This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          GueFfFma3nvBUWzYYbXnKgLwbHVvEh4N/KGbDtek5hY=
Subject key identifier:   65:2C:E7:8F:7A:A6:FF:E5:C5:F5:BB:80:0C:71:98:BD:51:8D:1D:CF
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019BC8D33C85380AFDD28EA4A24E5224971F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          090E
Signing time:             Fri 16 Jan 2026 22:00:45 +0000
Manifest this update:     Fri 16 Jan 2026 22:00:45 +0000
Manifest next update:     Sat 17 Jan 2026 22:00:45 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: pp7gQ6A5hxxND7bUP9VWUfixPzssSPhBL/nDPw0PCwA=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c8:d3:3c:85:38:0a:fd:d2:8e:a4:a2:4e:52:24:97:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Jan 16 22:00:45 2026 GMT
            Not After : Jan 17 22:00:45 2026 GMT
        Subject: CN=652ce78f7aa6ffe5c5f5bb800c7198bd518d1dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:29:57:03:3a:23:d7:d4:db:7f:b7:c3:dc:
                    a4:4a:96:0f:05:c6:24:6d:de:bd:76:90:85:7b:00:
                    7d:75:44:16:3f:3e:c4:51:31:1f:ed:ac:dc:80:00:
                    4a:4e:b4:04:85:fb:9d:a1:fc:ed:1f:de:5f:a5:df:
                    35:1c:38:fa:5f:ed:ec:bb:1d:50:68:58:4b:e6:9f:
                    89:9c:cc:a1:04:5e:4b:30:fd:a6:d9:74:82:3e:d2:
                    21:a3:21:91:14:8a:3f:ad:91:ea:ee:11:71:10:9e:
                    20:f8:0c:da:7f:dd:d9:eb:8e:42:82:94:75:6f:86:
                    fc:69:f8:9f:a8:d9:36:5a:71:e5:0e:8c:ca:4e:17:
                    26:44:cb:c2:26:91:35:42:97:24:b5:6d:5c:37:39:
                    91:d4:25:b3:c6:e7:33:0f:ef:aa:40:dd:0b:cb:ea:
                    dc:c2:91:17:bd:81:80:15:a8:38:c5:d7:c2:9e:97:
                    f5:f6:e6:25:aa:5d:1e:06:6b:c7:4c:d1:28:77:0b:
                    a1:09:f3:33:8d:f0:ac:c1:d4:70:eb:73:49:5c:96:
                    bf:83:bc:75:8f:92:7d:b7:42:09:9e:64:aa:72:72:
                    c1:af:80:b6:82:98:09:65:df:cb:e5:34:fc:1a:94:
                    d5:c5:32:b8:17:24:5c:14:16:b6:2b:07:d7:79:ec:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2C:E7:8F:7A:A6:FF:E5:C5:F5:BB:80:0C:71:98:BD:51:8D:1D:CF
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:bb:d5:5d:72:11:34:57:03:4b:a1:38:f6:00:f3:0e:1b:
         c0:91:cd:b0:c6:68:2d:75:10:8c:ea:0e:17:f7:25:bf:2d:56:
         26:67:8c:a7:b3:ad:91:95:b5:64:1b:d7:b5:2c:63:8c:d3:57:
         b4:98:ac:32:c4:b9:fb:41:aa:00:52:5d:fe:4e:98:92:e2:5d:
         41:92:9b:57:a8:ae:65:61:b9:2e:1a:32:d9:bc:93:3c:5d:9e:
         1d:92:db:91:30:cb:13:a4:45:c9:fe:9c:74:fa:c6:3c:14:77:
         4c:a2:8d:1a:ab:54:7c:ba:0d:93:e0:58:d2:de:5c:4a:d3:e4:
         01:12:1f:53:a2:ca:69:38:a0:a0:5f:cf:e8:7d:18:e6:cb:7d:
         25:33:93:bf:1e:51:94:2c:eb:c5:e5:5c:2b:f5:d3:9a:82:7b:
         aa:4a:43:b0:07:4d:df:0f:07:c4:ab:a5:da:d7:6c:e0:de:63:
         a2:fc:7d:27:73:4a:c8:07:c0:69:06:dc:76:fb:dc:81:e8:c3:
         e9:4f:5c:bf:3e:95:dd:29:48:74:1d:9c:be:41:a2:56:3b:42:
         ec:01:d6:00:db:37:0c:78:1c:1a:04:87:59:6a:13:5f:ce:51:
         c4:ab:10:40:c6:2c:31:9e:52:b3:fc:dc:3e:cb:ef:c7:c0:22:
         79:3d:48:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvI0zyFOAr90o6kok5SJJcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwMTE2MjIwMDQ1WhcNMjYwMTE3MjIwMDQ1WjAzMTEwLwYDVQQD
Eyg2NTJjZTc4ZjdhYTZmZmU1YzVmNWJiODAwYzcxOThiZDUxOGQxZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5UpVwM6I9fU23+3w9ykSpYPBcYk
bd69dpCFewB9dUQWPz7EUTEf7azcgABKTrQEhfudofztH95fpd81HDj6X+3sux1Q
aFhL5p+JnMyhBF5LMP2m2XSCPtIhoyGRFIo/rZHq7hFxEJ4g+Azaf93Z645CgpR1
b4b8afifqNk2WnHlDozKThcmRMvCJpE1QpcktW1cNzmR1CWzxuczD++qQN0Ly+rc
wpEXvYGAFag4xdfCnpf19uYlql0eBmvHTNEodwuhCfMzjfCswdRw63NJXJa/g7x1
j5J9t0IJnmSqcnLBr4C2gpgJZd/L5TT8GpTVxTK4FyRcFBa2KwfXeeyl0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUs5496pv/lxfW7gAxxmL1RjR3PMB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncS71V1y
ETRXA0uhOPYA8w4bwJHNsMZoLXUQjOoOF/clvy1WJmeMp7OtkZW1ZBvXtSxjjNNX
tJisMsS5+0GqAFJd/k6YkuJdQZKbV6iuZWG5Lhoy2byTPF2eHZLbkTDLE6RFyf6c
dPrGPBR3TKKNGqtUfLoNk+BY0t5cStPkARIfU6LKaTigoF/P6H0Y5st9JTOTvx5R
lCzrxeVcK/XTmoJ7qkpDsAdN3w8HxKul2tds4N5jovx9J3NKyAfAaQbcdvvcgejD
6U9cvz6V3SlIdB2cvkGiVjtC7AHWANs3DHgcGgSHWWoTX85RxKsQQMYsMZ5Ss/zc
Psvvx8AieT1IyA==
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:36:02 2026 by rpki-client