This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          g2Hq9dhoNXQKOoBfBw6/LlqPpKjSZlNeUkry6xIpVC4=
Subject key identifier:   70:CC:4B:D0:D4:75:0D:5B:3F:B0:B1:3F:44:F0:85:FA:36:5F:F3:73
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019BD7343FB32A6C70F2D56134BDFB04EBDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0FEE
Signing time:             Mon 19 Jan 2026 17:01:24 +0000
Manifest this update:     Mon 19 Jan 2026 17:01:24 +0000
Manifest next update:     Tue 20 Jan 2026 17:01:24 +0000
Files and hashes:         1: BER7jGO8I5iYjkTrcND0slZ5a14.roa (hash: zBr5jX84fYtYB5VXfo1ZqvBELNbpywjIMLIB4xZ1YIs=)
                          2: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: srl3trznAhI2VEZIIRywxwQOUDPa4h4Axz+DsVrNeEo=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:34:3f:b3:2a:6c:70:f2:d5:61:34:bd:fb:04:eb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jan 19 17:01:24 2026 GMT
            Not After : Jan 20 17:01:24 2026 GMT
        Subject: CN=70cc4bd0d4750d5b3fb0b13f44f085fa365ff373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:59:94:41:7a:58:f1:cb:b0:d1:69:1e:03:
                    b0:7a:df:50:21:ee:86:e9:7d:b1:a4:0e:19:8e:e6:
                    b3:a8:2a:51:fa:aa:22:09:b1:52:b4:20:d8:d1:cb:
                    bf:cb:e2:63:c4:4a:d3:39:3d:e8:a2:84:2f:08:36:
                    4c:95:a8:b6:5a:fd:7f:50:b5:a3:41:d0:c1:e5:b1:
                    de:73:c5:03:3b:57:56:18:92:3f:b5:3a:bf:52:f1:
                    3a:c2:39:76:ec:c1:33:f7:79:2b:8d:74:8f:50:95:
                    93:35:ee:d1:b7:1a:5a:68:69:b6:13:1d:47:1e:9d:
                    8f:6f:e2:4f:88:3a:39:42:d0:8b:50:93:60:40:4d:
                    81:e4:fb:0a:40:6f:87:21:20:92:8b:06:ae:ea:5a:
                    b7:7b:72:75:2c:a8:1f:20:8a:c8:14:c5:2d:87:25:
                    e8:5a:4e:82:1a:b5:ec:a7:b5:07:96:30:53:53:e1:
                    ea:b4:1e:2b:8f:0e:dc:ea:0a:4a:43:1a:8a:b1:a9:
                    b6:10:f3:e6:0b:42:0f:98:b7:a0:36:ad:58:29:2d:
                    4a:dd:5d:0d:31:47:88:8d:bc:c3:42:58:1e:9a:e5:
                    91:46:23:7e:b3:af:28:66:94:56:45:5f:a0:6b:3c:
                    0b:ad:97:f4:69:c4:14:a4:8b:e4:f5:00:2f:4a:06:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:4B:D0:D4:75:0D:5B:3F:B0:B1:3F:44:F0:85:FA:36:5F:F3:73
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:de:18:a1:4c:5d:da:bd:a7:2e:6b:b0:94:87:ca:7f:80:
         d7:99:7c:34:fc:1e:c3:94:bc:9f:66:b2:ac:38:f0:06:02:1c:
         71:2b:81:42:c2:df:b7:71:b6:b5:19:b9:29:75:73:5f:2d:65:
         e4:e6:fd:a3:ef:fb:37:79:05:43:76:e0:bd:ad:04:f1:99:2c:
         9a:f8:b8:b0:ab:ff:6c:f7:56:ca:95:02:9d:f1:ef:62:d1:2e:
         c9:c2:2c:c2:cd:09:3f:01:69:ac:6d:99:87:18:3d:4a:2a:b1:
         6f:f3:72:49:9c:02:e9:81:ca:ab:db:93:f0:89:2c:e9:dd:f3:
         e8:a9:04:30:12:4f:ca:6d:50:e6:a9:18:1e:d2:18:8b:e6:58:
         47:0e:c4:cf:d9:5d:9f:a6:71:2d:84:12:02:1a:69:3f:3d:d8:
         6f:cc:02:8e:b7:c6:7c:b7:d3:25:2a:b3:f7:aa:1c:9b:ed:b2:
         32:d2:dc:71:e4:3f:11:65:ff:db:fc:6e:55:3c:57:14:c4:f4:
         4d:e2:e1:b3:39:da:20:2f:13:16:b8:27:b3:be:9b:72:9c:de:
         da:83:09:45:b6:7f:f7:4b:1b:05:95:2f:2a:0e:4b:c1:ed:86:
         46:2e:44:3f:1e:38:42:d5:22:c7:0d:31:eb:e8:db:ac:27:a7:
         8a:a4:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 22:38:39 2026 by rpki-client