This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          b7MRwVFtxjwubp21vuu7QpzUYSKVBvuind7QJR4OLBU=
Subject key identifier:   32:B3:EB:DD:FB:9A:B5:7F:38:87:96:38:A0:75:23:0C:32:AD:A1:DB
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019C03307D89C1FAA29933350C7CF1783D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1839
Signing time:             Wed 28 Jan 2026 06:00:35 +0000
Manifest this update:     Wed 28 Jan 2026 06:00:35 +0000
Manifest next update:     Thu 29 Jan 2026 06:00:35 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: 2+e95+283WTyLy/O0B2DjFGB4q3oj2+lhxjEuB3B5tg=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: dKeJnasb-ZXSDsGqtQYSTdGDW8g.roa (hash: hdb5WqBfOFgE4JFZ+L+CLjT6pKiHBup32Mfr4W2p1ms=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:03:30:7d:89:c1:fa:a2:99:33:35:0c:7c:f1:78:3d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jan 28 06:00:35 2026 GMT
            Not After : Jan 29 06:00:35 2026 GMT
        Subject: CN=32b3ebddfb9ab57f38879638a075230c32ada1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:75:72:dd:3f:b0:cc:68:6a:f0:b7:93:d3:
                    4e:c9:14:ef:ed:a6:66:25:31:ec:c6:ec:09:15:b5:
                    b7:f8:f7:6f:0a:b9:91:4c:c6:a7:19:e4:c0:27:65:
                    34:88:08:2e:d4:d0:39:38:07:e1:ea:69:b3:70:41:
                    27:fe:5c:dd:ab:84:e5:ff:68:f8:a1:74:6d:2c:ab:
                    1b:b4:c0:fa:61:c0:0c:e5:cd:49:ba:23:bb:b1:54:
                    56:d5:83:ba:9e:6b:a1:12:47:8a:15:30:75:61:ff:
                    a3:ae:9b:fb:49:7b:da:38:55:57:2e:66:12:4b:4a:
                    ec:2f:10:34:bc:de:75:f2:9e:b7:79:ca:60:53:a7:
                    26:2b:b8:7c:6c:c1:45:f1:61:ad:c7:c8:e5:31:0c:
                    08:40:65:9a:5a:3a:af:64:aa:6e:06:6b:81:98:06:
                    cb:7a:dc:bd:7d:d1:67:91:85:ad:3e:12:1c:84:38:
                    a0:80:dc:09:8c:57:03:db:71:cc:de:73:b6:4b:a5:
                    35:c0:c8:3d:01:94:9b:60:d1:5b:b5:03:b8:7a:c9:
                    b4:bf:c4:6f:a2:17:aa:8c:3d:3d:54:2f:c9:13:21:
                    53:de:54:e0:08:94:02:28:3b:26:52:b1:5d:8d:59:
                    e2:36:3e:01:f3:22:84:7f:bf:89:97:f3:f0:ff:35:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B3:EB:DD:FB:9A:B5:7F:38:87:96:38:A0:75:23:0C:32:AD:A1:DB
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:d2:86:92:a6:0b:ae:77:7e:6d:3e:16:36:dd:43:d5:3b:aa:
         9b:83:3b:8d:a1:f1:9e:cd:dd:78:71:fa:a1:8a:71:c4:98:47:
         a3:6a:77:85:74:99:e7:a5:3f:c0:45:37:89:57:11:e4:69:75:
         b9:74:26:e2:8d:08:dd:73:91:0e:0c:db:0c:29:29:36:60:2c:
         f2:8e:7e:00:6b:a1:1d:5f:a1:75:2c:b4:14:83:63:21:3c:c9:
         ab:31:82:06:c0:87:cb:ff:ce:7e:89:dd:1f:14:68:66:cb:ba:
         a7:84:07:be:fd:b0:2c:71:1f:89:ac:41:d3:8e:a6:42:e3:9a:
         f3:e8:2d:70:4a:57:56:73:54:af:ec:3c:36:37:0c:f6:ce:0a:
         17:dc:6a:aa:ae:af:6a:3c:1c:71:92:f9:7a:4f:62:f0:2b:d3:
         7f:f3:c2:3c:8c:a4:85:37:33:71:9c:8d:c6:20:07:ae:0c:f4:
         f5:d6:17:15:1c:24:0c:6e:ca:63:60:32:f4:46:91:9a:0b:7e:
         d0:0e:53:79:4e:a8:21:d3:17:76:60:12:10:0f:56:7c:12:9f:
         f8:c5:1f:c5:dd:16:a2:1b:2e:98:d5:87:38:91:2d:90:16:9d:
         e4:32:ec:a5:57:71:ab:92:fb:23:03:31:ff:c5:23:bb:59:7b:
         21:cd:2b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 15:46:07 2026 by rpki-client