This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          hTMnQxM9dkBv+HgGhONnIK6MJbj/yYvIT9ubODiTOfI=
Subject key identifier:   FB:20:AC:46:D8:A4:06:91:E9:44:A0:ED:B3:B0:18:2A:60:0B:D6:CE
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019BEC71E4D5144F33AB031D130F04C4BE94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0FF9
Signing time:             Fri 23 Jan 2026 20:00:45 +0000
Manifest this update:     Fri 23 Jan 2026 20:00:45 +0000
Manifest next update:     Sat 24 Jan 2026 20:00:45 +0000
Files and hashes:         1: BER7jGO8I5iYjkTrcND0slZ5a14.roa (hash: zBr5jX84fYtYB5VXfo1ZqvBELNbpywjIMLIB4xZ1YIs=)
                          2: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: AiK/GLoqxXCSvxpDY0g1+P5bHVloxi1unhfC2eenXxM=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ec:71:e4:d5:14:4f:33:ab:03:1d:13:0f:04:c4:be:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jan 23 20:00:45 2026 GMT
            Not After : Jan 24 20:00:45 2026 GMT
        Subject: CN=fb20ac46d8a40691e944a0edb3b0182a600bd6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:ca:d8:5a:37:92:58:d9:1f:f8:f6:83:c2:
                    05:32:21:3b:69:3f:ca:9e:01:c5:d4:ce:97:58:d6:
                    de:18:18:7e:77:d0:0f:04:75:f7:37:d2:01:c1:6a:
                    69:d7:8a:51:b6:88:cb:59:b0:b1:e6:45:d6:1c:41:
                    7e:85:40:11:1c:6a:85:8e:a3:e1:a1:8a:4e:2e:2a:
                    d6:e7:8f:65:36:52:93:54:ff:10:fb:f7:93:44:91:
                    9e:78:d3:16:8e:a6:c0:54:e5:aa:a7:96:2f:72:d4:
                    8b:6b:3d:86:b2:95:9b:1d:6d:f1:4a:3f:ec:2e:b3:
                    30:2c:ef:7b:4f:9e:91:e5:26:0f:85:32:08:1c:64:
                    04:a4:55:9e:cd:94:2a:e9:4c:93:c7:28:cc:f0:12:
                    c3:65:5a:d6:36:a2:a8:7b:8f:fa:83:6e:91:a0:b1:
                    91:89:97:fc:2d:b4:43:92:f0:cc:8f:aa:58:95:ef:
                    55:16:a7:4c:ad:b9:68:d2:17:d2:c5:34:98:d5:fe:
                    61:45:02:20:3b:ac:f3:bf:a2:b3:92:d5:55:c4:0e:
                    70:ac:5f:b9:34:15:ef:dd:20:ea:5c:96:8c:df:6d:
                    d4:2d:8b:32:ed:78:84:dc:40:60:80:53:98:48:d2:
                    62:f8:4a:97:4a:d6:9a:e7:59:e7:df:f6:08:75:2b:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:20:AC:46:D8:A4:06:91:E9:44:A0:ED:B3:B0:18:2A:60:0B:D6:CE
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:5e:48:99:53:ef:d9:90:3f:dc:ae:74:15:38:31:c5:ea:
         a7:8f:ef:c8:ea:c2:d6:fe:be:f9:8b:94:20:e6:1d:0d:33:5f:
         a1:8b:41:d1:42:b0:e8:61:72:54:cf:e1:cd:ee:b5:35:57:0c:
         e3:12:bd:ed:76:1f:f6:90:6c:db:83:a5:58:d2:5f:dc:a8:34:
         ed:57:d7:90:7c:28:fe:94:b7:f4:03:e6:7d:21:93:31:32:fc:
         d5:c1:89:e9:ea:5d:98:44:06:b6:0c:a9:1f:e7:79:21:62:52:
         77:48:5e:66:3e:e2:4a:9b:a6:e2:e9:7a:cb:21:f7:5e:7b:df:
         d7:8f:ed:71:3a:3d:62:21:a0:fb:81:0e:e6:d8:1a:55:6d:16:
         49:4b:76:e0:2d:af:62:f8:77:8c:7b:b6:ec:69:11:21:0d:7c:
         74:57:e7:a8:fd:10:9b:a0:3e:a5:e8:19:5b:19:09:e0:b8:7a:
         ae:72:99:af:61:df:0d:15:11:ba:c5:f8:61:c9:ad:eb:f7:64:
         53:b3:dc:01:03:5c:43:fc:d3:92:ed:f8:e0:88:96:01:87:0c:
         d9:40:0b:c5:dc:25:8f:b2:1d:2c:0b:75:e1:36:ee:6c:22:bd:
         77:57:ee:25:b9:d2:97:da:6a:26:41:4e:57:e0:88:72:50:54:
         a2:52:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 00:19:17 2026 by rpki-client