12:b4:38:d5:3b:1f:b0:a2:0b:d8:a3:ef:bc:13:
                    69:e6:e2:92:2a:0f:2b:6a:c8:40:ba:27:18:7d:cc:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:25:26:CB:B5:BC:6C:4F:3C:D2:E3:D2:6D:49:64:94:65:D9:DA:02
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:63:a4:74:19:5a:f6:6c:f0:fd:5a:48:13:86:7a:a4:bf:43:
         7e:87:ce:85:48:5b:0c:7a:76:99:b4:14:de:f2:6c:92:73:a7:
         48:af:44:75:f4:f5:8e:02:f2:7d:f8:d8:36:e5:93:0f:c8:e6:
         b9:6d:e2:9f:98:81:3b:6e:04:d0:5d:48:90:54:21:0e:a3:3f:
         b5:94:67:84:01:82:d4:33:b6:ca:7c:50:92:23:12:02:eb:1a:
         2d:2d:80:99:40:c4:12:89:b6:2f:e4:cc:a1:38:e6:0f:47:f4:
         91:a6:48:6c:4b:37:ae:61:71:bd:af:3d:65:f7:dc:c1:60:6e:
         88:66:83:06:6d:34:13:c5:c4:74:76:39:45:54:15:ec:bc:78:
         11:ca:76:27:8e:33:f8:c3:90:d2:0e:c9:cd:0b:23:19:df:35:
         c7:35:cf:b0:e7:92:8e:ab:84:d7:f4:01:61:8d:17:01:9a:f1:
         f0:bc:9b:ae:91:64:65:6a:23:5f:72:42:bb:9e:fc:6d:da:fc:
         3b:06:89:55:c5:ff:56:4f:d4:c2:a1:f1:34:76:b3:fe:0c:fd:
         64:8e:ae:55:f5:68:9d:6e:d5:15:12:2c:a9:0d:01:b7:53:eb:
         4f:e3:4e:27:21:43:9f:c7:8b:45:5a:0b:71:7c:ca:07:15:42:
         f0:29:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:52:46 2026 by rpki-client