This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File:                     eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier:          T09GkhCx9NuCBYjYY28tD3aXLtxVQOLEaDWLi1YZR1o=
Subject key identifier:   DF:7E:44:78:AC:9C:17:8C:93:24:66:BF:1B:92:14:0B:BB:51:CB:56
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer:       /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial:       019C1BA6EF15D4F1AFCD9FD986086C64B130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number:          2F
Signing time:             Mon 02 Feb 2026 00:00:50 +0000
Manifest this update:     Mon 02 Feb 2026 00:00:50 +0000
Manifest next update:     Tue 03 Feb 2026 00:00:50 +0000
Files and hashes:         1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
                          2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
                          3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: JL9BlpoEBRNCqegLy2b/bbnUP1DVsM8BtP4oVwxq0sw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a6:ef:15:d4:f1:af:cd:9f:d9:86:08:6c:64:b1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
        Validity
            Not Before: Feb  2 00:00:50 2026 GMT
            Not After : Feb  3 00:00:50 2026 GMT
        Subject: CN=df7e4478ac9c178c932466bf1b92140bbb51cb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:1f:cf:f3:cd:7b:bd:d4:ef:43:58:1a:a8:
                    19:dc:4b:60:5a:ac:1d:e0:78:92:ef:42:fb:f3:e0:
                    1a:7c:57:69:8f:47:b7:4e:29:0e:e4:54:55:f1:29:
                    a5:d9:dd:8e:3b:c3:f9:cf:60:63:07:5a:a1:19:dd:
                    a9:32:40:68:1f:bb:c2:4c:d3:8f:fb:b3:9f:37:8f:
                    c3:db:f4:cf:b4:f7:b2:fb:97:8e:2b:80:64:01:9c:
                    e4:3d:95:5b:46:61:8e:5f:ab:34:ae:ba:55:b3:6a:
                    54:ae:01:f2:89:22:f2:3e:5f:aa:af:7a:01:0c:3e:
                    77:7c:ea:cb:db:e6:10:86:05:9a:a6:e7:94:e5:21:
                    1c:df:5d:00:ec:9c:fb:af:c6:48:d5:71:7e:1a:33:
                    a2:75:d0:06:d6:44:6f:ca:62:86:77:51:d5:5e:84:
                    d7:cf:2f:e5:3c:d2:83:dd:71:24:65:8b:10:b2:35:
                    73:9a:2e:af:53:ca:22:a0:a7:37:ae:3c:f3:92:47:
                    2b:da:cc:40:2d:cb:88:ba:8b:52:26:1b:b4:91:a2:
                    c3:9f:fb:e4:21:85:7e:c7:42:a6:2d:bd:c5:84:cf:
                    37:1e:68:69:a2:8a:e6:bd:4c:f3:18:19:e6:d2:1c:
                    d8:4e:c2:53:8d:b6:5f:48:26:b6:dd:a0:af:c7:a9:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:44:78:AC:9C:17:8C:93:24:66:BF:1B:92:14:0B:BB:51:CB:56
            X509v3 Authority Key Identifier:
                keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:8e:05:28:4d:37:fc:5c:9b:ee:7f:e2:37:52:da:96:fe:33:
         5e:37:bd:b3:5c:4f:5a:11:d4:d7:12:e1:ad:6f:a6:89:51:36:
         6d:10:a8:5e:a2:7e:a1:db:ed:f5:51:21:dd:8f:f6:70:dc:fa:
         20:b8:7f:45:14:e9:b0:f9:25:da:95:02:b1:02:fc:a1:6c:aa:
         2c:0e:f1:7d:87:96:b7:8f:47:4b:19:27:e5:57:f7:07:a7:cf:
         70:97:a2:62:89:3d:89:49:d8:7a:73:cd:4b:73:25:d6:8f:89:
         2d:dc:91:28:93:ee:74:9b:6a:58:04:21:cc:b5:15:5c:2b:ac:
         02:99:30:d7:91:9c:a9:0f:8e:74:f6:6e:05:27:ff:af:51:d0:
         94:50:47:a2:67:cd:5e:e5:18:8e:98:94:7d:22:ee:65:5c:9e:
         82:cf:59:d8:27:2d:7d:18:53:b6:7d:30:06:16:1f:82:53:cd:
         ab:21:75:99:38:b1:03:02:f4:45:51:4e:ef:73:69:0e:f1:3a:
         11:ac:7a:95:f4:58:d5:46:46:87:12:d6:8d:70:75:96:61:92:
         25:db:c6:84:d9:87:33:fc:a0:8c:67:10:f0:36:d9:9d:e3:8a:
         04:c9:61:8f:73:fd:e2:59:44:b7:44:57:13:ad:e8:62:4c:cc:
         17:2e:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:06:41 2026 by rpki-client