This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File:                     eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier:          1iy12Yt2UFPg8XusEHQT2V7xcA0PTBJy+lqpE5bgM84=
Subject key identifier:   96:B1:A7:F3:B4:4C:B0:54:DE:9F:A2:69:E4:48:ED:6E:9A:2D:0A:C8
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer:       /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial:       019BE1124FAC2897795524EFDC9D2FD11505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number:          0C37
Signing time:             Wed 21 Jan 2026 15:00:32 +0000
Manifest this update:     Wed 21 Jan 2026 15:00:32 +0000
Manifest next update:     Thu 22 Jan 2026 15:00:32 +0000
Files and hashes:         1: VTBtuhupQkN3XNWCGG-SctrmNSc.roa (hash: MVRP12soTEVvkQMP4sWQe+ZD2ED7nGpPqffJ2oNbKlE=)
                          2: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (hash: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I=)
                          3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: E+3CN53bZYJmDdhOe6GeCedQiRxDVqZDXZ5JLgntWCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e1:12:4f:ac:28:97:79:55:24:ef:dc:9d:2f:d1:15:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
        Validity
            Not Before: Jan 21 15:00:32 2026 GMT
            Not After : Jan 22 15:00:32 2026 GMT
        Subject: CN=96b1a7f3b44cb054de9fa269e448ed6e9a2d0ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:ed:8e:3a:42:52:76:0c:c7:2f:b8:98:2a:
                    b5:66:9f:19:39:db:fa:99:3f:60:e7:7b:4b:e9:d4:
                    bc:29:4b:54:68:8f:5d:56:5b:1f:22:3f:e3:96:32:
                    f4:6b:7e:67:6a:b7:06:6c:80:8c:7f:9d:8c:86:c3:
                    22:3f:ff:fe:31:84:f6:9f:cf:5c:0e:2c:8d:36:2b:
                    8a:4e:bf:2b:71:bf:5f:53:bc:98:0d:1d:e9:db:34:
                    9d:b1:28:ce:f0:83:cf:c1:48:37:d6:e6:a2:dc:f2:
                    66:34:4a:0d:1f:d7:eb:d6:5e:37:73:9a:9d:c3:39:
                    7b:43:47:b5:a2:8c:12:fb:ec:95:37:67:c7:65:80:
                    b2:cf:30:68:15:ee:e2:b3:5e:3d:79:08:a4:b3:85:
                    23:ce:30:05:84:61:c4:db:ed:c5:73:d8:fc:03:3e:
                    53:41:7a:99:13:67:d5:f6:7e:09:1e:8f:38:8e:95:
                    91:1c:70:34:b8:09:81:15:52:84:4d:65:16:b4:cd:
                    d3:87:bc:5f:5c:fc:ba:05:f0:7f:f8:6e:4f:4b:e8:
                    19:2e:fd:2b:15:5f:93:4b:96:bc:b5:e9:b6:ac:5b:
                    8b:ba:1f:cf:9b:42:e4:f5:64:5e:4c:aa:fb:e2:65:
                    7c:2a:77:bd:93:00:12:a7:14:37:ea:e7:05:80:cc:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B1:A7:F3:B4:4C:B0:54:DE:9F:A2:69:E4:48:ED:6E:9A:2D:0A:C8
            X509v3 Authority Key Identifier:
                keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:16:4c:be:1b:82:d1:db:28:22:4f:14:a3:c6:ef:cd:9b:92:
         e7:26:9f:1e:19:dd:60:3d:52:67:6a:64:c4:01:9f:c9:10:ef:
         de:23:36:c5:36:f8:bb:16:bd:8a:88:68:8c:9c:ac:8a:47:64:
         d4:4a:87:a5:91:89:7a:48:b6:29:dc:a0:2b:4d:8d:bb:97:d1:
         a0:9a:4e:be:aa:5c:99:22:75:7b:de:06:09:2c:e9:7e:cf:c5:
         88:c3:04:97:c6:14:87:43:b6:e4:82:be:54:e4:a6:55:d2:f7:
         19:cb:db:c1:be:ba:0c:cf:d0:f9:44:ed:f8:32:d8:b3:92:c7:
         4e:d1:ee:b1:80:71:03:59:c7:e8:22:63:f5:30:fa:7e:4b:22:
         ce:7b:7b:77:1d:f3:c9:39:e2:48:4d:95:a2:20:32:15:74:10:
         a4:84:ef:d7:49:69:3c:ad:88:40:98:16:34:16:4a:0d:a9:48:
         c7:09:09:a3:dc:6c:7a:58:e6:02:2a:ac:8d:64:7d:da:18:7b:
         47:e7:d5:6b:84:ca:c5:53:34:bf:54:98:c1:5a:b7:26:29:8f:
         7d:6f:cd:dd:3e:60:9b:a1:36:69:66:6b:f8:42:9f:22:7b:14:
         2e:ff:79:d6:6e:80:54:3a:12:ae:4f:13:dc:2a:6b:b6:fb:83:
         ec:ef:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:49:08 2026 by rpki-client