This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File:                     EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier:          GeaX0qFgeQZ/UprMMXtT8P1cQj44Nzc31IPcZKrSsrQ=
Subject key identifier:   C4:A2:01:CC:DD:D0:8B:51:ED:29:F5:6E:0E:D4:AA:65:B3:5D:53:01
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer:       /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial:       019BFB403BCBE81C1BC21BCD43146BE3D1D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number:          10EA
Signing time:             Mon 26 Jan 2026 17:00:49 +0000
Manifest this update:     Mon 26 Jan 2026 17:00:49 +0000
Manifest next update:     Tue 27 Jan 2026 17:00:49 +0000
Files and hashes:         1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: Hojn6EA6gTEVv+fOuAgxUpkBFdHAbjXIe0reHWfajb8=)
                          2: WF-zTcv0SSwFqssAuBLS2p_bL9I.roa (hash: l4mNR1FXgT0HOl3cKSL3WOvdMxH31IZ3vfxu50tZ0OU=)
                          3: avu8Q3Omr--tF4tpRu9jq83ydCc.roa (hash: QpRUqaU18HNyF42VH945x7YyAx6ix+RRAhRlCjxO5Gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:3b:cb:e8:1c:1b:c2:1b:cd:43:14:6b:e3:d1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
        Validity
            Not Before: Jan 26 17:00:49 2026 GMT
            Not After : Jan 27 17:00:49 2026 GMT
        Subject: CN=c4a201ccddd08b51ed29f56e0ed4aa65b35d5301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:b7:9b:7f:b3:85:ba:2b:16:88:63:ef:dc:
                    1b:63:ed:7f:bb:2d:b9:32:6d:6c:d5:bb:67:93:7f:
                    5f:a0:fa:44:17:a8:9e:61:09:5c:d4:56:e1:40:fd:
                    9d:f8:af:b9:9d:f4:c5:f1:d8:22:06:1e:e8:4d:39:
                    5c:24:fa:53:4d:21:e6:3a:7e:66:aa:92:70:f8:2e:
                    4a:67:87:e1:3a:ae:c5:e8:00:81:18:c1:4a:9f:5a:
                    00:e8:3a:4b:85:42:4c:7e:67:b9:3c:49:89:b4:14:
                    8d:5b:54:09:3b:17:d8:23:47:12:ea:35:83:23:96:
                    fe:83:15:2a:78:41:79:f2:5d:0a:fb:38:4f:68:a7:
                    d8:42:09:03:b3:f3:49:c2:ce:b4:00:a9:b0:44:5d:
                    cb:13:6b:f9:2c:e5:30:59:9a:15:19:9f:43:cd:c6:
                    f0:48:53:e0:4a:86:10:0e:cf:5f:7b:d2:30:72:ee:
                    5c:cd:db:71:25:38:e6:ed:1d:a5:9d:65:1c:89:a5:
                    29:e9:b7:b6:f3:7e:f6:a4:39:1b:1d:09:d1:d4:1d:
                    83:fc:bf:36:17:40:d2:fe:39:b3:9b:9e:82:97:29:
                    a1:d8:d0:9d:57:37:6c:fe:e8:93:29:56:d9:68:78:
                    4b:59:72:e8:f9:d7:50:32:e2:d2:1a:fe:b4:cd:9f:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A2:01:CC:DD:D0:8B:51:ED:29:F5:6E:0E:D4:AA:65:B3:5D:53:01
            X509v3 Authority Key Identifier:
                keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:bd:09:62:84:f7:d8:b9:45:ea:77:c2:44:12:2a:a8:77:
         27:24:df:47:d6:5f:34:22:fa:02:40:ac:00:5d:ea:91:43:a7:
         91:fb:f0:be:8c:f5:e0:25:7d:d3:c2:98:8d:44:75:29:b4:fc:
         57:48:0d:2f:21:24:4a:4a:ef:0b:47:f8:ba:1f:51:91:89:ed:
         92:a0:98:cc:8c:71:99:4c:d1:c6:d0:45:40:c6:dd:6c:fa:18:
         36:35:97:c4:cc:7a:79:38:17:37:e3:30:26:6b:02:cd:4f:4d:
         75:22:2b:e6:79:5c:9e:a4:38:80:d2:63:af:59:ac:49:b3:33:
         c4:45:8d:df:dd:90:9d:6f:88:df:77:d5:67:ec:36:48:d2:5e:
         b4:82:ee:f0:7d:6b:f0:4e:6f:73:8d:90:3a:4a:76:ae:36:fc:
         50:72:26:29:ab:3d:a2:42:2a:d7:af:38:b8:36:97:fb:f7:40:
         13:1d:ea:bd:b8:bd:d7:73:ce:2d:03:24:33:cb:22:c8:d1:6d:
         73:a2:ca:9b:0c:cd:6b:28:0a:c9:2f:93:80:d5:81:21:b6:c5:
         54:a1:3e:d0:00:8d:2e:ae:09:14:ae:64:5e:66:06:9d:6e:09:
         48:ca:48:6a:d2:cf:68:28:e9:39:07:0b:b1:0c:21:fb:c8:ee:
         03:4f:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:38:12 2026 by rpki-client