This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          OGaDriA17JtzmXqFqCXt5KJUCZOb4Icf54U3yPDTD0I=
Subject key identifier:   A4:34:DE:9B:B5:4D:20:9B:DE:14:88:25:42:AC:35:6D:D1:7C:C1:F5
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       019BD76B38CBCF23BEE9D3582D3926E50033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0E5C
Signing time:             Mon 19 Jan 2026 18:01:26 +0000
Manifest this update:     Mon 19 Jan 2026 18:01:26 +0000
Manifest next update:     Tue 20 Jan 2026 18:01:26 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: 46CrYetYVwpyBJ1aQlTqoGW8G1u5HwzAHfRQkt6dzCg=)
                          2: tiPSu8Y-m7bFT2Q5p7YlDzHrV6E.roa (hash: rj77DrlmC39KWKVNN8waQm35MPNGKCIe/g9stIOU5to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:6b:38:cb:cf:23:be:e9:d3:58:2d:39:26:e5:00:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Jan 19 18:01:26 2026 GMT
            Not After : Jan 20 18:01:26 2026 GMT
        Subject: CN=a434de9bb54d209bde14882542ac356dd17cc1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:de:8e:db:1e:75:b1:34:15:f5:d2:98:a9:
                    3f:6a:11:70:c9:f4:a8:33:a9:ec:63:06:46:fa:a2:
                    a0:cc:10:ec:26:85:c6:ce:61:c5:66:0d:fd:4f:e7:
                    a0:9f:f0:07:64:dc:8e:53:39:58:d9:ae:59:5f:7b:
                    1f:0e:9e:24:59:ae:3e:cc:dc:ba:81:6f:97:f6:8a:
                    d4:04:fc:00:4c:4b:d8:32:e3:0c:e5:0d:62:db:dc:
                    c6:da:7e:08:29:72:01:cf:6b:09:bc:1c:16:5e:90:
                    97:b4:31:4e:c2:e4:13:78:0f:93:d4:67:3c:66:f6:
                    3b:2b:05:4c:96:8a:6b:1e:d5:8b:9d:33:fc:d4:89:
                    80:ad:3d:6d:ed:8c:16:7a:c3:1b:c1:0e:0c:bc:29:
                    29:7c:c9:53:62:05:b8:30:9a:b5:bd:2c:4e:a8:6e:
                    e8:9c:43:a9:cd:c8:6a:51:8b:07:b0:7a:ce:42:ad:
                    91:92:14:36:52:29:27:3e:7a:31:19:5b:9a:c1:08:
                    8c:1c:59:fd:0a:9b:67:f7:ef:ef:ca:3b:52:17:17:
                    f1:11:cb:22:e6:35:af:7b:51:95:bc:18:3a:ba:f1:
                    59:19:5b:59:2e:cd:ea:a5:ab:ec:b6:2c:98:b1:5b:
                    2e:84:07:d0:99:07:f6:d7:40:34:8f:3d:f9:ff:ce:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:DE:9B:B5:4D:20:9B:DE:14:88:25:42:AC:35:6D:D1:7C:C1:F5
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:73:8c:41:74:8b:b2:c2:c7:f9:34:b2:8f:0f:ea:97:b7:
         48:dc:39:74:51:92:ac:3f:16:78:f7:85:36:15:9c:bc:a7:b2:
         7a:53:e0:4f:a3:26:25:86:b8:d7:bc:42:c2:6d:d2:ec:e9:51:
         04:f1:09:06:c0:f0:09:9c:54:48:e8:8e:52:28:18:76:69:b0:
         45:2a:98:09:a3:19:5c:1b:e4:7a:a8:18:cc:cc:c2:be:fa:56:
         c7:f8:62:1c:7b:7d:ba:e1:0f:58:da:07:84:d5:8e:44:52:25:
         ae:9d:c3:c9:ae:6e:35:61:e6:30:d3:0e:ce:db:0e:82:2b:e8:
         99:ed:d1:86:06:78:2b:9e:72:7c:55:d9:7c:d5:b6:ec:48:36:
         62:a4:12:17:3f:a1:76:68:17:df:f7:e5:67:fd:99:25:85:62:
         cf:5a:aa:37:cb:4c:31:53:43:b8:1a:af:8b:d0:08:fe:d0:f8:
         b1:a7:1d:9b:a4:fa:46:55:03:38:f9:ab:b8:65:12:a9:4f:5a:
         0a:5a:e6:97:4a:f7:91:e7:14:1e:f0:76:31:d4:df:86:48:56:
         1f:a7:91:87:85:d0:3a:93:b9:9e:a2:19:0f:69:a1:3b:7e:c2:
         d3:8b:8c:86:6a:d6:a9:51:fc:47:83:db:68:c9:b2:c2:13:cc:
         ca:d5:a0:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvXazjLzyO+6dNYLTkm5QAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDljY2VmZjRhNDhhM2RhYjAyNDA2N2UxNzYwZGJmNTg2
NTBmZGEwHhcNMjYwMTE5MTgwMTI2WhcNMjYwMTIwMTgwMTI2WjAzMTEwLwYDVQQD
EyhhNDM0ZGU5YmI1NGQyMDliZGUxNDg4MjU0MmFjMzU2ZGQxN2NjMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/7ejtsedbE0FfXSmKk/ahFwyfSo
M6nsYwZG+qKgzBDsJoXGzmHFZg39T+egn/AHZNyOUzlY2a5ZX3sfDp4kWa4+zNy6
gW+X9orUBPwATEvYMuMM5Q1i29zG2n4IKXIBz2sJvBwWXpCXtDFOwuQTeA+T1Gc8
ZvY7KwVMloprHtWLnTP81ImArT1t7YwWesMbwQ4MvCkpfMlTYgW4MJq1vSxOqG7o
nEOpzchqUYsHsHrOQq2RkhQ2UiknPnoxGVuawQiMHFn9Cptn9+/vyjtSFxfxEcsi
5jWve1GVvBg6uvFZGVtZLs3qpavstiyYsVsuhAfQmQf210A0jz35/84rEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ03pu1TSCb3hSIJUKsNW3RfMH1MB8GA1UdIwQY
MBaAFBNJzO/0pIo9qwJAZ+F2Db9YZQ/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUt
ZDJhZTJjMzM2MzI4LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUtZDJhZTJjMzM2MzI4
LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrhzjEF0
i7LCx/k0so8P6pe3SNw5dFGSrD8WePeFNhWcvKeyelPgT6MmJYa417xCwm3S7OlR
BPEJBsDwCZxUSOiOUigYdmmwRSqYCaMZXBvkeqgYzMzCvvpWx/hiHHt9uuEPWNoH
hNWORFIlrp3Dya5uNWHmMNMOztsOgivome3RhgZ4K55yfFXZfNW27Eg2YqQSFz+h
dmgX3/flZ/2ZJYViz1qqN8tMMVNDuBqvi9AI/tD4sacdm6T6RlUDOPmruGUSqU9a
Clrml0r3kecUHvB2MdTfhkhWH6eRh4XQOpO5nqIZD2mhO37C04uMhmrWqVH8R4Pb
aMmywhPMytWg6w==
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:24:36 2026 by rpki-client