This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          0sil5epWF7XXFcYGhzytVh32D54PCXNMXOOR+HXmhNM=
Subject key identifier:   EA:E3:75:67:DC:A0:07:10:1A:59:E4:3E:4C:68:35:D0:86:28:AB:CD
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       019BFF54519CAB3750CCE3F87B5308526799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          17F2
Signing time:             Tue 27 Jan 2026 12:01:14 +0000
Manifest this update:     Tue 27 Jan 2026 12:01:14 +0000
Manifest next update:     Wed 28 Jan 2026 12:01:14 +0000
Files and hashes:         1: C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa (hash: B34d2p77+B66jN6Am9ioz0IrGKVKuaBXb571jLLG784=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: xHmRNEWGsmCF9atkAuyApjW2vCwQjZ00qjCWON1t8DM=)
                          3: IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa (hash: b2TJ8DWoax+zX+jq6uzbhSSPpoR4UPspESjwpSfojeU=)
                          4: VyGXcLXLR7aE-sDxtLP4io6t1tc.roa (hash: gURrYwXKEDvB9SMdTVcuAN6Si8eouAWukW6eTK+MJTo=)
                          5: plhSuqqJa0jwOYQK5HTONg70a4M.roa (hash: cKDU2K6sGfkO/N88v+vmRc1FSMIHeKN+UvIPHCWpjco=)
                          6: yL1p9BGlippA5i5iVucMVBM9S4Q.roa (hash: oRvpMIJ5EsAuSoZty3HeQ0Lgu38Q+0FUJoGBlWaTjec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:54:51:9c:ab:37:50:cc:e3:f8:7b:53:08:52:67:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Jan 27 12:01:14 2026 GMT
            Not After : Jan 28 12:01:14 2026 GMT
        Subject: CN=eae37567dca007101a59e43e4c6835d08628abcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:94:13:16:f9:7b:91:db:f5:e7:61:cd:59:
                    94:00:72:bf:5e:21:1b:90:01:e0:55:12:13:09:1f:
                    8a:49:69:6d:bf:f9:71:08:f0:8f:b8:63:b4:32:dd:
                    47:62:09:2e:b3:a2:64:0c:3b:5f:75:33:2a:46:fc:
                    81:49:3f:c1:71:61:53:3b:d1:25:15:b4:c2:41:0e:
                    75:3e:a1:20:14:40:a4:d8:92:80:9b:d2:3c:c7:c9:
                    bd:ff:68:04:24:0b:7e:ad:95:c4:8e:f6:11:66:95:
                    d9:7c:fb:02:a2:1b:35:60:8c:19:87:61:db:0b:05:
                    ad:96:84:62:d4:3a:ed:86:ef:87:0a:7f:82:52:be:
                    ce:47:96:c7:8b:41:f5:9f:60:9d:ec:65:bf:ad:e6:
                    29:8e:77:91:c9:5f:44:30:9c:38:65:69:d1:ec:27:
                    b4:6e:1a:d2:e7:56:fa:9d:0a:0f:ac:61:5a:b2:cc:
                    5d:06:49:e7:f1:21:6b:f5:a3:3a:35:30:bb:89:36:
                    77:bf:84:9c:87:c9:1f:59:6d:76:9a:5e:04:32:a8:
                    a5:39:2e:e9:aa:85:82:97:f0:12:7d:23:d2:2c:9a:
                    9a:32:2d:84:6d:48:a7:e6:ab:69:70:4c:2e:64:91:
                    8f:20:42:27:40:d5:90:95:b7:d9:4f:89:9b:10:4a:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E3:75:67:DC:A0:07:10:1A:59:E4:3E:4C:68:35:D0:86:28:AB:CD
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:7e:a2:7b:5c:84:b5:36:10:55:53:2f:1e:55:da:f2:75:
         fc:74:d4:45:85:f8:00:d1:05:8d:4f:6f:f2:de:27:1b:98:9a:
         b4:3c:58:1c:87:0f:89:7a:59:85:f7:33:f9:02:5d:df:fb:07:
         ee:8a:09:22:dc:dd:58:fa:79:d5:d9:e6:5b:ec:32:3b:bb:30:
         84:39:2e:0a:8b:58:64:e0:fb:a5:c5:8c:7a:30:7b:79:50:47:
         d9:1d:90:16:4a:bc:3e:e6:df:e3:a2:a9:8f:df:42:db:46:00:
         2b:ed:b3:16:28:03:e4:f0:8f:0a:fe:01:12:22:69:99:99:bf:
         d5:94:35:39:b3:11:6d:9f:6a:5a:30:00:0e:5c:a6:28:16:40:
         ac:ab:3b:5a:b0:cd:0a:6c:40:45:d8:a7:2a:13:e9:34:d8:b4:
         d7:d9:f6:20:8e:ce:8e:03:62:66:9e:14:35:1c:29:e9:3f:60:
         31:2d:ba:ac:7a:79:ad:c7:dd:91:49:3e:7d:d1:b3:9c:4c:ab:
         69:10:12:3f:fa:5b:f8:15:bc:75:6a:f0:06:96:24:99:74:90:
         15:6d:7d:fd:d2:b3:55:53:71:f1:50:c1:8d:5e:f6:23:6f:10:
         93:e8:2f:5d:8f:66:c9:e7:8e:3a:c0:7b:2f:8d:f5:57:45:35:
         c4:0d:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:19:25 2026 by rpki-client