This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
File:                     Eipka-1MQXprSAX5PXenpGXjS5M.mft (raw, json)
Hash identifier:          UylIQvrw+w4DpNYBQE64L3lNTy+fKBLI7BKcQW3CFzA=
Subject key identifier:   BC:FE:0D:6E:66:3A:AA:14:E8:38:62:BD:F5:43:10:F3:D2:50:D1:2E
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       019BFA2DAB32CDBFCE331A10FE4452978984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 12:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 12:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 12:00:55 +0000
Files and hashes:         1: 2idL5V6crsG-My5eHFYCoqPZBJc.roa (hash: vaSZEhw4St7LiPuZBY3Vs8p+WLXNvJluMQ/DQ6b31Cg=)
                          2: 7zjuMpSlT2aP7S1emNMPu08nhaM.roa (hash: pmrlJgUnhMLcWKoghbqDtSCeAr5KHP5AIQALOgBZFjc=)
                          3: 89rYGxAtaqZ3ZK9x0O0jymSIagw.roa (hash: MlQykDP+P8c+/zOWXDU+3hN/+cvxs5AGjXDmDkTBzIo=)
                          4: Eipka-1MQXprSAX5PXenpGXjS5M.crl (hash: zxvJFkOdUaLTlTGCb2GlQn034tKrmONAp9/uHqaZQW8=)
                          5: FqvwPoqSAZTmGkD0DmAevpEaOtI.roa (hash: TxwByVGEYT5oq1MGs1scIsZMyyRaYUhVq+yICGh30Vk=)
                          6: LKNQgP5_Nz1DtpvyFtaUdIzEHSg.roa (hash: cWgBIwSO4fLo+zH/tK/lyRfB4/Jh6B8LZfkT2nzd7ts=)
                          7: bO7-qpV-WtzE91YggDzffNTHt-0.roa (hash: RgUy8YjJAntZaAh8jfrj8Pu9JkkSYLqS11DyKtEr8H8=)
                          8: jZdEfTmuJriG5AyLUa3HiefzbcA.roa (hash: S7xLT6xDphnbTUXgFvGzB5Dv+d/rhkukYS1/zmgto9w=)
                          9: tq5QKqbMMTaUnj8tOh43h-aM2MA.roa (hash: Kr/dZ1o0wiqZMbEqoVrPXCiIdUPvP+Mdp3n01wZE5Kc=)
                          10: we3xcWz3LSd5AgDRHj0SC-9kOl4.roa (hash: hLnYWm/JIur3cJVhWeECJl7YhBgW2E3tRZoZ7DkpneQ=)
                          11: x852Qr21e9Y3cRbTT8Dri2xYpzo.roa (hash: Wj7bL93u97KVkBnN00S5teBWbQNJ9k/I9gGz8uHqwY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:ab:32:cd:bf:ce:33:1a:10:fe:44:52:97:89:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan 26 12:00:55 2026 GMT
            Not After : Jan 27 12:00:55 2026 GMT
        Subject: CN=bcfe0d6e663aaa14e83862bdf54310f3d250d12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:8d:9d:43:53:34:d8:c5:66:f5:61:52:b8:
                    f0:32:c5:e1:f9:b6:4d:68:7e:30:41:f1:52:e8:13:
                    87:c3:6b:75:08:e6:43:c4:1c:b7:3a:11:dc:c9:7b:
                    62:56:9d:4d:02:87:08:63:4c:83:e7:11:fc:0e:7e:
                    a8:12:34:da:f7:c2:00:d1:2b:33:91:d2:3e:fd:de:
                    9d:1d:94:fd:9e:8a:e6:d9:81:7d:52:e5:73:42:6a:
                    01:45:20:b8:fa:60:ed:7c:8f:0f:b6:5b:e3:1a:ee:
                    fb:b5:d8:6f:c3:39:5d:da:84:fe:34:f1:ae:6b:b4:
                    92:8c:fe:b9:55:f2:7d:93:98:4b:96:9a:dc:dd:e3:
                    ca:0f:eb:fa:fa:c5:2b:52:c2:d5:d0:19:f6:0d:eb:
                    1d:ff:23:46:25:e7:92:c4:9b:75:dd:dd:1d:e9:03:
                    d3:8b:5c:c1:ca:bf:83:e8:52:f8:eb:42:43:e4:d8:
                    3c:8d:49:a3:aa:78:46:64:a6:aa:df:4f:4d:d9:0b:
                    62:b3:3e:1d:db:53:f4:ce:44:38:03:20:82:de:59:
                    59:8c:15:16:83:e5:54:ae:a5:8f:74:95:cb:c9:88:
                    4d:c0:80:15:9d:0a:61:96:7c:49:2d:f6:f9:09:5e:
                    91:f0:e4:41:6b:69:5a:5d:b1:13:86:cc:ed:66:22:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:0D:6E:66:3A:AA:14:E8:38:62:BD:F5:43:10:F3:D2:50:D1:2E
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:16:53:0b:42:9b:4d:eb:bd:34:f9:3e:21:47:60:ff:03:a6:
         84:cb:ae:e0:33:dc:c7:85:54:df:06:ca:8f:dc:b1:26:5e:4d:
         6b:5b:81:e1:e5:82:04:69:d8:ab:c5:0d:c5:ec:e5:bf:bd:91:
         55:71:79:65:42:3d:3f:7c:2f:03:7a:4d:1a:8c:c9:6d:10:e9:
         cb:a8:17:56:62:0b:c4:a9:4a:c5:7c:13:ae:ee:df:62:90:03:
         cd:8f:f8:2c:e9:d9:f2:93:1f:48:08:3a:ad:57:da:75:07:92:
         d8:84:c4:c5:6f:c8:08:ac:da:31:d9:9a:fc:be:4d:c6:02:8e:
         b4:0e:5c:6f:f1:be:d8:af:54:28:34:84:5b:08:ce:f7:26:c5:
         f7:45:66:0c:4a:a3:28:b2:b6:e5:f6:2f:4b:01:61:0d:67:7a:
         0b:88:18:5c:60:ca:a2:f8:80:1b:2a:28:ef:b7:73:c1:a5:83:
         da:2f:de:7c:0f:96:81:bb:26:2d:5b:60:c5:e0:d3:7a:23:40:
         b7:d4:82:e5:79:bb:65:be:f3:2c:b2:fa:8d:0d:24:fa:3d:74:
         44:7e:19:df:8a:50:f4:5b:92:41:d7:36:d3:23:71:ee:90:c5:
         ad:bd:e1:8b:a8:72:2d:23:7b:da:2f:f4:63:e4:ca:0c:93:b8:
         cf:3e:b5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:15 2026 by rpki-client