This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          Y1DGCL5BilZR2S7fYOb67OET7kycPgVs+pSgWkrjhJ8=
Subject key identifier:   72:5D:2C:C8:6D:05:D3:B5:51:3B:EC:2B:1B:E5:1C:D9:2C:83:99:E4
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019BCF7A52CAED6C9483255A770E55154387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0FEA
Signing time:             Sun 18 Jan 2026 05:00:58 +0000
Manifest this update:     Sun 18 Jan 2026 05:00:58 +0000
Manifest next update:     Mon 19 Jan 2026 05:00:58 +0000
Files and hashes:         1: BER7jGO8I5iYjkTrcND0slZ5a14.roa (hash: zBr5jX84fYtYB5VXfo1ZqvBELNbpywjIMLIB4xZ1YIs=)
                          2: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: Q5JQJ0rUrQXPICslR7r6qbdoWYus6EEg3nUurHukndQ=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cf:7a:52:ca:ed:6c:94:83:25:5a:77:0e:55:15:43:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jan 18 05:00:58 2026 GMT
            Not After : Jan 19 05:00:58 2026 GMT
        Subject: CN=725d2cc86d05d3b5513bec2b1be51cd92c8399e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:80:87:d9:7d:3d:48:be:4e:9f:e2:0b:c1:
                    9b:8b:78:05:14:3d:55:33:eb:84:66:73:2a:13:6f:
                    e8:7e:09:77:54:6e:d2:7b:0c:6b:fa:bb:ff:40:ca:
                    c9:d4:e4:6e:1a:63:0b:54:5c:68:46:ae:ab:81:73:
                    5b:2a:9c:5f:c3:78:e4:e2:37:e2:0d:c8:cc:8d:04:
                    dc:4a:32:f2:79:a7:bb:85:91:f4:68:8f:8a:5c:e2:
                    b0:9e:11:f0:41:82:51:5f:b2:f0:f1:c5:60:b9:75:
                    b5:d8:b3:14:7c:8d:fb:0c:6b:36:0e:3e:bb:24:6f:
                    c3:e7:07:e6:ad:7b:e9:b4:72:3f:45:c1:f8:a5:9e:
                    a6:6b:25:03:29:87:17:01:14:7c:1c:0b:38:9e:da:
                    88:51:f7:08:8c:b2:f1:90:a6:93:4a:0e:39:f4:7e:
                    53:7f:43:d3:20:e4:6a:c2:4a:aa:af:c8:c7:81:61:
                    94:b4:fa:db:37:ad:5b:b1:b1:a6:2b:c0:f8:73:73:
                    4e:69:ae:9c:1c:f9:d0:fb:bf:1c:fa:28:78:b3:fe:
                    87:10:a1:f3:51:45:5a:53:aa:88:5c:5b:d0:d0:ab:
                    f4:e4:9e:8e:ae:9c:61:71:3c:a7:d5:5c:3f:e2:5f:
                    72:71:d6:3f:ce:a9:0d:90:ff:24:aa:89:2d:aa:a5:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5D:2C:C8:6D:05:D3:B5:51:3B:EC:2B:1B:E5:1C:D9:2C:83:99:E4
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:e5:a9:a1:34:89:fe:ce:3d:36:48:71:31:d8:07:a6:72:
         8f:ea:7e:fe:91:f4:a7:46:64:1d:15:7a:00:d5:a5:a7:32:b6:
         00:48:93:34:13:f3:0b:28:02:67:d0:e8:e7:53:4d:1c:89:05:
         dc:df:d8:94:70:46:00:d6:96:c6:de:b1:ca:82:9b:0d:fb:65:
         d1:a2:80:87:18:a9:d9:2d:c0:6e:a2:6f:da:2c:0d:aa:70:5a:
         45:11:46:ec:a4:14:93:7f:5a:ab:5f:a0:7e:e2:83:a3:73:e9:
         40:a9:ba:2a:e6:ba:78:6e:a2:af:3b:4a:08:54:4e:41:8a:f7:
         7d:b2:2b:e2:77:66:ee:3e:fe:92:86:c8:71:d1:b3:ef:6e:61:
         01:59:47:31:a2:04:ee:59:ae:fa:87:91:a0:3c:aa:b3:70:23:
         de:86:21:23:6a:d7:ec:4e:0c:bd:35:2d:9e:c1:38:d5:94:c1:
         0a:98:cc:b1:5e:34:98:a9:94:ee:86:81:16:d0:c9:cf:1c:dc:
         92:16:71:79:0d:c3:96:ce:48:28:4b:04:11:3f:19:aa:e0:f2:
         3c:67:f1:c0:74:2b:09:4a:11:f7:d0:8d:52:34:ed:ec:2a:90:
         96:a9:9a:a9:b1:cf:0c:40:f4:6b:0e:ba:2a:35:6f:af:1d:1c:
         82:5c:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:57:36 2026 by rpki-client