This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File:                     h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier:          qmszc/oG8ab9doB+oCkbKIwZyMK/dH6yuWzHEJYFa+M=
Subject key identifier:   FB:C3:9F:44:B7:8A:80:29:09:39:7D:22:DD:63:79:AD:9E:61:5F:1D
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer:       /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial:       019BFD2E6C7AED5AAF11A9744686AF269A01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number:          17EF
Signing time:             Tue 27 Jan 2026 02:00:36 +0000
Manifest this update:     Tue 27 Jan 2026 02:00:36 +0000
Manifest next update:     Wed 28 Jan 2026 02:00:36 +0000
Files and hashes:         1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: lWotSI0ymgKLFwoLMXsCEanMfntfSXhbggvnE4ub9Us=)
                          2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
                          3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:2e:6c:7a:ed:5a:af:11:a9:74:46:86:af:26:9a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
        Validity
            Not Before: Jan 27 02:00:36 2026 GMT
            Not After : Jan 28 02:00:36 2026 GMT
        Subject: CN=fbc39f44b78a802909397d22dd6379ad9e615f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:d5:38:26:a5:97:b8:ab:98:a1:5d:05:59:
                    8d:fc:e3:9c:4c:f1:39:eb:f5:0e:a2:fb:ef:56:97:
                    44:7e:bf:c3:55:52:91:4f:e5:e7:72:02:93:a7:71:
                    f1:14:f5:35:5c:02:08:fe:42:9d:25:98:f6:87:07:
                    98:eb:ba:ae:b0:1a:28:e7:c7:81:92:5c:5c:1e:7b:
                    8c:71:7e:92:51:d8:b2:1b:65:99:46:15:a5:29:6f:
                    ad:3e:e7:97:37:7d:25:ec:7d:12:79:f1:a8:41:f5:
                    67:c8:38:6b:c3:43:bc:41:da:cf:9f:a8:dd:c5:5b:
                    07:07:ef:51:76:fa:0f:2b:98:44:49:6d:c8:41:b4:
                    c2:6b:5f:b1:2a:c6:2e:0d:b1:fc:9f:94:51:4f:23:
                    85:9e:05:f4:c4:a0:95:c9:13:42:be:75:22:62:92:
                    16:4f:eb:f4:9f:b1:41:bb:6c:54:8f:e3:84:af:13:
                    b6:43:15:e6:0e:4e:f9:f7:7b:e9:19:e0:62:7c:3f:
                    f8:97:e9:72:3c:0b:8f:b2:29:95:e2:be:ec:44:23:
                    b9:0c:51:74:57:77:4d:08:0f:95:8a:19:d7:f3:65:
                    f8:5a:89:f3:9f:04:f2:db:c0:2a:2d:44:ff:91:d1:
                    9e:f7:32:17:25:41:63:c2:78:b3:fc:18:71:b5:99:
                    a5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C3:9F:44:B7:8A:80:29:09:39:7D:22:DD:63:79:AD:9E:61:5F:1D
            X509v3 Authority Key Identifier:
                keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b2:0a:10:11:26:6f:72:ae:da:1a:88:29:d1:48:fa:92:d1:
         ad:c9:84:21:c5:fd:bc:4d:26:7d:85:7d:d5:de:0b:59:13:ec:
         71:64:5b:ae:e4:75:25:72:74:6d:f0:f6:c7:d6:80:07:c9:9b:
         dc:2c:5a:8c:ff:31:43:6b:28:2b:b6:d9:67:49:54:6a:86:6a:
         5b:43:15:f1:7c:e1:60:c2:6d:40:f2:31:fa:54:8e:70:03:0a:
         45:22:a0:9b:29:08:e6:e0:de:4b:6c:e9:90:94:65:02:7b:e1:
         a0:30:3f:4d:ac:e8:b9:dc:3d:1d:31:62:c6:32:65:92:77:e2:
         13:62:2d:0f:3b:fa:47:02:ec:1e:20:46:19:67:32:c3:cc:1d:
         c6:23:16:21:04:2c:eb:e7:87:6d:ce:e6:04:db:e5:45:9f:2d:
         d6:aa:15:a3:c3:51:51:2d:07:80:ad:a0:67:be:84:eb:24:6a:
         88:3e:4b:8c:2c:57:f6:2f:2d:32:d0:ce:87:52:0e:a2:67:aa:
         e6:12:bf:2e:b2:a2:4c:91:2d:d6:23:f2:2c:70:52:a2:65:26:
         17:0f:cb:e7:9c:17:53:81:e9:a8:54:45:13:fd:24:e0:e4:59:
         17:0e:d8:7d:e3:a1:b0:9c:55:f4:ae:2d:97:19:53:4e:e6:40:
         05:70:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:55:49 2026 by rpki-client