This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File:                     ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier:          kjc56IrQ/9WcW5MbUXRu2oUQekPZs7wWUakSjPey0gQ=
Subject key identifier:   2F:67:41:F4:CA:02:9C:44:E4:C5:ED:2B:6B:1D:C6:FF:99:13:DC:AB
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer:       /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial:       019BD959781994B9A7E9273910E7E44F95E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number:          0F3D
Signing time:             Tue 20 Jan 2026 03:01:17 +0000
Manifest this update:     Tue 20 Jan 2026 03:01:17 +0000
Manifest next update:     Wed 21 Jan 2026 03:01:17 +0000
Files and hashes:         1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
                          2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
                          3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: 56UWYXgMCiDgNkyxuVf/By3nbc45EUsMv9aGZxQ0wSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d9:59:78:19:94:b9:a7:e9:27:39:10:e7:e4:4f:95:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
        Validity
            Not Before: Jan 20 03:01:17 2026 GMT
            Not After : Jan 21 03:01:17 2026 GMT
        Subject: CN=2f6741f4ca029c44e4c5ed2b6b1dc6ff9913dcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:5a:96:e1:0e:85:e2:ba:1a:23:56:d2:62:
                    b6:fd:f1:50:4a:4f:84:c2:19:9c:47:6e:4f:b0:4e:
                    7a:5d:d7:50:a6:00:12:ea:c2:6f:c2:2f:00:65:50:
                    f2:12:a1:93:bd:65:5e:24:d9:f0:3d:3b:33:a5:5f:
                    9f:9a:1c:08:d0:87:64:93:e5:8c:1e:03:4d:82:94:
                    79:d7:ab:f9:c9:fc:1e:42:87:0c:64:68:66:1b:57:
                    56:b9:0e:a5:59:be:7a:4b:f6:0e:2c:89:cd:91:26:
                    89:70:60:b8:cb:0f:04:38:fa:6f:ac:5a:a0:5a:ef:
                    eb:8f:12:87:db:dc:33:ec:7d:f9:a3:2a:c0:12:91:
                    2f:b3:2a:cc:7b:0d:5b:e1:ce:ad:f1:3d:dd:3e:b5:
                    72:6f:20:77:40:ce:73:25:92:c3:96:d0:94:99:97:
                    ba:d2:a7:4c:6e:eb:69:9b:c1:07:bf:97:1a:1e:38:
                    6e:22:1c:2e:5b:4c:5f:4c:95:04:10:20:dd:44:9e:
                    0a:93:6a:1a:fe:d8:bf:82:84:84:f3:ce:cc:a2:e6:
                    50:81:17:bd:3e:26:12:37:6a:00:12:07:80:f6:4f:
                    49:58:e2:16:e3:74:ff:5c:7f:29:64:52:1e:cd:e1:
                    e4:02:f0:7a:39:57:0c:47:6f:12:4f:58:84:bd:27:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:67:41:F4:CA:02:9C:44:E4:C5:ED:2B:6B:1D:C6:FF:99:13:DC:AB
            X509v3 Authority Key Identifier:
                keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:22:3e:b7:f0:74:48:86:e8:4f:f6:ad:9a:3e:49:77:b6:
         4f:73:93:6b:3b:23:23:82:3d:d3:38:fd:92:91:f5:64:f0:16:
         ab:ea:e8:9b:e0:c6:e5:46:3b:8f:d0:4d:7c:99:cb:45:05:19:
         5b:a9:e2:7c:8d:40:e1:e7:14:8a:ba:cd:07:21:1a:b5:6a:e8:
         c1:db:5a:a7:af:13:23:0b:43:c8:d6:52:34:19:02:6f:3a:59:
         5b:7e:ee:24:44:a1:d9:f6:bd:95:44:b9:d2:18:5f:46:55:5c:
         09:56:8d:56:d8:d4:f5:f3:c5:22:b0:56:4b:da:7b:6d:e2:de:
         04:9d:1b:d4:be:98:92:c9:88:1b:3f:e7:66:e9:b9:56:a4:18:
         b5:54:7a:bc:73:c3:3e:a4:05:9e:7d:88:85:46:e2:57:d9:1c:
         60:d8:c0:97:15:f9:74:47:e8:de:6f:47:e8:c5:cf:a6:fa:2e:
         c7:88:31:8d:35:ae:0a:22:2b:01:0a:eb:44:68:4b:f5:80:cd:
         bf:32:65:e6:94:25:84:1f:85:50:a7:b5:0e:31:ec:75:e1:62:
         17:4a:40:56:ba:e1:b7:cd:be:26:d4:c2:3a:46:8b:da:20:ab:
         b9:17:9d:2d:04:b0:9c:2f:72:e9:bf:8d:a7:e0:63:80:46:f5:
         45:09:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:34:36 2026 by rpki-client