This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File:                     epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier:          p2OdsZ6g6t2YEO/VDTcR7G2xDLr5o9qmaDjgR2zfTLc=
Subject key identifier:   B7:12:94:E5:62:E6:1F:85:78:91:7E:C6:15:E3:69:DE:30:92:FE:A1
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       019BDEB747507BA6FE5EE438D05F9A71430C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number:          1454
Signing time:             Wed 21 Jan 2026 04:01:51 +0000
Manifest this update:     Wed 21 Jan 2026 04:01:51 +0000
Manifest next update:     Thu 22 Jan 2026 04:01:51 +0000
Files and hashes:         1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
                          2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: 5oC1T1RI0KdjUqumBw02PrOsdAkkfeSUqz6FVjt0y+g=)
                          3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:b7:47:50:7b:a6:fe:5e:e4:38:d0:5f:9a:71:43:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Jan 21 04:01:51 2026 GMT
            Not After : Jan 22 04:01:51 2026 GMT
        Subject: CN=b71294e562e61f8578917ec615e369de3092fea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:37:f1:6c:c5:54:81:e4:83:f6:fc:b0:e6:
                    9f:ce:4d:38:68:e6:62:11:b4:0a:79:34:68:d3:44:
                    da:2f:02:51:ed:98:52:6e:ae:a4:bb:af:52:f3:e4:
                    85:d2:88:ca:d6:53:b9:46:7b:98:95:3d:b3:7e:a2:
                    08:93:71:a5:c9:95:8c:97:ea:8e:71:0e:35:f2:80:
                    a7:f8:52:83:b2:92:21:07:3b:11:00:05:fa:19:f4:
                    94:61:8b:29:ab:8d:4c:c7:5e:2c:31:72:ca:7b:3b:
                    b6:19:1f:8b:87:24:52:6f:25:a8:19:b0:2f:a6:a2:
                    b9:c0:10:3f:de:77:f5:b6:31:53:9c:a1:b3:76:05:
                    72:ef:01:73:f0:2c:b1:1f:54:29:d2:95:6a:01:b7:
                    de:6a:29:71:00:5e:d2:30:cc:66:41:2a:3c:3d:a9:
                    a5:6d:02:b1:25:a9:82:6c:b1:35:e5:a9:3d:f3:ec:
                    71:56:66:a9:7d:f0:8c:f0:87:66:32:56:eb:d8:c7:
                    26:92:24:96:e8:12:a7:f6:11:84:e6:ad:28:19:2c:
                    20:63:8b:d4:bb:1f:2d:34:aa:ce:3c:60:99:cb:ce:
                    6e:7f:4f:d7:40:a0:da:f3:fd:05:eb:93:01:5c:fe:
                    d5:14:c1:ea:7c:32:cc:da:6a:46:54:78:c4:ca:f4:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:94:E5:62:E6:1F:85:78:91:7E:C6:15:E3:69:DE:30:92:FE:A1
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b7:c1:59:54:ea:a5:51:22:17:7e:63:42:a5:5c:4f:1e:0d:
         d3:cc:69:9e:7b:72:1e:ab:d8:f4:0a:1e:0a:56:d0:6b:da:05:
         77:61:05:38:05:0c:eb:ab:36:4f:b3:f1:ab:38:45:fa:fc:13:
         3d:c5:1d:d3:7d:b3:27:cf:17:a0:5a:f9:da:f9:6c:16:6b:ff:
         9e:25:64:4c:0e:d4:cc:fd:9e:b3:3f:95:0f:11:87:19:85:76:
         80:b4:8d:f6:74:84:ff:51:6d:37:95:19:9c:ea:83:8c:90:38:
         19:76:3e:8e:9c:8e:44:9e:c4:da:f2:46:b2:ef:bc:cf:c1:3a:
         eb:fe:82:f2:07:7d:26:d8:d5:3a:6b:7b:06:ea:80:21:22:84:
         4f:b9:55:6e:26:98:fa:be:fe:1a:da:99:af:b1:27:37:d7:24:
         cf:c9:ea:ff:b6:f6:b0:60:6b:9a:55:6d:f9:46:bb:b4:50:7d:
         57:cf:9c:5d:78:00:59:4b:73:0f:1e:5c:c3:c5:42:04:58:61:
         48:74:8a:ba:92:f3:31:fe:eb:ea:72:ee:7d:44:9f:af:a8:e7:
         4b:a4:62:85:94:9d:0e:5d:fb:97:0f:7c:d1:b0:20:e1:d4:d3:
         bc:c2:52:5e:b1:fb:27:2f:aa:8c:4f:4b:96:52:eb:e6:ee:8d:
         92:1a:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:58:25 2026 by rpki-client