This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
File:                     4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json)
Hash identifier:          zwmsqWcovrepwZ+JmT5WpPjt/ibDR6pfxDk7iTicCr4=
Subject key identifier:   26:10:45:25:AA:E2:F3:42:36:8E:0B:74:4D:30:44:A8:B6:22:B7:D3
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Certificate issuer:       /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial:       019BFCC121695336156A3F821DCF5F23F414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
Manifest number:          0CB7
Signing time:             Tue 27 Jan 2026 00:01:13 +0000
Manifest this update:     Tue 27 Jan 2026 00:01:13 +0000
Manifest next update:     Wed 28 Jan 2026 00:01:13 +0000
Files and hashes:         1: 2YFl1nz6ibOdUXICM8EmCPLdQEU.roa (hash: e6z98KANzMTmyp6yuocLyiolXniFv4kx3RLaW4TSkDA=)
                          2: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: omcJaLJ/pVwyJyw9PUZk99np5iCOc80Z8Ikdvernsp4=)
                          3: Xx27rFNzn0CKCl9qSt2PCELhh7M.roa (hash: lrSb36B35+cjoGY4fibEVUmY5+MNB48JzpR68OA81aQ=)
                          4: bjGLD3ovB-bfvIknnpZ0Lbe-TsE.roa (hash: 4P/0oP6KrZeB/0pCl0SqvxvPAOXuMv82h87HkIeA7+0=)
                          5: otd5V2cV1Ca3eD_CY3OTJoxda-o.roa (hash: q2udBVaxk+e2Vd86P+KK9uKGO31T3slWZ/u6JA3I8mc=)
                          6: u8jIlP-9sy1xmDDwt89PXIovv5w.roa (hash: e83kW8pSB5IhX9GGs940RM/rz2pGIWlSPel7ssIVenI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c1:21:69:53:36:15:6a:3f:82:1d:cf:5f:23:f4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
        Validity
            Not Before: Jan 27 00:01:13 2026 GMT
            Not After : Jan 28 00:01:13 2026 GMT
        Subject: CN=26104525aae2f342368e0b744d3044a8b622b7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:b7:da:b9:58:b7:72:84:24:cd:0e:8a:c7:
                    47:0d:0d:ef:ca:d8:e7:36:cb:d1:b8:08:41:33:6f:
                    ec:70:d2:f3:92:4a:76:98:10:51:67:52:a1:2d:56:
                    d8:f5:ba:a3:2e:56:23:fd:31:07:40:b6:ea:22:61:
                    01:32:30:45:0f:9d:3e:4c:3f:18:c1:9a:e8:f4:80:
                    9c:a4:40:68:da:ec:44:3e:dd:83:b1:25:03:7e:0b:
                    a5:e2:7d:a0:14:02:e9:c9:31:25:a1:e3:7f:d3:45:
                    fa:1b:cb:e1:e8:c9:6a:3f:6e:53:2c:29:36:2a:44:
                    02:ef:b9:3f:6b:c9:c9:1e:52:12:d5:15:2a:06:f9:
                    97:5d:10:de:f2:c3:cc:65:af:a4:b1:93:62:1e:bc:
                    3c:61:59:0d:2f:b6:62:c4:1e:c6:86:99:fd:d4:38:
                    02:37:06:fd:aa:6d:2e:32:51:28:00:25:a4:d1:3c:
                    4d:ee:6c:26:a8:f6:cb:7e:e6:ad:c6:96:37:60:22:
                    ac:6f:c7:44:cb:b6:6b:56:ea:a3:7b:00:bc:34:0b:
                    94:9a:95:4b:a1:37:c0:74:2b:5a:e3:f9:44:51:17:
                    70:c1:8d:31:25:c1:70:7d:38:cb:9e:03:0a:ee:8f:
                    52:17:3f:1f:09:d3:6b:77:68:10:ef:e5:1d:ff:0d:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:10:45:25:AA:E2:F3:42:36:8E:0B:74:4D:30:44:A8:B6:22:B7:D3
            X509v3 Authority Key Identifier:
                keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:35:8d:84:77:4c:69:40:53:b2:b8:1b:a8:ee:38:db:c7:
         36:a1:a5:04:72:7d:61:d7:70:7b:a6:6e:e0:7d:1e:8b:a1:09:
         ca:b7:f0:37:1e:bb:10:9b:91:37:ea:bf:86:bd:6b:d3:c6:77:
         74:08:5c:3e:49:70:22:f4:5a:f9:f6:9f:e9:f7:05:89:86:c7:
         1c:96:bf:84:3e:6f:e0:8a:57:bd:91:b8:66:c1:8b:e2:7f:f4:
         36:1d:21:f6:1b:db:b6:a4:cc:b3:9d:c8:0a:15:db:6e:62:84:
         47:0f:0f:2a:37:49:14:c2:74:b9:dc:91:23:f4:62:c0:26:5c:
         63:2c:d8:3f:fb:99:2b:69:5e:ca:24:43:3a:f5:ad:2d:71:22:
         32:f3:a4:e9:ad:11:d1:ca:d1:66:28:49:95:75:92:94:70:bb:
         69:7b:ac:70:dc:bb:cc:48:5a:a4:e5:ec:b5:93:82:21:4d:08:
         1b:0d:75:a2:46:ef:b6:dc:b3:d8:f7:2e:6b:69:d7:41:8c:65:
         7f:fa:f9:bc:92:49:9c:1e:c5:b2:bf:c8:22:4a:4a:d3:e3:3d:
         75:9b:94:0b:7c:a5:89:bc:a4:5e:89:8e:70:1a:80:35:38:5c:
         3a:f9:a4:de:ae:c5:a7:fa:3b:e1:43:02:fe:41:ab:26:5f:96:
         ed:8e:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:08:10 2026 by rpki-client