This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          gFJM0ur+BRlDgKK46W4yG88jyrbiuZF4X6TWw8nqQP8=
Subject key identifier:   39:F5:3C:0B:15:1B:2F:25:66:F3:83:60:9B:A4:9B:FD:D7:79:A9:51
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019BFA2E34122E1FC801D84F2B5C8C0F7A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          114C
Signing time:             Mon 26 Jan 2026 12:01:30 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:30 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:30 +0000
Files and hashes:         1: 53H4kGtC_SbzrsI-Vzd9TCGN8wY.roa (hash: rLB3dTRqcK5WY3gJz81sl+g0PUHVo5VwKbPsiJ+N2Ok=)
                          2: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (hash: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY=)
                          3: E_XmM5IBFyFELEnknKVAb_189qw.roa (hash: Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=)
                          4: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (hash: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A=)
                          5: c0q33XIOQrm5W1qjd8fw_F2VySw.roa (hash: PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=)
                          6: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: UZh6yCv5ftZEq1lQOFexp4xh437bmsuUPw6mmF2EQWQ=)
                          7: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (hash: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:34:12:2e:1f:c8:01:d8:4f:2b:5c:8c:0f:7a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Jan 26 12:01:30 2026 GMT
            Not After : Jan 27 12:01:30 2026 GMT
        Subject: CN=39f53c0b151b2f2566f383609ba49bfdd779a951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:ed:78:1e:7f:cf:bc:8a:2b:0c:60:d3:84:
                    43:9b:8e:36:be:ee:e1:2c:a6:ca:a9:2f:79:1c:8d:
                    bc:3c:5f:e0:0f:e2:eb:5e:dc:a4:b0:59:a7:a0:47:
                    ab:19:b8:bf:75:f9:13:f4:c2:a2:67:55:73:58:61:
                    8f:e8:19:57:5b:ab:a9:21:20:10:0e:75:80:34:36:
                    8f:0c:dd:db:15:7d:1a:82:a3:cd:40:1a:1f:15:79:
                    18:23:7a:6b:e9:25:f2:76:37:94:12:85:c3:e5:57:
                    57:03:3c:9e:15:c9:ea:b8:1c:55:1a:cd:a9:41:cd:
                    ef:75:f2:17:1f:be:74:96:f4:cd:dc:4c:db:52:b6:
                    1f:b2:41:d8:35:16:3f:7c:71:b8:8d:f7:fe:b0:d7:
                    09:a8:1d:f7:31:69:69:fc:d9:0f:75:5a:7a:62:a9:
                    a0:9f:4c:54:d1:57:bf:89:a3:ba:6b:a7:ba:79:1a:
                    c8:d7:01:6e:35:36:e1:4a:b2:9d:b2:a8:d4:b0:ff:
                    42:23:d4:c0:ea:14:60:66:b7:8b:d6:61:47:64:df:
                    96:7b:74:d3:0e:c1:da:7c:5c:29:28:67:83:58:ad:
                    14:16:a1:92:06:ff:7b:ad:d9:44:14:cb:59:9d:3b:
                    91:32:cb:2b:d8:71:ee:0a:4a:f7:55:85:bb:b1:7a:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F5:3C:0B:15:1B:2F:25:66:F3:83:60:9B:A4:9B:FD:D7:79:A9:51
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e4:fc:03:03:26:07:31:91:fa:d1:99:9f:53:33:e4:81:73:
         8e:a6:bb:38:1b:9b:e3:56:cd:c3:5e:7c:c4:cf:cc:77:e6:17:
         a0:e6:45:df:99:5a:5f:84:77:5e:1b:0a:1a:0f:98:65:4c:ca:
         10:55:ca:84:91:8c:96:75:17:04:59:84:cd:28:90:0a:c4:e3:
         82:ce:20:59:c9:31:8c:a5:c5:ba:5c:de:1b:12:f7:8b:c8:da:
         cb:d5:b0:49:74:40:ec:48:52:03:c1:42:ab:07:2d:75:5b:dc:
         b4:24:fc:7d:4d:35:19:30:0b:e4:1c:6b:3f:d9:67:30:47:20:
         e4:9e:23:ac:7b:c7:1d:1c:11:5a:3a:8a:a0:79:e1:37:67:d8:
         3e:91:27:23:3d:a5:a2:f0:00:35:b9:53:13:9a:fe:55:bf:f6:
         5a:8e:33:df:f2:f6:fb:88:bb:d2:ba:31:d3:6a:41:8d:a3:ba:
         93:5b:a8:f1:73:66:ce:d6:cd:d2:c4:f6:69:3c:e2:1c:8d:af:
         60:13:1c:9d:3b:ed:36:e1:54:dd:cc:68:08:4c:76:19:db:f0:
         62:1d:df:dc:1d:96:de:b5:3a:8f:33:ed:4c:c1:0f:b1:c1:65:
         6c:16:7a:0c:fe:bc:8c:f8:6b:ff:41:26:bc:35:0e:98:43:c4:
         62:90:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:35:29 2026 by rpki-client