This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          CMnzlT+mPu/R8sv1wfZRb+Ht9Y+O5meEFDgiRymA4cQ=
Subject key identifier:   9F:66:FB:6D:8A:CE:B1:39:EC:0C:74:82:01:C0:A3:33:B3:C0:06:90
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019BDC240ED810776A1C2BBABC3A23256B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0918
Signing time:             Tue 20 Jan 2026 16:01:49 +0000
Manifest this update:     Tue 20 Jan 2026 16:01:49 +0000
Manifest next update:     Wed 21 Jan 2026 16:01:49 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: mGKJ0OBbQ5dV7f0rm17b1Gn3e4nRfawY6tp4fgmuvUU=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:dc:24:0e:d8:10:77:6a:1c:2b:ba:bc:3a:23:25:6b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Jan 20 16:01:49 2026 GMT
            Not After : Jan 21 16:01:49 2026 GMT
        Subject: CN=9f66fb6d8aceb139ec0c748201c0a333b3c00690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:bf:52:e9:0a:90:d5:ba:80:5b:4a:3c:aa:
                    27:c6:fa:49:cf:bb:8e:84:68:1e:54:4d:83:94:05:
                    6b:dc:9b:0f:c6:3c:fd:00:2e:58:30:72:c3:59:8e:
                    30:78:58:e3:26:a7:d1:2c:8d:94:97:d8:1e:25:17:
                    b9:fd:b9:28:d7:63:d4:d6:90:ec:8e:3a:3f:2a:fe:
                    27:91:0f:d9:2a:7d:3d:69:84:15:8d:b1:38:42:e9:
                    70:ae:8c:df:29:d3:1b:86:ed:99:c7:a4:c8:3d:be:
                    2c:75:aa:3c:87:56:5d:e7:81:66:9c:9b:94:fa:c1:
                    27:fc:64:b2:c3:0e:a5:c9:bc:12:b6:66:e6:71:99:
                    fb:b5:8c:c8:6d:d7:80:fa:8f:1e:5a:42:34:96:69:
                    36:58:71:46:83:38:c1:48:30:72:30:f1:5c:d6:2e:
                    19:af:b6:e2:d5:86:f1:f3:d5:ba:8b:79:17:34:e9:
                    2c:35:4e:fc:0e:ba:93:d2:82:01:bf:fb:50:a9:ae:
                    ba:99:cf:6e:d8:f3:b4:0e:d7:f4:ad:1d:c6:ec:5c:
                    17:37:1a:13:ef:34:5b:82:97:2c:c7:3f:f2:83:bb:
                    8c:88:ff:7c:1e:cc:c8:5a:da:07:6f:59:f6:44:c1:
                    a2:ad:60:1c:7e:7e:d3:d3:16:7f:f4:01:8a:b8:1f:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:FB:6D:8A:CE:B1:39:EC:0C:74:82:01:C0:A3:33:B3:C0:06:90
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:78:82:26:c4:ed:7e:d0:ca:31:03:4c:67:5e:e8:63:c0:
         60:7e:d5:fa:c1:52:9f:bc:20:0e:d2:a3:b7:0b:e9:df:c9:82:
         af:ab:a1:0a:20:d9:78:d5:01:e4:0d:ac:23:01:44:a4:5c:00:
         ef:7c:6e:7d:0d:3d:1d:c4:7f:15:ad:31:70:39:45:90:dd:54:
         f8:a3:49:43:c1:e4:c8:0b:07:b5:92:5a:8b:63:5e:17:af:78:
         89:0c:fc:1d:e1:26:b8:25:d6:44:3c:ba:b1:c9:e2:0e:df:8d:
         da:c4:de:a7:9c:c9:f8:37:2d:70:df:e5:a9:91:38:a8:c1:0f:
         b4:2e:7e:03:f1:90:e4:e9:36:6a:9b:c8:cd:c9:56:f1:b5:0e:
         cc:80:39:0f:bc:02:41:3e:0e:03:6d:a6:c9:8a:e9:6d:81:35:
         ed:c9:86:ce:be:cb:f3:60:97:65:08:ae:0b:11:99:11:27:de:
         b0:71:fd:8a:51:cd:0b:07:16:0d:83:fd:3d:35:7f:f7:b7:ef:
         09:31:0d:69:47:78:1f:ee:18:49:dc:e9:76:37:f1:ba:4c:8f:
         97:bb:e5:19:99:91:d3:dd:ab:f8:c5:64:25:04:38:02:45:58:
         03:2c:59:99:b3:64:ce:98:2d:26:91:f9:bd:39:26:73:08:22:
         71:b9:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:40:02 2026 by rpki-client