This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
File:                     63yCLR6UUXyIUVzJs_wr3hKbRUw.mft (raw, json)
Hash identifier:          lTUgKUgmUD3QMVR6fYYJUoSurTvNzgNuFeZXnwMo7Lc=
Subject key identifier:   AE:42:B1:99:98:98:CC:A2:85:06:96:FE:8E:51:AD:CB:ED:71:6C:2F
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Certificate issuer:       /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial:       019BFCC11105310CE407EFE3842152258071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
Manifest number:          17EA
Signing time:             Tue 27 Jan 2026 00:01:09 +0000
Manifest this update:     Tue 27 Jan 2026 00:01:09 +0000
Manifest next update:     Wed 28 Jan 2026 00:01:09 +0000
Files and hashes:         1: 63yCLR6UUXyIUVzJs_wr3hKbRUw.crl (hash: aLrOxrUKPlpO94waasQWJUv+GNzbfIdzc6yPes0qt6k=)
                          2: Pelb9sx4UaCo06lIQtdADw9o9Vw.roa (hash: O2VqkK6qa58vFJcGmVZ5qivbdGixDgXC4n2ji/pNHjk=)
                          3: zKOI_3lej9icw_aTm3PEM1SApkE.roa (hash: J5AQoEFLTdlzSmKbeqXCxm1OdussHB+lHvKODys5oTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c1:11:05:31:0c:e4:07:ef:e3:84:21:52:25:80:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
        Validity
            Not Before: Jan 27 00:01:09 2026 GMT
            Not After : Jan 28 00:01:09 2026 GMT
        Subject: CN=ae42b1999898cca2850696fe8e51adcbed716c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:63:c1:ce:dd:58:5c:c3:7b:0f:49:b0:c2:
                    b9:b4:0e:48:7e:51:18:88:66:a3:72:d4:84:68:1f:
                    8f:be:7a:6c:5b:f4:df:7b:ee:85:a3:e2:0c:d4:a6:
                    97:72:e9:5a:fd:26:ad:4f:14:16:32:d7:2f:30:ba:
                    57:f8:8b:21:90:b4:04:18:0a:84:3d:07:e5:c3:59:
                    30:fb:a6:c8:4b:1d:20:dd:50:f1:d1:d7:b9:b0:ec:
                    7e:be:9d:fe:a3:11:d3:cf:b9:62:ec:5d:9a:0c:11:
                    42:15:64:9a:c8:3c:f0:93:a5:c3:f3:6a:65:2d:2e:
                    1b:38:4f:d5:47:83:de:e6:b9:03:aa:72:f2:9c:8b:
                    b3:06:90:7c:67:65:f5:fd:b2:62:f9:12:1e:de:e9:
                    80:dd:22:2d:4e:66:3e:78:62:0f:62:1f:a3:71:a5:
                    dd:bd:fc:58:da:4e:25:ae:6c:2a:6e:6f:fa:36:16:
                    71:ec:74:10:92:6e:a9:54:cd:79:33:cd:fe:a6:e9:
                    26:eb:aa:ce:e3:26:bd:a6:08:71:8b:dd:fa:a4:d0:
                    a2:be:21:a6:79:9d:44:da:2a:e9:5e:9e:63:f3:14:
                    bb:cf:d7:04:3f:82:75:8b:bf:36:53:e9:73:3c:f0:
                    21:0f:64:43:6d:17:04:fb:98:cc:03:b0:67:44:7a:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:42:B1:99:98:98:CC:A2:85:06:96:FE:8E:51:AD:CB:ED:71:6C:2F
            X509v3 Authority Key Identifier:
                keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:01:3c:b2:4c:73:e5:b3:94:3f:58:2e:a4:d8:7c:29:4f:
         5a:40:f6:e1:c2:fc:e9:70:4f:e6:9e:22:58:22:74:60:ba:8d:
         a6:01:9a:8d:36:08:a2:9d:99:55:62:43:ea:0e:88:1b:db:a2:
         2a:b7:79:90:68:06:d3:c9:bf:b5:41:ce:61:c1:94:9f:bb:b4:
         d1:12:62:ec:9d:0e:1d:44:2b:8b:6f:28:c3:48:8a:2b:50:13:
         dd:d4:9e:2c:1b:fd:52:30:59:fc:b0:7e:2a:9c:01:38:7f:f5:
         42:5f:a0:ce:06:80:b6:2f:e1:d4:17:9f:fa:bb:37:21:54:b4:
         ca:6e:1a:2a:4f:a4:51:d2:1e:45:3a:d4:f2:24:00:e1:e9:8f:
         72:74:d1:dd:6c:71:c8:20:07:c2:c2:40:86:c3:be:e2:3f:e8:
         bd:4a:4c:80:1f:98:9b:5d:0e:a2:13:de:ee:97:ad:89:37:ec:
         70:60:06:36:70:a7:18:85:b6:f0:cf:27:44:71:f9:96:c1:1f:
         b8:9e:9a:2e:4e:39:42:dc:4b:dd:c8:3c:41:05:6a:ea:37:61:
         f4:31:16:f8:83:97:9b:ef:a9:52:45:5d:2f:10:e5:0d:67:cf:
         93:41:a1:f4:af:03:92:2c:04:85:d9:5b:85:82:9c:b7:e7:59:
         d1:d6:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:28:59 2026 by rpki-client