This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File:                     5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier:          Cy7kDzdq6vG+bKFl0uqIWMNrchLbMdDsnnxalgZy3vg=
Subject key identifier:   1B:3C:8E:62:BA:AF:D7:C9:D8:2C:CC:7A:C8:87:ED:B5:FA:F9:45:40
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer:       /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial:       019B7911B6C7DAF867E363B2ED26DD37F120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number:          14B6
Signing time:             Thu 01 Jan 2026 10:19:22 +0000
Manifest this update:     Thu 01 Jan 2026 10:19:22 +0000
Manifest next update:     Fri 02 Jan 2026 10:19:22 +0000
Files and hashes:         1: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: mzg4lCY1vtOsocmqwZuY+e5GvjJ8lrSf8r4OUg3OKoQ=)
                          2: XSiU7-0SbDMQ_IdA4IB6KriuE3I.roa (hash: yT0rAcntGSaWEZ0ss06gXt5M4fgq/qjh8GeO0S2AMtY=)
                          3: _pR80NWgxj4Gx0LuVsPkMkTDYZg.roa (hash: 1gS4zptz0LFHVLhrqKXAHRNkXnwAvD1HMmz81y59cx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:b6:c7:da:f8:67:e3:63:b2:ed:26:dd:37:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
        Validity
            Not Before: Jan  1 10:19:22 2026 GMT
            Not After : Jan  2 10:19:22 2026 GMT
        Subject: CN=1b3c8e62baafd7c9d82ccc7ac887edb5faf94540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:e2:0b:2a:cf:91:1c:87:dd:d6:22:ab:ab:
                    09:8f:c1:c5:fd:f0:66:45:03:4c:fc:5b:76:cb:a0:
                    4a:ed:4a:04:6b:fe:3c:5f:0b:d3:a0:95:e3:3e:a1:
                    49:b2:15:90:51:b8:78:96:d3:3a:ec:5e:0d:4a:3e:
                    4e:b7:e1:3b:1b:18:7f:28:cd:91:a6:42:c5:67:82:
                    0e:83:f5:27:b3:c2:c1:65:60:d0:70:02:94:90:93:
                    20:c2:1c:2a:e6:9d:81:f6:0c:3d:15:b2:02:6b:99:
                    1a:79:8c:a5:a5:37:7c:88:b2:78:2c:d2:7b:c6:54:
                    b9:7e:2c:b1:b7:bc:5a:25:a8:56:20:a8:ab:24:a7:
                    ba:7d:89:6d:bb:2f:22:04:ed:5e:eb:1a:ad:24:30:
                    d2:f1:35:f0:98:cc:dd:7e:65:0b:b5:71:fe:07:00:
                    5f:d8:38:f4:12:46:3d:49:6e:f8:df:26:91:b4:ab:
                    5d:59:96:3f:0c:a0:79:4f:3d:b0:b4:71:85:e0:ca:
                    65:4d:8e:e6:cc:a4:b6:84:91:95:d8:41:d6:bc:71:
                    ed:3e:0e:32:b0:01:15:16:ef:a7:38:fc:92:e0:7b:
                    68:80:60:d1:01:db:54:33:2d:fa:42:64:ef:01:76:
                    bc:33:c2:67:55:ad:cb:0e:8d:50:82:ee:02:81:04:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3C:8E:62:BA:AF:D7:C9:D8:2C:CC:7A:C8:87:ED:B5:FA:F9:45:40
            X509v3 Authority Key Identifier:
                keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:38:01:8a:cb:ed:44:44:ac:c0:26:62:22:94:b3:95:eb:56:
         9d:67:cb:9b:8f:ea:26:37:59:d2:f0:4f:32:01:8f:7a:5d:1c:
         44:c5:a9:09:54:58:ad:15:c1:1e:bb:42:a5:87:18:f0:e5:7a:
         0c:e3:0d:53:cf:ea:c4:0d:22:18:44:2e:a4:ab:d5:88:39:2e:
         42:ef:76:26:3b:ee:11:f4:f6:78:18:26:1e:6e:96:9a:b1:83:
         7f:80:b7:f8:7d:dc:ec:31:ac:53:c6:75:4a:4a:4d:2c:53:0e:
         45:24:28:b8:43:37:5b:46:80:a9:2e:e6:3e:43:3e:24:d6:9d:
         f4:a4:e9:0a:6e:a8:25:f1:65:df:ae:49:b4:4a:6f:46:05:71:
         70:ee:33:4b:38:72:ab:5d:55:1c:dd:44:13:71:9f:31:2e:16:
         fd:a5:d7:8b:34:81:ad:c6:44:68:5e:91:d8:90:e0:3c:99:8c:
         6e:66:5e:00:57:00:9a:4a:85:ae:e8:fe:84:9f:e2:98:3e:a5:
         45:68:ed:39:54:3b:3d:2f:7e:0e:fa:66:5d:c4:29:fe:70:ba:
         1e:8b:ab:af:15:fa:3e:da:81:37:d4:97:d4:84:f7:4c:20:5e:
         eb:0f:ec:af:84:be:46:77:bb:b1:fa:d2:4b:67:df:0f:c2:d4:
         7b:cb:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 15:42:16 2026 by rpki-client