This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          3D6+yZS2W8cQZzDlpaumGgqFpMtvJ4AVAkHnqQITDVQ=
Subject key identifier:   96:2D:A0:A4:B8:8B:C6:D6:FB:EF:A3:10:5B:9B:C8:61:F8:34:59:75
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019BF83F761225500623381ABC67726173E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 03:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:06 +0000
Files and hashes:         1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: TrYDmhRLi8bK1LtWPYZf2C9nKquoRE7XEmjBjjelpGQ=)
                          3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
                          4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
                          5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
                          6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:76:12:25:50:06:23:38:1a:bc:67:72:61:73:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Jan 26 03:01:06 2026 GMT
            Not After : Jan 27 03:01:06 2026 GMT
        Subject: CN=962da0a4b88bc6d6fbefa3105b9bc861f8345975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:b3:67:6c:40:1f:93:0a:fb:ef:d4:ad:fb:
                    4c:32:7a:ed:6c:56:fa:eb:7e:26:8a:ea:37:c6:a7:
                    c0:7b:9f:ae:45:f6:25:b7:5f:80:af:00:1f:5e:28:
                    ec:be:41:7c:b5:20:87:bd:0d:16:00:b0:9f:23:f2:
                    5e:ad:1a:66:a5:e8:85:73:81:f0:11:88:74:18:d2:
                    55:56:1b:01:fa:4a:f5:5f:c4:b6:da:fb:b3:1a:c4:
                    48:56:7d:ff:a9:1a:b2:1c:5c:a0:92:b3:dd:d2:0f:
                    54:24:c5:7c:a8:36:15:ed:58:3c:6f:39:43:33:3c:
                    d3:4d:34:e8:6b:7b:d7:42:f1:c6:ca:da:f8:be:2f:
                    d9:2b:92:50:48:cb:52:43:20:49:2e:7f:32:08:8a:
                    cd:43:08:f3:60:e2:38:9b:82:84:ae:bc:30:8c:ea:
                    25:22:fb:cf:91:bd:8d:d3:68:71:66:ec:14:87:5e:
                    7c:ec:26:7d:80:64:53:5e:3e:70:c6:aa:0b:0d:9c:
                    ff:72:9a:78:64:50:b4:77:e4:f7:4d:7e:c8:a0:ff:
                    c3:d4:87:d6:86:5a:0c:6d:bc:e3:15:ba:26:bb:73:
                    5e:be:00:6b:e1:8f:72:d1:4a:e0:cb:0a:4b:7f:f8:
                    81:6c:fb:c0:a5:fe:bf:49:26:1b:16:75:ac:89:13:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2D:A0:A4:B8:8B:C6:D6:FB:EF:A3:10:5B:9B:C8:61:F8:34:59:75
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:4e:40:45:47:41:cb:88:87:51:fb:6e:e6:c9:1b:db:da:a8:
         68:68:93:88:e7:14:97:a0:60:94:aa:9c:d4:8b:ab:e3:bc:50:
         30:74:fe:b0:14:33:6c:0b:71:ce:9d:83:40:aa:8a:1e:be:ce:
         4b:78:82:ee:fe:b9:30:e4:38:35:ec:10:b3:da:e2:85:5d:6f:
         24:69:cb:80:40:8c:9f:cc:f0:e4:cd:97:81:3b:49:17:a6:ce:
         e5:b3:81:5d:82:d0:97:63:56:6b:74:69:24:42:24:14:bd:5a:
         cb:87:7e:2f:36:f0:ac:95:f9:7b:63:13:fa:be:d0:45:79:7c:
         c6:36:5c:36:b8:01:8f:f6:78:39:e2:84:2a:33:cc:69:15:e7:
         ce:92:34:57:6e:a3:bc:2c:bd:6c:91:21:15:3c:54:2a:b4:3b:
         e7:f1:b6:01:a5:48:94:35:31:8e:85:6a:c4:90:fe:0d:42:0c:
         79:b5:c0:0a:39:fe:36:b7:59:72:24:7c:8b:3e:5c:23:94:5b:
         72:0d:c3:f2:82:14:d8:e1:2d:76:05:23:21:d4:83:f7:b6:98:
         5d:ab:e6:fa:91:51:14:03:2a:cd:ba:b6:26:4e:b4:09:cd:6d:
         6f:3b:56:b3:e0:73:57:41:4b:3e:f7:4e:cc:df:7d:17:51:35:
         4f:e1:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:17 2026 by rpki-client