This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File:                     E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier:          6WBJp0CK8x+OUCt+m8VaJtw06SOKwEzWZpaxS0ikKvM=
Subject key identifier:   76:85:F0:9E:F4:CF:05:5D:4D:54:9B:D9:38:12:53:AD:78:F8:5A:44
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer:       /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial:       019BD7344C3EBBF6173F8901C61A0A4D30A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number:          0701
Signing time:             Mon 19 Jan 2026 17:01:27 +0000
Manifest this update:     Mon 19 Jan 2026 17:01:27 +0000
Manifest next update:     Tue 20 Jan 2026 17:01:27 +0000
Files and hashes:         1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: 6R6mEOuACeNz1TaLKxcBt1rqJ5QMp42WWqOVFY+tkYo=)
                          2: FlBj5E86mMaezxnELPbZi5fwTQY.roa (hash: 2DTFE3oHOQavlSuV+6kY/PV66gB0kYmblqBhttOkiNQ=)
                          3: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:34:4c:3e:bb:f6:17:3f:89:01:c6:1a:0a:4d:30:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
        Validity
            Not Before: Jan 19 17:01:27 2026 GMT
            Not After : Jan 20 17:01:27 2026 GMT
        Subject: CN=7685f09ef4cf055d4d549bd9381253ad78f85a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:ff:a0:e5:6e:4a:84:40:78:d7:34:a8:b4:
                    38:0d:4f:83:a9:d5:a0:c0:18:10:a8:6b:30:a4:5b:
                    91:4e:7f:7c:ee:50:d9:f5:34:fd:50:b5:c1:3f:32:
                    9a:02:77:0c:bd:64:f1:61:8e:81:b3:6b:9f:53:de:
                    3a:87:6b:b3:ef:a2:c1:3b:da:a4:19:5c:a8:bf:48:
                    42:2d:17:d2:c0:45:ed:53:a4:50:dd:99:ff:25:45:
                    05:21:00:bc:91:ff:44:94:6c:0d:a3:69:86:06:b4:
                    22:d4:85:28:ff:69:73:9a:c2:94:ae:ea:73:83:81:
                    74:b5:a6:c9:9e:5f:6f:54:e6:a9:ba:76:8e:d3:c0:
                    ad:9a:b2:82:41:77:e1:78:4c:a1:4e:40:ea:21:de:
                    f1:46:2d:c8:79:83:b9:88:1e:7d:e4:d5:16:1a:fd:
                    71:56:22:79:ff:63:5d:f7:e7:fe:18:63:67:2e:ba:
                    04:95:ea:bf:80:1a:ff:95:26:15:f3:7a:8b:b3:d4:
                    2d:e0:0d:32:07:42:47:e4:60:1d:d8:ab:1c:62:98:
                    2c:32:9e:ec:d8:10:b0:9f:61:f1:db:22:69:5a:12:
                    b3:eb:bd:c9:df:47:7f:39:f0:31:05:1a:bd:3b:3c:
                    05:c5:0a:4e:dd:d1:41:ec:06:ff:de:91:16:20:07:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:85:F0:9E:F4:CF:05:5D:4D:54:9B:D9:38:12:53:AD:78:F8:5A:44
            X509v3 Authority Key Identifier:
                keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:74:c6:ef:a1:22:d1:9a:17:91:73:b4:4e:da:50:d5:d0:f8:
         8c:ac:4c:46:3a:3a:23:bf:a5:bb:8c:b3:94:de:2d:f9:d6:12:
         00:14:41:a0:7c:f5:9d:ef:ae:a7:79:34:31:61:9f:06:cd:bc:
         6f:6e:96:ff:67:12:d1:1b:1e:61:18:da:78:33:90:bb:59:da:
         4f:cb:79:51:e0:52:10:0b:42:07:75:e1:2f:f7:91:45:15:5e:
         30:66:53:8d:9e:50:8b:f9:7d:7e:18:cd:79:96:05:fd:86:7c:
         5d:ec:dd:6b:6e:e5:26:0f:b8:ff:a3:8b:73:1b:1c:1f:cb:71:
         bb:fe:58:9a:5d:7b:aa:b2:8e:3e:cf:da:12:19:9f:67:d1:e8:
         6a:b9:a2:c4:84:9b:a9:35:ba:f8:6e:8e:14:87:ec:6e:aa:f1:
         45:92:e6:5b:a0:f1:52:11:c2:67:d3:28:70:7a:ed:6b:3f:58:
         41:6e:18:8f:49:2d:6d:c2:1d:75:30:e9:9d:64:20:e7:29:8a:
         68:1c:68:43:41:d9:7b:12:78:54:4a:63:3e:9f:63:ca:90:c3:
         0b:d9:4b:cd:8b:ee:57:cb:f8:1d:2d:53:67:b5:55:3d:89:69:
         44:d0:ab:97:39:23:df:9b:ef:18:5c:69:95:98:59:45:63:f5:
         0d:c5:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:29:36 2026 by rpki-client