This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File:                     eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier:          hE2l3TdQW7PnSOJF3FwPE2QM0W8PkprrSN8QpGVRUMI=
Subject key identifier:   4F:65:AC:89:96:B8:8A:7F:34:22:03:68:E8:B2:30:30:03:BD:27:16
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer:       /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial:       019BF8AD2522CA878388240FDF6B2C72A11F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number:          1508
Signing time:             Mon 26 Jan 2026 05:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:55 +0000
Files and hashes:         1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
                          2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
                          3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: YbZ1rEwV97uyXyFDDjGXheVVoT77bKw2KJbMLt4K+SA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:25:22:ca:87:83:88:24:0f:df:6b:2c:72:a1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
        Validity
            Not Before: Jan 26 05:00:55 2026 GMT
            Not After : Jan 27 05:00:55 2026 GMT
        Subject: CN=4f65ac8996b88a7f34220368e8b2303003bd2716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:43:ee:4e:29:1f:dc:fe:f7:fd:59:25:cf:40:
                    bf:20:04:8a:75:40:79:f5:77:32:de:44:d9:51:e7:
                    27:ea:0f:dd:2d:6a:4d:94:c8:37:76:93:bc:50:f8:
                    f1:03:57:6f:68:d2:9a:bf:15:85:52:0b:0a:a4:d2:
                    0c:a1:32:0c:76:8f:40:3a:38:fa:2b:da:2a:91:80:
                    18:24:ba:aa:10:81:4b:cc:bc:8f:41:78:cd:d7:d6:
                    c0:8d:e2:12:4c:e6:31:b5:47:86:72:ab:55:5e:b3:
                    da:37:0a:e1:08:28:1c:f8:0a:75:19:13:03:11:61:
                    aa:0b:0e:5b:1e:7f:80:45:10:b6:66:b1:22:07:5d:
                    dd:e0:5d:40:a4:41:11:04:da:f9:47:1b:74:ba:92:
                    32:f6:96:76:cb:64:a3:1c:ab:65:0b:69:27:c9:d6:
                    9c:92:59:ba:15:e6:e0:bb:ad:77:43:6b:e4:1e:4c:
                    00:76:28:ef:c5:49:d1:03:d6:bf:5d:20:12:bd:8d:
                    65:34:9d:8e:9d:41:ab:6e:0f:fe:e6:2f:a7:ac:42:
                    9e:fc:11:ee:77:5a:6b:63:ba:91:77:10:38:69:1a:
                    be:48:17:d5:e6:7d:39:3b:c5:b5:8f:1b:e9:da:60:
                    30:e0:3d:3e:53:29:ac:92:81:96:6c:26:10:62:41:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:65:AC:89:96:B8:8A:7F:34:22:03:68:E8:B2:30:30:03:BD:27:16
            X509v3 Authority Key Identifier:
                keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:dc:ff:af:3b:e6:b7:74:1f:64:3a:fa:a4:da:3e:ef:89:53:
         e0:53:3c:fe:45:49:7f:d6:3c:0c:e8:6c:b7:47:fb:a2:51:0d:
         87:dd:74:e8:4f:90:1e:3d:a3:ba:cc:14:bc:12:e8:53:aa:1b:
         a8:34:08:92:ca:f3:08:3a:02:c3:74:07:2e:9b:0f:9f:21:d1:
         36:92:f4:7e:ac:f8:ee:ce:4f:c8:e3:46:89:5c:92:98:a1:c5:
         b1:91:26:ef:bc:43:44:25:73:77:6a:31:4c:4e:2a:50:81:e8:
         ed:a4:7b:2e:5f:29:db:b7:3a:b1:d8:02:98:b5:5f:1f:8a:dc:
         e6:c0:9f:c7:ef:8c:cb:8d:f5:88:f8:77:be:fb:4d:23:51:19:
         39:aa:aa:8e:22:77:e8:5a:93:20:2c:05:bd:ae:2e:96:51:8c:
         0e:96:74:ae:0b:8f:a9:dd:00:45:95:a8:ff:63:7a:e8:3c:f0:
         96:a5:9e:22:22:96:19:d8:49:4f:f5:f9:2e:cf:2c:0f:35:59:
         cc:06:2e:8e:b8:fc:1f:be:09:33:19:9b:10:b0:4e:2d:a4:eb:
         e3:90:fc:12:a1:34:52:a9:32:85:84:48:09:5e:69:94:f4:e3:
         cb:16:62:e1:b3:47:10:bc:d9:ef:88:b0:01:5f:7d:7a:d7:0e:
         3e:d1:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:51:39 2026 by rpki-client