This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          +oUvf3RXdTFC9rhkPP87YM0tDjG+TgO9Mok2bZX6Fgs=
Subject key identifier:   7F:BD:9F:98:18:E5:CC:0E:01:08:29:5C:44:E6:DD:5E:E0:03:DF:0E
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       019BD01F004387B237A42AD0741D835D9081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          09F5
Signing time:             Sun 18 Jan 2026 08:00:51 +0000
Manifest this update:     Sun 18 Jan 2026 08:00:51 +0000
Manifest next update:     Mon 19 Jan 2026 08:00:51 +0000
Files and hashes:         1: FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa (hash: qrm8Hvv6ZY4XD/rO0TyVVz8/PmIjDcXusRWAzudBFPw=)
                          2: Q-_VAhr_3KM6k7h05hr8GonF39M.roa (hash: sBlSBxemwWOVZDZUFiQlhe/vEkuAulILbiLVu6l2Y+s=)
                          3: _gMstHGZPe_7SzCes23Xk4_prxs.roa (hash: UfaVFa/Va8RG4LCVknZ/sC6sc8zENIigGZfQiIzmNA4=)
                          4: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: mmjkR25xrxPZxuv/9sqDKYk0qlYSTRn4KpagnFKLSZE=)
                          5: swQMeQBE5wb78ss3tCTd5K3tnlI.roa (hash: uIGxjGabnvBWdl9aXtwznXWVFMHKBrwT9BZDyH0VO8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d0:1f:00:43:87:b2:37:a4:2a:d0:74:1d:83:5d:90:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Jan 18 08:00:51 2026 GMT
            Not After : Jan 19 08:00:51 2026 GMT
        Subject: CN=7fbd9f9818e5cc0e0108295c44e6dd5ee003df0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:2d:f2:63:6c:b9:06:82:68:18:16:e4:b5:
                    cf:66:d0:6e:e2:0f:99:d4:f3:b9:33:5b:af:18:86:
                    d0:4a:08:4f:a1:f9:2a:45:37:01:ac:eb:83:1e:9d:
                    7a:13:70:f0:7e:39:4f:32:8e:02:44:4e:d1:7d:57:
                    6e:12:92:47:12:ef:65:28:a6:46:84:5a:97:10:1c:
                    89:82:a5:cd:71:44:5f:dc:1d:ef:51:04:29:25:84:
                    88:a4:c0:af:d4:1d:c7:d6:8e:df:be:c7:4b:2f:30:
                    e2:9d:91:61:14:c6:a1:d3:41:97:a6:5c:b8:35:a8:
                    be:a1:61:5f:1a:e7:0f:57:e8:54:6c:0e:89:fb:15:
                    a0:2e:99:f6:ef:0b:c8:df:49:1b:cf:d5:e0:aa:75:
                    53:67:50:06:2a:6b:0a:7b:ec:16:b4:9d:e4:1c:ac:
                    93:c4:e5:c3:ab:3e:da:62:59:11:da:06:56:35:aa:
                    b6:0d:38:07:0a:2e:df:b8:06:5f:73:14:01:82:5d:
                    fc:76:f4:3a:93:8b:f5:c1:bf:00:82:60:a2:5c:c6:
                    3e:19:84:b6:49:5f:29:3c:f1:de:ce:b4:31:1c:3f:
                    a8:76:e9:74:8c:0c:a9:90:87:bc:56:8e:37:c1:c6:
                    ce:bd:0e:a6:6c:63:eb:8a:79:47:7d:85:d6:c5:60:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BD:9F:98:18:E5:CC:0E:01:08:29:5C:44:E6:DD:5E:E0:03:DF:0E
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5e:6f:64:de:1a:52:43:9e:8d:9d:b2:17:fc:59:0a:d0:10:
         5f:83:74:3c:9c:3c:1c:a6:a1:f0:b8:59:c4:c5:37:36:7f:d3:
         d3:e7:79:d9:37:aa:10:3b:eb:3b:87:ad:f1:5c:3c:90:46:87:
         1a:c6:00:e6:8e:1e:11:00:56:e3:21:82:0e:7c:7c:53:8d:3f:
         0e:b6:25:d0:05:f5:1b:37:2d:26:de:f9:dd:65:81:d3:b1:00:
         b3:c4:06:16:5a:4f:ee:e0:bc:b7:36:ee:96:67:1f:3c:98:53:
         dd:6a:1d:b0:48:ec:e5:de:ca:3e:5e:0c:6a:7a:77:e4:b6:4c:
         7a:5b:d1:0e:e0:ca:30:19:a7:42:03:56:21:9a:a4:b6:25:f2:
         70:62:2e:da:1a:ba:98:bc:60:a7:ae:01:95:d1:ca:23:9d:c9:
         e1:c2:55:8d:72:41:45:ca:0f:0a:a0:de:e5:19:6d:0d:a4:44:
         32:c9:a5:44:32:66:d2:25:a7:c6:df:24:a2:53:e4:e0:0f:e8:
         87:35:20:3b:ce:e2:8c:cc:26:bf:7c:f9:21:b6:26:ee:10:a6:
         de:5e:3f:3e:16:db:90:54:2b:74:3f:6b:56:8e:a2:62:aa:08:
         83:b1:a6:91:b6:cb:d2:32:04:c6:db:58:42:ae:98:a0:87:cd:
         0b:0c:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:58:34 2026 by rpki-client