This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File:                     5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier:          wWcPG/5IM2aRa0P+FZZNAHfgqQmtlsKqWpthX+fzoqk=
Subject key identifier:   1B:51:E2:F6:30:D5:7C:0A:80:34:FE:11:A9:70:A7:D7:6E:D4:43:63
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer:       /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial:       019C1C14EAC8E96973E63D87FB7ACDBA3576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number:          17FD
Signing time:             Mon 02 Feb 2026 02:00:58 +0000
Manifest this update:     Mon 02 Feb 2026 02:00:58 +0000
Manifest next update:     Tue 03 Feb 2026 02:00:58 +0000
Files and hashes:         1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
                          2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: 5JsFYlnjZU/O7bUJCeCQkW80VsbUdYaYRiBws8Wrtak=)
                          3: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:14:ea:c8:e9:69:73:e6:3d:87:fb:7a:cd:ba:35:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
        Validity
            Not Before: Feb  2 02:00:58 2026 GMT
            Not After : Feb  3 02:00:58 2026 GMT
        Subject: CN=1b51e2f630d57c0a8034fe11a970a7d76ed44363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:01:43:e7:d5:9f:9e:58:94:c6:8b:20:6b:
                    92:64:8e:21:64:8c:52:58:f1:7b:7a:59:ca:00:16:
                    5f:39:0d:cb:9e:1f:df:44:26:ed:d6:a7:19:63:56:
                    cc:3d:f9:e5:63:1b:90:75:d9:df:80:bd:11:35:74:
                    f4:36:d3:ab:2d:8b:87:0c:52:89:6d:18:be:6a:ac:
                    e5:73:a0:68:08:64:aa:5a:b5:39:d0:a0:11:f3:9f:
                    47:98:16:ff:ef:f6:35:f3:62:9f:0f:d6:e5:a7:ad:
                    7a:91:ee:4e:6b:9a:62:0f:9e:5a:ec:9f:a4:35:95:
                    26:90:0d:ac:83:bf:07:41:d0:b1:b4:81:fd:47:c6:
                    d6:bf:44:6a:49:fa:9a:59:96:35:b5:d7:a6:25:ec:
                    56:eb:e9:0d:77:b6:d7:ed:70:ce:61:b9:a2:34:87:
                    09:ab:5d:4b:85:88:a8:a6:0d:33:c8:d1:dc:28:da:
                    c2:d6:1f:e0:a3:a8:87:5c:ab:80:56:cf:56:17:02:
                    49:4a:bd:cf:7d:2e:b3:de:99:39:7f:88:75:5c:f2:
                    76:26:49:fb:ad:24:4d:bc:0f:a4:6e:66:01:af:9c:
                    17:92:6b:eb:39:8a:d4:f3:8c:c9:91:f1:11:27:a1:
                    a3:6d:9f:f9:55:5e:f7:fc:6d:47:a5:a3:68:11:67:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:51:E2:F6:30:D5:7C:0A:80:34:FE:11:A9:70:A7:D7:6E:D4:43:63
            X509v3 Authority Key Identifier:
                keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:24:27:05:1d:3a:77:74:42:c6:92:62:e3:4c:c2:a0:36:71:
         d5:c9:31:e8:42:48:dc:9e:ac:2c:2b:cf:82:ad:6c:ae:43:91:
         f7:1a:01:25:9f:30:fc:17:f4:f6:37:82:28:ba:ab:d1:bc:17:
         3a:e9:e8:2a:25:5a:ac:9d:76:23:ea:ea:da:dc:02:81:a8:e3:
         4f:d9:ea:ea:58:24:97:b2:a9:5a:c0:ea:ae:27:87:50:1b:2f:
         19:bb:d3:fb:f2:69:1e:a8:7f:21:8c:47:49:96:a0:7f:68:91:
         85:0f:7d:7d:86:b4:4c:d2:a4:46:cc:ea:ef:97:4d:70:3d:14:
         88:32:34:3e:9d:31:ce:61:e8:2e:e5:cf:a7:a2:18:30:4d:49:
         73:6d:ec:e2:ef:8e:32:5d:ed:60:e7:b9:43:e1:28:2a:2e:df:
         29:36:8e:17:b2:62:c9:e9:fb:d2:10:a2:03:4d:22:bf:bd:20:
         8f:0a:25:59:d1:19:27:07:83:42:3f:46:6c:0e:d9:93:01:2a:
         80:7d:17:48:df:ed:58:4d:a4:0a:49:9d:9c:59:70:8b:2c:f6:
         4c:db:26:60:92:0a:aa:dc:56:ff:82:d5:51:1e:62:51:84:1e:
         95:93:5c:34:17:06:4a:39:65:07:e1:5c:20:e2:e4:e5:b0:04:
         0b:11:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:49 2026 by rpki-client