This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          7y+Dq2+UzkrcHkue7EWsmO3cci+Meo8vXDg08zHE3PY=
Subject key identifier:   0D:6B:5F:A3:09:0F:50:3E:FA:1C:61:00:24:69:2B:C3:6A:2E:B8:67
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019BF9F6E926E04D6B69D6F35B9FA54601C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1000
Signing time:             Mon 26 Jan 2026 11:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 11:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 11:01:06 +0000
Files and hashes:         1: BER7jGO8I5iYjkTrcND0slZ5a14.roa (hash: zBr5jX84fYtYB5VXfo1ZqvBELNbpywjIMLIB4xZ1YIs=)
                          2: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: v/oAPcxltft5bnXctontkZf0N3jo/8gSu3vUzgsqf1o=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:f6:e9:26:e0:4d:6b:69:d6:f3:5b:9f:a5:46:01:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jan 26 11:01:06 2026 GMT
            Not After : Jan 27 11:01:06 2026 GMT
        Subject: CN=0d6b5fa3090f503efa1c610024692bc36a2eb867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:9c:40:00:00:aa:cb:78:58:3e:85:55:1a:
                    1a:94:0c:a8:6c:55:16:90:54:ef:3d:be:d6:c4:42:
                    db:f5:86:b8:c0:01:85:fb:a7:6a:e7:f9:e2:6b:a7:
                    74:84:98:d6:8e:7e:8a:1c:45:79:cf:ee:33:5e:e7:
                    00:51:c5:47:d3:21:d3:8d:9d:60:08:c1:90:d7:bc:
                    15:81:f4:b1:d7:e7:ae:d2:ff:59:e3:2f:e7:74:d8:
                    5c:75:69:90:fc:70:68:9d:ca:54:da:d1:c5:cf:e9:
                    28:68:91:10:e9:fc:81:c6:74:a2:e5:89:ce:c5:9e:
                    18:86:59:21:71:37:37:c1:ce:02:89:b5:62:e6:d0:
                    b8:e6:19:3a:2f:83:6e:0b:e4:f6:fa:07:b2:18:f7:
                    db:22:ed:a9:c6:db:3f:88:8c:be:06:43:39:f6:e9:
                    f1:73:e2:2a:6a:3b:35:5a:8a:5f:f0:d2:c5:ab:c2:
                    6d:c1:e1:0d:a8:d4:44:bf:cc:4b:cc:84:22:98:3e:
                    68:ff:05:08:f9:a5:b9:ca:62:95:1f:be:5e:af:29:
                    42:51:cd:2c:a1:07:7d:ce:53:46:07:d6:bc:88:b7:
                    97:29:ee:c6:e1:11:10:27:81:ba:8a:7d:7c:d7:07:
                    36:ad:d5:b3:59:16:0d:77:37:08:39:46:44:d5:4a:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:5F:A3:09:0F:50:3E:FA:1C:61:00:24:69:2B:C3:6A:2E:B8:67
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:09:a5:d1:aa:2b:a3:1a:eb:fb:61:6b:5f:d7:44:59:00:5a:
         a4:4a:80:58:84:19:78:b5:aa:9f:2e:3b:a5:61:a4:f4:6f:15:
         c0:97:cc:0d:07:86:66:41:a9:2d:99:db:4f:ca:b9:40:fb:5b:
         2e:a5:b5:45:b4:53:8f:ac:98:28:ee:f3:50:8e:76:34:15:8a:
         52:78:dd:ae:23:f4:98:20:36:2b:ed:1f:de:a9:da:b6:89:12:
         42:d1:4e:03:91:88:8a:f0:2d:6c:c6:7a:16:b6:35:3d:47:79:
         a2:7a:24:97:5c:a2:65:26:3f:e6:e8:52:d6:9c:86:d1:1d:cf:
         a4:b4:14:d6:6a:fa:13:04:20:ab:9a:9c:17:f9:e2:4b:f8:3c:
         26:e8:29:40:46:02:07:9c:0d:ec:84:bd:e2:44:5c:dc:d3:87:
         03:fa:33:46:54:0b:2b:60:95:ed:fe:aa:71:20:d9:90:81:1e:
         ba:3f:c1:07:16:0b:c8:23:4d:de:b7:19:5d:11:10:18:fe:ea:
         64:ee:b1:76:8e:b2:c2:78:ef:d7:cf:6b:96:8f:bf:a1:cc:a6:
         07:a7:33:80:8f:24:d9:5a:29:a5:db:1a:60:7c:fc:47:fe:78:
         06:5c:15:2a:82:58:c4:c2:87:83:30:67:f8:54:11:ec:41:77:
         96:30:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:04:24 2026 by rpki-client