This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File:                     5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier:          ufD7y8psoHanXN1Uhfn2fcqP+iyfse7j2m6nDXkMbLM=
Subject key identifier:   75:89:FF:84:01:2F:DC:E9:9F:D5:70:74:3B:FF:F5:5A:C0:D5:AC:B1
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer:       /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial:       019BFA9C4C3C024517E54232306FE9B2EB72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number:          07EC
Signing time:             Mon 26 Jan 2026 14:01:45 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:45 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:45 +0000
Files and hashes:         1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: Kh7yACuXhaW0mAaaEZlMaPtnb4J8IMQpbmB+aC/3zbg=)
                          2: om31b6FWDBGxEuwor71QHsugvxY.roa (hash: nmUcpfkGCJ2B9JhtJKk02OVz3WisKOfii97PhUxXZVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9c:4c:3c:02:45:17:e5:42:32:30:6f:e9:b2:eb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
        Validity
            Not Before: Jan 26 14:01:45 2026 GMT
            Not After : Jan 27 14:01:45 2026 GMT
        Subject: CN=7589ff84012fdce99fd570743bfff55ac0d5acb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0e:65:d0:e9:99:86:ca:8e:22:c9:29:9e:54:
                    bb:b0:28:75:04:5e:f3:bc:55:4f:aa:54:a4:25:00:
                    4b:1a:57:5f:6d:ce:40:38:81:22:2e:b9:bc:ae:c0:
                    6b:69:8c:f4:b7:7b:23:f5:de:13:8c:50:d1:53:f7:
                    3f:0a:6c:d0:c5:8b:79:eb:80:89:f8:b8:20:f9:03:
                    32:b2:ae:a8:31:a7:42:9b:42:74:1a:cb:35:66:54:
                    7e:fe:87:97:97:4e:ca:8e:03:31:2d:5b:ed:bd:ad:
                    f1:95:b3:74:d0:56:61:83:8d:fe:fb:c7:06:9c:57:
                    e5:0e:33:9a:d8:ec:39:ed:36:a3:da:7c:12:cd:4e:
                    b5:5c:a3:d1:f5:42:34:d7:0d:14:a7:f1:bd:d8:05:
                    96:d5:20:ae:a7:6d:b1:2b:99:d6:58:55:8c:21:20:
                    25:1d:2a:9d:4b:59:59:cb:61:49:04:2f:bf:e0:01:
                    2d:ff:b1:d2:de:b7:60:33:31:e2:91:3c:fc:d6:78:
                    01:76:83:87:92:d6:a5:38:5c:5f:c8:b9:18:af:70:
                    1d:22:7c:4e:a9:ac:47:06:98:13:6f:28:22:e0:3b:
                    1e:22:ba:5b:1a:c9:a3:e7:47:cd:65:04:e2:02:54:
                    6d:ce:93:40:27:03:20:ab:dc:4f:82:24:b5:6b:c4:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:89:FF:84:01:2F:DC:E9:9F:D5:70:74:3B:FF:F5:5A:C0:D5:AC:B1
            X509v3 Authority Key Identifier:
                keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:60:2e:b5:6c:47:ce:b9:e6:e9:71:66:42:37:d4:be:2b:cb:
         e0:21:e6:cd:3e:b9:16:0e:a4:ce:15:85:26:75:0d:79:83:36:
         db:c0:5d:31:a3:89:22:7e:a3:3b:9b:6e:d6:bb:c4:1f:ef:1a:
         63:94:c9:28:a3:99:de:15:3d:92:e5:36:27:e6:93:f8:11:4a:
         6d:90:89:bb:99:4e:c2:e4:6b:e1:dd:93:68:b5:55:bb:35:95:
         62:71:bf:c2:08:80:3f:6b:1f:4d:3d:72:9d:00:49:36:fb:55:
         f0:21:23:74:fe:08:c3:66:89:7e:21:d3:64:c5:ff:a7:00:89:
         0f:cd:82:64:40:24:37:95:9e:d7:b6:70:80:3a:e7:df:ca:f1:
         3b:ce:4a:fa:67:dd:38:44:ae:cc:a9:5a:c0:85:ca:21:d9:84:
         c1:a2:03:90:e3:24:57:f1:65:4b:c6:45:76:31:e0:d9:d1:0d:
         37:cc:e3:26:71:a5:b9:57:2d:e8:3a:6a:24:d5:22:c5:a6:00:
         a1:ee:f2:42:8c:ca:0d:fd:a9:6b:be:a1:b1:4b:f8:60:d7:42:
         99:7f:93:a6:5c:fe:94:60:4a:02:27:b6:12:e0:8e:6d:0a:12:
         dc:3b:01:10:3c:8c:46:79:e0:4a:ee:eb:35:bd:c4:f5:c0:a7:
         7c:f0:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:29:52 2026 by rpki-client