This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          JI1pow5C6hBTWmgbezptN+LLu18dQK1ohGa4AAimA3I=
Subject key identifier:   DD:45:35:B4:07:DA:5B:30:D4:E6:15:2F:BB:81:97:A6:4B:EF:C6:65
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       019BF9C04E699A20150FC7AE2C31F628D5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          1220
Signing time:             Mon 26 Jan 2026 10:01:28 +0000
Manifest this update:     Mon 26 Jan 2026 10:01:28 +0000
Manifest next update:     Tue 27 Jan 2026 10:01:28 +0000
Files and hashes:         1: EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa (hash: M1gISMhpKhFU9UmPCNCI/doZU1g2NiTQmw7wAJBLP/M=)
                          2: Lwt_X6AAGI86G0w2hs0sFC6ysgE.roa (hash: kOlheHwMeO3EOJsZD45/E8+h4BiWzP4+ikBuiBRsu7c=)
                          3: QywnDfiHpKTh6ooW_xx-5aORw8M.roa (hash: Bqa88Z9v3UhbxERx71ob7HDwbEwvqX8+abORSZIV3BM=)
                          4: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: iIWri5LVQB6KrmR0n1MLWE9kr41+EZOGkbTLBCZSWuI=)
                          5: xLXzuP-cjQADCvBzNYnmNJBPLL8.roa (hash: A8Jp9U7r7wLJSaZ007I6zWKtzpDoig9jOp2XhXr4KAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:c0:4e:69:9a:20:15:0f:c7:ae:2c:31:f6:28:d5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Jan 26 10:01:28 2026 GMT
            Not After : Jan 27 10:01:28 2026 GMT
        Subject: CN=dd4535b407da5b30d4e6152fbb8197a64befc665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:09:fe:bc:0a:1e:1c:8f:75:08:e6:4d:27:94:
                    13:6a:ef:5b:5c:13:88:67:a3:a8:f2:32:d5:05:4a:
                    5e:86:97:0b:56:5a:33:dd:08:e5:2a:84:c9:c1:1e:
                    c5:e5:10:92:85:32:fd:3e:7e:3a:ef:34:81:33:8a:
                    09:d7:a0:6b:b8:f7:6a:2d:5f:1f:75:24:46:df:c4:
                    91:f7:fa:24:64:95:d8:38:1c:ef:b9:4a:c6:5c:e4:
                    59:f5:c6:cb:84:c5:99:62:38:f7:aa:fb:6e:f6:49:
                    c8:8f:7d:23:c5:e4:c8:c7:4b:dd:89:40:bd:be:c7:
                    ee:7a:82:9d:47:0c:20:57:2d:dd:2e:7d:54:9e:87:
                    b9:74:56:6f:f1:8a:86:c9:e8:c6:42:1d:ee:56:0e:
                    08:f1:f0:8f:71:7b:d9:47:7f:75:6b:ae:c8:fa:d9:
                    cc:3a:56:41:42:aa:99:23:91:f5:b8:b4:91:35:bb:
                    d7:39:e5:d4:64:1b:fe:8b:74:cc:dd:7e:07:f3:ff:
                    cb:1d:e9:7f:3c:98:f1:d1:6c:49:04:df:e2:dd:2d:
                    bf:0b:79:b2:75:fb:7a:0b:2c:bb:62:e5:dd:e9:0c:
                    01:97:ae:db:31:33:96:e6:ac:8d:e8:e3:62:36:e4:
                    6d:e6:b4:40:9b:70:12:a4:c7:0f:ab:f5:e6:b2:69:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:45:35:B4:07:DA:5B:30:D4:E6:15:2F:BB:81:97:A6:4B:EF:C6:65
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d1:0e:76:d3:21:90:35:df:69:bd:63:87:1b:d7:be:c8:50:
         f9:37:d0:ea:4c:00:bc:f5:d4:c1:8e:ed:ec:99:66:41:ca:43:
         25:13:fe:ca:f0:a3:74:53:db:18:98:10:c4:c9:60:a9:06:af:
         56:15:af:60:90:1e:bd:16:52:1e:37:93:55:a7:86:e4:55:e4:
         16:6b:42:38:67:d0:79:ce:0c:95:b0:1e:95:42:6a:1f:13:eb:
         06:57:f0:0f:53:e7:e8:9b:26:5d:0c:f5:39:dd:62:85:9e:c3:
         a7:cf:2f:6d:e9:c4:f0:d7:a3:0d:0e:c6:85:f5:e8:0f:31:17:
         66:f4:f6:5d:d8:b0:95:38:3e:2c:9b:58:7b:82:69:61:b9:31:
         58:e6:19:6e:0c:30:84:86:29:56:f7:78:16:47:55:38:9c:9f:
         79:6f:09:3f:ce:21:83:27:57:ac:aa:db:81:27:60:8c:35:8b:
         76:be:95:50:e9:27:19:bf:41:eb:ed:28:4f:cd:b5:f2:28:d2:
         71:5b:80:98:ba:c7:33:de:31:aa:26:1e:7b:8d:b6:84:70:a1:
         d7:07:a6:03:a6:6e:6f:84:d2:75:5a:fd:f0:ec:0f:6e:ef:6f:
         9e:5f:61:c5:23:89:d4:7e:f9:12:22:20:12:dd:bf:76:e1:89:
         8c:3d:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:49:29 2026 by rpki-client