This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          KKM7ulO8K3b2B60879/V2ORiGHsPkDDN8CTslpb5uww=
Subject key identifier:   C2:C2:71:AE:60:EF:4C:FE:AB:8E:8F:4D:5B:FD:F0:1C:CD:26:95:22
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019C1123A6CA0415E20A02F5E7C2F96533D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          100C
Signing time:             Fri 30 Jan 2026 23:01:14 +0000
Manifest this update:     Fri 30 Jan 2026 23:01:14 +0000
Manifest next update:     Sat 31 Jan 2026 23:01:14 +0000
Files and hashes:         1: BER7jGO8I5iYjkTrcND0slZ5a14.roa (hash: zBr5jX84fYtYB5VXfo1ZqvBELNbpywjIMLIB4xZ1YIs=)
                          2: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: RKAxCfwPzY2xAVZPYQu+QqsbvFyNbWaY2bN94QlEJY0=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 23:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:11:23:a6:ca:04:15:e2:0a:02:f5:e7:c2:f9:65:33:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jan 30 23:01:14 2026 GMT
            Not After : Jan 31 23:01:14 2026 GMT
        Subject: CN=c2c271ae60ef4cfeab8e8f4d5bfdf01ccd269522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:9f:22:df:ac:f9:46:69:ea:6b:49:d9:a7:
                    5a:7f:5d:4d:3c:7d:f6:0a:e6:18:a9:a3:66:f8:b7:
                    b7:6b:23:11:62:61:81:58:d6:0c:38:d2:be:2b:72:
                    a0:47:a4:de:d6:de:fd:dd:c3:aa:21:d8:3a:10:37:
                    59:3b:c5:b1:44:03:4c:b6:98:78:af:32:7a:84:94:
                    cc:97:26:67:36:5f:be:f2:1f:3c:a6:88:9d:7b:58:
                    38:35:3c:85:d3:d6:fd:76:64:7b:30:b6:83:0d:28:
                    c0:97:01:d0:76:2f:cd:37:fa:eb:1b:3d:c9:80:a9:
                    f1:81:16:fc:f7:7d:7b:39:f4:c4:37:71:b2:89:1f:
                    df:e9:33:5f:3b:a9:21:0f:40:e7:c2:a8:7f:b1:5a:
                    5e:bc:93:1b:89:3d:e6:06:1e:79:2e:50:d9:1a:b4:
                    51:eb:6d:4d:2f:af:ab:4e:1b:20:f1:5b:4e:15:e6:
                    e6:07:62:ec:e9:28:c5:57:c4:31:c5:d2:fa:ec:d4:
                    bc:9b:db:03:7d:03:41:d1:3c:c9:ab:b2:c1:aa:44:
                    0a:a1:b2:87:e2:48:64:77:1f:2e:09:2a:8a:fe:95:
                    47:bf:a7:ec:f8:26:94:41:43:e9:80:6a:34:ce:fb:
                    f3:e6:be:23:8f:95:ba:05:46:1a:e7:39:e7:fb:51:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:71:AE:60:EF:4C:FE:AB:8E:8F:4D:5B:FD:F0:1C:CD:26:95:22
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:60:55:2d:f3:e6:12:05:91:9b:9d:d6:a3:c8:50:ce:43:18:
         e8:a3:8a:b8:cc:1d:36:63:a8:4e:33:ad:b3:63:f4:4b:ab:8a:
         9e:08:d8:56:6b:27:e1:db:81:3d:02:f5:9a:05:73:92:fa:a2:
         11:fd:df:8d:90:83:08:96:a6:de:a8:81:38:f8:6d:8b:89:0e:
         f3:bf:86:f9:ee:64:10:a0:d7:e7:2c:11:fc:d6:e7:6a:fb:f1:
         86:e6:64:b1:5e:b4:49:b0:d6:67:d3:00:1a:73:5f:7e:16:aa:
         bc:56:49:06:c0:0d:98:19:b8:0e:a3:38:56:1e:3d:cb:f2:3a:
         7c:eb:15:f7:fc:e1:be:6a:c3:b4:37:43:72:06:43:93:58:74:
         a5:ab:fe:4d:21:12:2b:42:2a:cb:86:cc:45:46:0d:d9:e1:76:
         d3:4e:3a:ab:e7:18:08:6d:d7:df:ae:57:ef:e8:d7:aa:32:51:
         ba:9c:94:3d:eb:ff:ed:33:e2:44:99:98:19:3c:23:27:e4:e2:
         93:cc:1e:86:b7:00:fa:0e:22:17:97:f8:86:b9:b1:6d:75:0f:
         8b:11:39:0f:13:d8:db:c2:48:f2:57:93:ee:5b:29:bd:6c:9f:
         5e:0e:c1:8f:76:fd:8e:95:8a:ff:bc:bb:b4:91:ef:42:30:bc:
         ec:3a:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 04:31:19 2026 by rpki-client