This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File:                     eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier:          zyXY0izES4LsD57rzqToIK05UPHFd7SpjRjaPQ2/E/o=
Subject key identifier:   AB:4B:D6:00:E2:ED:1F:06:AC:C4:A1:2A:49:14:B1:86:EB:F3:13:6D
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer:       /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial:       019BA75AC57DB54AE3B45DFFA15A09948EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number:          17C2
Signing time:             Sat 10 Jan 2026 10:01:42 +0000
Manifest this update:     Sat 10 Jan 2026 10:01:42 +0000
Manifest next update:     Sun 11 Jan 2026 10:01:42 +0000
Files and hashes:         1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
                          2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: He8XqTNAD/s1xm3EyRHzURhplA7gHP94GhH1M93TGu4=)
                          3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a7:5a:c5:7d:b5:4a:e3:b4:5d:ff:a1:5a:09:94:8e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
        Validity
            Not Before: Jan 10 10:01:42 2026 GMT
            Not After : Jan 11 10:01:42 2026 GMT
        Subject: CN=ab4bd600e2ed1f06acc4a12a4914b186ebf3136d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:d2:43:52:07:aa:42:61:5b:dc:a5:22:94:
                    ef:49:6a:21:91:b4:16:e0:b1:ef:5b:28:fd:d8:22:
                    d5:f2:ac:86:12:32:f1:d6:61:13:1a:35:9c:f5:d7:
                    09:c7:0d:45:77:4b:1f:cd:3a:8b:d8:ad:af:5b:e8:
                    75:9a:8d:85:0e:63:0c:68:e4:77:21:81:b3:09:68:
                    fc:8c:d0:00:63:2f:ef:81:6c:5b:74:37:8a:6f:73:
                    78:e9:2c:23:5b:5d:6d:11:33:f2:98:9c:09:a3:1a:
                    9f:63:70:d5:ef:0e:48:65:65:92:23:4c:e0:32:04:
                    9b:a4:1d:f2:f6:34:07:71:c6:f0:91:2c:b9:35:17:
                    33:f3:a3:be:f5:77:f1:4c:8f:52:22:38:3e:c3:d6:
                    51:44:fc:39:f1:d2:f6:2d:78:b7:67:95:ed:41:d1:
                    8e:62:77:8e:9a:58:5c:ac:72:56:1d:0d:ab:93:09:
                    05:3b:da:ce:29:9a:30:25:32:d2:45:0e:5e:ec:c7:
                    79:61:8b:7c:11:8c:f9:5d:2d:ec:4a:b7:33:ea:0e:
                    b8:b1:f4:87:ce:80:ac:a8:cf:94:3a:09:22:32:6a:
                    21:69:3a:cc:d1:49:44:a0:88:7f:a5:17:02:0e:c6:
                    90:a5:da:5e:34:30:d0:f5:7f:48:d7:c4:d5:f6:a7:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4B:D6:00:E2:ED:1F:06:AC:C4:A1:2A:49:14:B1:86:EB:F3:13:6D
            X509v3 Authority Key Identifier:
                keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:b8:44:ee:13:04:27:e3:5b:9f:7c:a9:2e:1e:2c:77:94:
         d1:35:32:99:5f:02:0f:d8:7b:25:c1:f2:fc:4c:3f:2b:36:84:
         43:2a:34:85:ff:20:25:57:a8:08:59:42:1c:a4:39:c1:e0:41:
         d9:26:80:da:83:e4:d8:e1:80:28:f2:a6:24:1b:ae:ce:a7:6c:
         ff:50:6b:b9:04:5b:5a:f3:ee:9c:ac:be:d0:f9:8f:d2:25:8d:
         f2:d7:07:e8:e4:7f:a7:ac:fd:8e:ca:c5:3c:6f:87:3e:43:0d:
         b4:3a:72:0a:a9:ef:97:a9:12:03:c7:e2:fc:95:b9:17:c1:22:
         72:83:c1:5a:ef:18:cf:22:a7:71:3c:6c:70:41:62:40:e6:23:
         92:62:ef:af:0f:ae:3f:5a:e3:25:2b:f6:43:b9:bd:34:d3:00:
         3f:38:a0:c8:39:df:12:ae:2b:fc:35:35:31:4f:55:a3:65:39:
         c5:36:84:28:e5:5c:32:c1:73:9e:65:00:83:57:9a:3b:28:36:
         1a:7b:fb:95:4b:e8:6d:bc:8b:0d:bd:39:1f:c9:f3:3d:c8:81:
         81:84:21:70:c4:fa:2a:fa:1e:3e:6d:e3:8c:d0:31:64:84:60:
         c6:52:f2:3b:10:ac:0c:1b:6a:3e:73:cf:54:9c:2d:78:6c:26:
         7b:21:18:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZunWsV9tUrjtF3/oVoJlI61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGQxY2E3ODc2MTMxMGFjMzlhNzE0ZmY2MmYzYjkyYjJl
NzdkOGEwHhcNMjYwMTEwMTAwMTQyWhcNMjYwMTExMTAwMTQyWjAzMTEwLwYDVQQD
EyhhYjRiZDYwMGUyZWQxZjA2YWNjNGExMmE0OTE0YjE4NmViZjMxMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXjSQ1IHqkJhW9ylIpTvSWohkbQW
4LHvWyj92CLV8qyGEjLx1mETGjWc9dcJxw1Fd0sfzTqL2K2vW+h1mo2FDmMMaOR3
IYGzCWj8jNAAYy/vgWxbdDeKb3N46SwjW11tETPymJwJoxqfY3DV7w5IZWWSI0zg
MgSbpB3y9jQHccbwkSy5NRcz86O+9XfxTI9SIjg+w9ZRRPw58dL2LXi3Z5XtQdGO
YneOmlhcrHJWHQ2rkwkFO9rOKZowJTLSRQ5e7Md5YYt8EYz5XS3sSrcz6g64sfSH
zoCsqM+UOgkiMmohaTrM0UlEoIh/pRcCDsaQpdpeNDDQ9X9I18TV9qeJ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtL1gDi7R8GrMShKkkUsYbr8xNtMB8GA1UdIwQY
MBaAFHkNHKeHYTEKw5pxT/YvO5Ky532KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgt
YjhhZTE2YjM1YzMxLzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgtYjhhZTE2YjM1YzMx
LzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgz64RO4T
BCfjW598qS4eLHeU0TUymV8CD9h7JcHy/Ew/KzaEQyo0hf8gJVeoCFlCHKQ5weBB
2SaA2oPk2OGAKPKmJBuuzqds/1BruQRbWvPunKy+0PmP0iWN8tcH6OR/p6z9jsrF
PG+HPkMNtDpyCqnvl6kSA8fi/JW5F8EicoPBWu8YzyKncTxscEFiQOYjkmLvrw+u
P1rjJSv2Q7m9NNMAPzigyDnfEq4r/DU1MU9Vo2U5xTaEKOVcMsFznmUAg1eaOyg2
Gnv7lUvobbyLDb05H8nzPciBgYQhcMT6KvoePm3jjNAxZIRgxlLyOxCsDBtqPnPP
VJwteGwmeyEYXQ==
-----END CERTIFICATE-----
Generated at Sat Jan 10 14:31:03 2026 by rpki-client