This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
File:                     eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft (raw, json)
Hash identifier:          PoX9MUtkmn0u7L4lp/TBtm3txJ9j90IoyxpuhFAfusk=
Subject key identifier:   EE:55:22:9A:95:5A:76:61:03:67:4F:1B:7C:AD:9A:9B:54:C1:8B:CB
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Certificate issuer:       /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial:       019BF988A160B0A3D3A44B2CDC7B48D7D673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
Manifest number:          08AE
Signing time:             Mon 26 Jan 2026 09:00:39 +0000
Manifest this update:     Mon 26 Jan 2026 09:00:39 +0000
Manifest next update:     Tue 27 Jan 2026 09:00:39 +0000
Files and hashes:         1: eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl (hash: ymOcThdf1Sgbu61OYvdNuIp3seWwg9hwVopQfOIbMCA=)
                          2: hJNgDCDdIASqdPzVGFaSQ7mqw6Y.roa (hash: 0uMjJLsB/QfKv6p98Olbel7xjcI0shnDhzuCW+Dr3qY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:88:a1:60:b0:a3:d3:a4:4b:2c:dc:7b:48:d7:d6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
        Validity
            Not Before: Jan 26 09:00:39 2026 GMT
            Not After : Jan 27 09:00:39 2026 GMT
        Subject: CN=ee55229a955a766103674f1b7cad9a9b54c18bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:4e:d5:dc:69:5b:34:a0:15:69:57:42:44:
                    54:a1:b6:0d:4a:86:8c:c6:38:1e:7f:19:cc:0f:69:
                    de:e3:79:a9:3f:4f:0d:93:7b:ec:a4:1c:bf:2d:19:
                    84:b8:3f:99:58:c0:60:87:35:8b:13:2f:3f:a2:15:
                    87:61:9b:97:1f:b1:8a:6d:5e:3c:d7:68:13:e5:33:
                    a7:d3:f1:1b:d3:e7:cd:3f:aa:05:4e:5d:ad:4a:42:
                    b6:4e:49:8f:6f:8f:3d:3b:9f:d7:b2:06:47:5c:70:
                    4f:7d:08:6f:8d:81:12:87:53:98:b8:99:df:e1:36:
                    1c:2c:3a:33:e1:77:ca:96:88:63:22:56:df:e7:64:
                    ed:92:84:9a:2c:a0:72:28:db:f1:b7:53:62:48:95:
                    13:d9:a9:fd:84:3a:23:79:94:1b:45:f0:69:1d:9b:
                    80:46:1c:80:36:01:96:dc:69:eb:12:d8:e3:d5:7e:
                    00:f1:1c:95:7d:02:7a:77:af:6a:69:5c:77:a6:0e:
                    15:e9:0d:ff:63:00:01:cd:dc:c3:43:bd:b5:cb:73:
                    90:e9:0f:d6:c7:f9:2f:69:33:fd:24:f6:2f:2c:eb:
                    a4:e3:8c:54:60:d6:b6:05:cb:03:bd:98:e0:7e:e8:
                    e2:41:2c:5a:d0:5e:2b:b3:0f:c9:c3:3a:d7:aa:90:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:55:22:9A:95:5A:76:61:03:67:4F:1B:7C:AD:9A:9B:54:C1:8B:CB
            X509v3 Authority Key Identifier:
                keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8e:90:5a:03:e4:b5:8c:02:cd:5e:7e:57:68:b0:f7:03:ec:
         43:61:66:47:1c:42:fd:de:5d:17:a0:2b:e9:9b:65:d8:6c:a4:
         a2:ca:ed:62:54:0a:b9:5b:69:f8:32:68:73:38:fc:bc:f7:be:
         af:0f:23:de:bb:ab:ac:bc:7e:08:aa:e6:56:cb:fb:ba:09:e3:
         a5:70:7d:37:99:fe:fd:56:db:5c:65:31:a7:8c:11:f5:b8:d0:
         96:41:6f:77:6c:2d:15:8a:53:f6:12:fa:b3:7d:1a:32:63:0a:
         05:86:ab:ac:62:4d:cd:03:c5:56:07:b1:e5:31:f1:4f:3f:5c:
         2a:a0:2d:7b:7f:c8:17:cf:f7:08:14:ee:74:b7:5f:38:46:db:
         f4:b1:38:23:4c:31:f6:4a:74:7a:8d:bb:c9:f3:42:7e:be:ca:
         c4:40:dd:7c:d7:cd:04:98:c6:93:18:ae:60:b6:50:31:b5:f7:
         bb:8d:b8:7a:f9:6b:77:1b:e9:69:3f:09:b2:71:21:11:9f:53:
         13:bb:96:78:68:2b:d3:0c:98:a0:aa:7c:67:4b:cf:05:54:a0:
         49:dc:a2:e5:9e:b9:1a:f0:5f:34:01:cd:2a:f4:18:7a:e2:0d:
         54:9d:fe:94:12:aa:82:1c:57:1e:2e:36:5f:14:65:26:cc:51:
         9f:b8:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:10:32 2026 by rpki-client