This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File:                     E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier:          XHcbAbvWe/EYL5F17qmTLkXp6zFvhET23r9tE8Xh8Y0=
Subject key identifier:   8B:90:85:D2:DD:4E:C8:C7:D9:A4:CE:83:04:FF:54:11:15:0D:FD:14
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer:       /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial:       019C06327319F083A5C55E8966B0E6B503C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number:          1371
Signing time:             Wed 28 Jan 2026 20:01:35 +0000
Manifest this update:     Wed 28 Jan 2026 20:01:35 +0000
Manifest next update:     Thu 29 Jan 2026 20:01:35 +0000
Files and hashes:         1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: Kn/toFyOJOX1abKh0IS2gXmZOW0XA8fEiCQmqVoMMho=)
                          2: c8_lqB8zuXEzmspKXzyipWp0Oa0.roa (hash: 2ZR0m4jkOWS1KPdLD0KrcVGTacYGG1RI331SCTXCoGQ=)
                          3: if86lxu5nlPzs7hkWMJDZ9tMh_c.roa (hash: ORNVkMFl7t2RmENsppqBUHYflyrOzGV65xG9bRC2Ckw=)
                          4: pbc4SdtODYEUzlwKQZU-lgRu770.roa (hash: Aa4AR2Tswo+VpEELO6t1/gEy+JGa3NESKeediOsubQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:06:32:73:19:f0:83:a5:c5:5e:89:66:b0:e6:b5:03:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
        Validity
            Not Before: Jan 28 20:01:35 2026 GMT
            Not After : Jan 29 20:01:35 2026 GMT
        Subject: CN=8b9085d2dd4ec8c7d9a4ce8304ff5411150dfd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:ac:94:b3:dc:ac:29:fc:97:91:48:e7:04:
                    9d:cd:e7:1f:25:f4:41:08:e6:e3:b2:5e:db:77:dd:
                    0f:d3:75:3d:64:29:d6:72:42:57:3f:56:ad:74:d8:
                    3a:4c:1f:47:47:b2:a2:8e:42:c3:49:de:8a:46:86:
                    b1:ba:b8:33:a4:72:4a:46:e3:4b:80:16:8a:31:e4:
                    49:6c:28:74:d6:71:bc:1f:6e:34:ed:6d:4e:91:18:
                    66:93:38:8d:cd:2e:6d:1c:66:c6:10:e4:e8:28:1f:
                    8e:4b:cb:6c:58:7a:65:5d:b1:97:c6:44:2f:5a:06:
                    59:d7:0e:fb:ac:1d:50:89:a4:45:8b:2b:33:20:ee:
                    15:9d:68:d9:0b:8b:16:5d:cc:fb:72:2d:ac:4c:d9:
                    71:fa:90:c4:a0:2f:70:e9:d9:79:a9:2a:4e:89:bb:
                    00:8e:38:61:19:63:79:fd:a8:b5:9e:ed:31:f7:01:
                    61:95:5c:e0:38:93:09:42:f1:10:17:b3:f1:33:19:
                    3c:72:c2:be:ad:86:a6:f9:7b:86:7e:a3:32:39:ee:
                    24:c0:95:89:bc:ff:67:a0:3f:0f:f4:12:31:29:25:
                    5d:f3:4f:84:d1:1c:b8:59:4f:1a:9d:01:51:a9:b9:
                    84:ac:4e:54:60:80:aa:bf:4b:7b:80:52:4e:34:66:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:90:85:D2:DD:4E:C8:C7:D9:A4:CE:83:04:FF:54:11:15:0D:FD:14
            X509v3 Authority Key Identifier:
                keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:c0:91:d0:e9:dc:d7:25:b6:33:20:8c:38:9b:66:90:1b:
         07:6e:0f:24:76:44:96:c7:4c:7a:bf:22:74:b9:fc:9e:72:cd:
         06:70:2b:65:4d:12:6e:ce:51:ba:1e:9a:e0:a4:d8:50:57:08:
         b7:52:9a:d9:bc:55:01:ae:0d:44:59:5e:2f:66:f6:de:da:70:
         e4:f5:57:d4:3a:b1:c6:12:d1:73:04:a3:e5:b8:47:26:97:7f:
         17:c5:d9:d3:a5:8b:97:39:3c:eb:0b:5c:c6:16:1d:ef:1a:dd:
         10:7e:83:4f:b4:17:9f:c5:88:b6:62:0f:e9:63:a9:58:05:a8:
         72:ca:78:44:37:c9:16:3e:7a:1e:7a:86:97:1e:f4:3a:72:57:
         b4:84:3f:a1:fa:fa:6b:ab:ba:c1:7e:23:66:2e:4c:26:01:10:
         8f:03:4a:f3:34:c0:ab:65:70:e0:be:81:d3:bd:d0:f2:14:19:
         7b:f3:82:0e:5e:9e:ba:ce:71:9e:c8:2f:51:17:ce:47:f9:91:
         a8:4e:f7:3c:8f:7d:55:5b:71:8e:84:44:17:9c:05:4b:8b:12:
         c5:c6:3e:14:7f:22:1d:93:0a:ff:cb:c5:77:57:33:25:5d:08:
         8a:7d:10:b3:b4:c2:4d:87:52:5c:6f:e0:b8:ca:7d:07:9b:51:
         cd:c6:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 01:41:46 2026 by rpki-client