This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          mWJ8bScD2MJf3hgbAeMAcML0XzB4kpS2jTfLrhL43fQ=
Subject key identifier:   BB:9C:03:8C:DF:A0:8C:F8:03:79:00:EA:BD:B8:BC:E2:73:3C:F5:A7
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       019BFD9C42C11CDAC707F3FD36C4223B5D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          0FA8
Signing time:             Tue 27 Jan 2026 04:00:34 +0000
Manifest this update:     Tue 27 Jan 2026 04:00:34 +0000
Manifest next update:     Wed 28 Jan 2026 04:00:34 +0000
Files and hashes:         1: 1I6xXRp2MIVm80sw3U3Tfku76Z4.roa (hash: f523msZqQLAjCeDR2b4rSYrcaIntt3g/koqAV5ProOw=)
                          2: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: DVyJsFG1UA7+3x95qX/e4Yx7wXgr/RnXPELHVK+8uCs=)
                          3: WPpx-izSeflERwTZTBDMUjusV5s.roa (hash: cWk+1ANHgFtlvOQuSevrBNEAZRGbynzPPc7h5zNZTe0=)
                          4: bN4b_Ro1UEHJNER_9HcU775UCQk.roa (hash: RK/VwkDkfRH19Tjgu6wUkuqkclNxNJAitWxY+C+QqsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:9c:42:c1:1c:da:c7:07:f3:fd:36:c4:22:3b:5d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: Jan 27 04:00:34 2026 GMT
            Not After : Jan 28 04:00:34 2026 GMT
        Subject: CN=bb9c038cdfa08cf8037900eabdb8bce2733cf5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:3c:49:34:6d:95:67:16:dc:3c:af:b4:62:
                    c0:25:ab:be:cb:db:11:8b:c4:79:b2:a6:03:5c:39:
                    10:5f:97:46:5c:3c:45:ce:a1:cc:a2:6d:92:f4:d4:
                    c5:db:2d:c3:c5:96:00:61:2d:7f:e7:87:72:b5:6b:
                    f5:ab:9d:e4:38:04:a3:19:f5:4b:8c:63:2b:31:be:
                    b1:d6:5e:f4:c1:b0:ff:1c:c0:30:d0:92:2e:9f:16:
                    e2:12:16:1a:64:bc:f6:ab:be:7f:01:f7:d3:fb:09:
                    86:51:f2:a6:ed:b0:a6:17:d4:cd:53:a3:7d:6a:1f:
                    3e:67:79:bb:44:eb:66:38:67:2d:df:22:01:6c:b6:
                    f8:e3:df:39:19:59:f7:bb:7c:70:0c:18:62:9f:3b:
                    95:bd:4c:67:bf:fe:a9:4f:62:fd:f7:50:45:9b:77:
                    bf:4a:fc:35:5c:67:19:69:07:9e:f2:e9:9e:69:9f:
                    28:af:09:cd:ae:9b:50:50:a9:e1:ad:21:50:50:18:
                    dc:e5:6f:df:91:21:9f:88:66:05:5a:57:09:a1:da:
                    ff:ac:c4:d1:6a:ac:1b:53:b3:2a:71:d2:60:4b:d2:
                    23:85:cd:2b:b1:28:db:b2:70:cc:73:33:5c:62:57:
                    f9:c0:62:11:8a:10:61:cc:6a:4b:9f:69:19:98:5a:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9C:03:8C:DF:A0:8C:F8:03:79:00:EA:BD:B8:BC:E2:73:3C:F5:A7
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:43:d3:1e:c6:1a:cc:98:6d:16:2d:6b:96:38:72:93:a5:cf:
         bb:d8:ed:38:c9:ed:dc:4c:78:d4:d8:87:7a:4a:cb:f9:43:3c:
         b9:a5:a1:1b:ed:89:76:a2:08:41:88:bd:f8:fe:2c:57:69:b9:
         b6:dc:de:d3:12:2e:46:b2:2b:ee:46:14:3b:f5:6f:51:fa:3b:
         c8:4c:be:a1:ea:ce:c3:ba:5e:b2:37:84:b3:97:f8:6a:62:f8:
         c4:98:21:84:7d:55:d9:a5:fa:b2:f5:2c:b6:a5:63:ac:e8:06:
         8c:34:e5:bb:fc:a0:9c:5b:35:ac:f4:74:8e:42:c8:8f:91:b4:
         fa:ad:60:c1:6e:33:ac:b2:df:e1:e9:a8:42:1b:e5:cd:9d:a8:
         1a:27:1c:3c:86:78:a5:65:05:56:33:41:aa:2b:1e:16:bf:2f:
         75:35:cf:98:ee:d7:57:c8:93:ba:58:32:72:58:b4:be:09:f3:
         cc:b5:4d:87:b8:bb:7d:56:3a:c1:f3:fa:13:57:72:40:21:a3:
         81:6c:c9:b2:fb:eb:af:38:00:ad:4b:f9:0f:a5:4b:32:7a:4b:
         79:5d:9c:d5:34:34:31:8b:1b:07:5c:a5:66:18:a8:13:9b:cb:
         f6:a3:39:81:b8:fc:69:10:8e:46:ad:2f:b9:08:b7:32:1d:39:
         ee:02:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:52:52 2026 by rpki-client