This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File:                     EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier:          5bCCzXenJQWsaRQTTkMdygR8anFOwAcHohhQCChuloE=
Subject key identifier:   6A:31:37:D4:2C:86:63:56:F4:FE:0B:10:B3:E6:FD:71:0A:E3:38:17
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer:       /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial:       019BFB096E747455F7A31DED3AD1A119A568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number:          0307
Signing time:             Mon 26 Jan 2026 16:00:57 +0000
Manifest this update:     Mon 26 Jan 2026 16:00:57 +0000
Manifest next update:     Tue 27 Jan 2026 16:00:57 +0000
Files and hashes:         1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
                          2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: 51fAtmUx1Uwydr4z6Ltsk5Oql7mcBh1rbFtM6jN0JCg=)
                          3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
                          4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
                          5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
                          6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
                          7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
                          8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:09:6e:74:74:55:f7:a3:1d:ed:3a:d1:a1:19:a5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
        Validity
            Not Before: Jan 26 16:00:57 2026 GMT
            Not After : Jan 27 16:00:57 2026 GMT
        Subject: CN=6a3137d42c866356f4fe0b10b3e6fd710ae33817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:d9:51:37:39:e2:4b:42:00:1b:89:73:e7:
                    ca:fa:de:2a:ea:e7:1f:77:37:40:fc:7f:d9:2e:cf:
                    e7:ec:bf:f6:db:6a:24:be:c3:80:a9:0b:64:e3:fa:
                    78:79:2f:64:1f:0c:6d:c7:08:e3:f3:7d:d0:ac:9e:
                    2a:72:8c:de:a3:22:7d:c4:c0:55:1f:b7:3c:ab:75:
                    84:88:39:bf:68:52:12:c9:43:f1:38:29:00:a5:2d:
                    e7:4f:de:00:22:62:52:2f:f7:e5:01:27:c0:58:45:
                    a3:6b:48:3a:b4:45:dc:ce:df:09:a7:ac:79:47:34:
                    ff:72:55:1e:8f:b7:b1:5a:2a:2e:58:70:e2:6c:f4:
                    9e:20:a1:04:28:3f:09:57:ec:49:e0:94:5d:bd:25:
                    35:4c:fd:bf:eb:eb:6b:f9:1c:b4:50:d7:f7:27:bc:
                    71:55:07:6a:1c:b4:08:2a:a3:b6:95:bb:b3:13:54:
                    3a:4d:60:c1:ca:06:be:fb:fc:27:e9:26:ae:f3:2d:
                    d0:64:40:a1:66:83:a2:8d:90:47:ad:d1:6d:b8:b3:
                    1e:65:61:6b:56:d9:16:53:3e:98:aa:a6:6a:8b:ba:
                    46:d0:08:e2:9a:b9:52:f2:80:2a:11:2a:15:02:cc:
                    c8:f3:31:f8:4b:4a:1a:7f:39:fa:70:e5:5e:bb:e0:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:37:D4:2C:86:63:56:F4:FE:0B:10:B3:E6:FD:71:0A:E3:38:17
            X509v3 Authority Key Identifier:
                keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:33:1d:b6:fc:40:7e:fc:7d:0c:e1:28:12:07:4a:35:4a:dd:
         39:41:ac:fc:5d:ba:37:6d:df:35:9d:54:08:98:01:6b:a4:38:
         44:55:bf:19:ce:57:f2:65:28:30:49:df:0a:6e:96:62:ca:ae:
         ab:3b:2f:de:66:2c:3f:e5:1b:17:52:9a:36:21:e1:95:ac:f0:
         23:be:e4:86:4e:50:6d:89:c6:5b:b4:1d:a4:3f:32:b4:2b:19:
         98:1a:d8:70:75:6c:32:cf:34:6f:85:32:d5:1c:c9:17:b1:4b:
         56:26:a4:51:43:ce:51:6b:c8:f3:bf:76:28:0d:b7:8c:ab:35:
         2c:9f:ab:3d:3d:e1:08:bb:2c:23:75:83:ff:fb:86:54:59:02:
         39:19:7f:4f:73:9e:bb:3c:31:a5:a4:5b:3c:ed:d4:ef:8f:dc:
         c6:60:0e:c7:b5:82:bc:b9:61:d7:47:a0:2b:a4:7d:64:e1:d3:
         d4:ae:21:7b:b3:93:60:ae:6b:00:f6:8c:20:51:a8:08:4a:99:
         63:a7:18:d7:b4:d1:e1:3a:74:e4:97:f2:ea:7e:4f:ab:73:ec:
         43:2a:52:eb:7f:df:31:d1:3e:7f:f3:38:aa:a2:80:04:f2:34:
         ca:e8:46:7e:4d:57:6a:f4:1b:42:1f:33:6d:0c:bf:4c:6b:ff:
         b3:79:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:38:57 2026 by rpki-client