This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
File:                     e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft (raw, json)
Hash identifier:          Sq5huNG5XNcwO9fldAe/kVMEEMd9FKDci8lFn4hHc4s=
Subject key identifier:   64:34:5D:75:50:A2:BF:22:9D:1F:2F:64:25:B1:33:6C:FD:88:8E:90
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Certificate issuer:       /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial:       019BAD93A498A1A321556350D0306A4C41F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
Manifest number:          1574
Signing time:             Sun 11 Jan 2026 15:01:32 +0000
Manifest this update:     Sun 11 Jan 2026 15:01:32 +0000
Manifest next update:     Mon 12 Jan 2026 15:01:32 +0000
Files and hashes:         1: e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl (hash: QrhAwL5+b1u5J0wDIyEfBdsyeigkEBAPf5Pw1ZafoOg=)
                          2: mFHhU2NyVkEbNwlkB3bejxUOOlA.roa (hash: EjtP26UkYPevXuuKHwl2GTUGnR0K4UdWJdQY55pYt8Q=)
                          3: oHEmOWvbStvmXg2LD_oqbDWil3o.roa (hash: 0Raa8F6IlDnkK8IyOP/5NEY/cQcjmmbqoE7t0YULRgs=)
                          4: zVeMOGhhQeFzksT1wb6RxaGm3Bs.roa (hash: RiwqJteMkhWRGoMK/7/uuJWp83uAVoqzTnUHF40fP2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 15:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ad:93:a4:98:a1:a3:21:55:63:50:d0:30:6a:4c:41:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
        Validity
            Not Before: Jan 11 15:01:32 2026 GMT
            Not After : Jan 12 15:01:32 2026 GMT
        Subject: CN=64345d7550a2bf229d1f2f6425b1336cfd888e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:41:d9:fc:59:bb:63:6e:d4:17:ca:a0:e0:
                    48:a7:bd:d4:5d:ba:4a:fd:3c:3d:81:2d:29:80:c0:
                    53:be:10:56:49:6c:0e:5f:8a:ff:49:2f:f5:be:79:
                    b4:6f:08:eb:83:c1:c7:db:45:53:3e:e0:61:77:21:
                    38:ca:20:03:03:50:45:96:e4:61:18:94:71:5e:ad:
                    76:b0:a1:a1:d0:15:35:cb:e5:12:17:c5:49:ad:38:
                    99:4e:57:0f:78:b4:88:73:4b:2e:e9:5f:fe:a4:ab:
                    8c:52:14:a1:9c:64:28:40:6f:d0:ac:17:33:07:f1:
                    07:ee:a0:ab:05:01:1d:83:fb:97:66:d0:78:44:dd:
                    e6:3d:30:50:38:b6:63:51:4e:18:09:c1:12:10:a2:
                    2b:9b:41:10:80:08:f3:49:b8:f8:36:66:bb:73:b3:
                    e2:d2:e9:e8:23:8e:63:c8:fa:3c:9c:4a:97:8d:80:
                    05:f8:0f:e8:9e:fe:60:82:a0:a3:a2:47:9d:35:76:
                    ea:09:ea:af:18:a9:26:af:38:f1:f6:62:e9:1e:c5:
                    9e:49:a8:bd:e8:44:17:c2:13:6f:44:a1:71:75:3a:
                    9c:26:cd:3a:29:36:de:b3:ba:fe:80:81:95:df:51:
                    90:f1:8c:c0:1c:2e:96:8d:d4:ee:76:9e:07:7e:fd:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:34:5D:75:50:A2:BF:22:9D:1F:2F:64:25:B1:33:6C:FD:88:8E:90
            X509v3 Authority Key Identifier:
                keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:df:08:4f:53:b6:00:09:e3:6b:31:88:3c:e3:a8:ed:71:9d:
         44:80:7a:9f:82:30:3a:fa:51:8d:38:a3:31:c3:6e:f0:62:ed:
         6f:74:54:f9:02:94:cb:45:a3:83:90:41:12:92:ae:54:62:60:
         1f:04:52:40:84:88:0c:e3:62:2b:6a:28:5b:b8:47:47:8d:43:
         bf:29:1d:ce:26:51:81:5d:7c:e7:ce:0a:15:b5:bd:bf:fe:58:
         80:32:ad:90:96:21:5f:79:9f:e1:b0:9a:11:d7:a8:91:83:fc:
         04:8a:18:58:52:d3:e0:11:bb:af:e6:8a:f4:a9:d8:51:5f:58:
         d5:2d:34:5d:ca:ec:19:82:ca:63:a8:b4:07:9c:d3:6f:55:69:
         00:53:c0:d0:44:a1:c5:03:7b:23:ed:4e:9e:e8:21:9c:2a:01:
         1b:cc:13:34:94:19:37:3a:14:04:7a:e6:5d:63:d5:c6:48:e2:
         44:80:60:1a:39:dc:2b:b3:4c:04:3d:fe:bb:ca:32:3a:29:0f:
         ba:85:12:b8:4a:25:87:38:4d:ec:ff:63:9d:96:40:b0:ef:af:
         9b:5f:32:d1:bd:c5:0b:d6:10:35:e0:af:e6:41:14:65:d9:9c:
         3a:8a:3c:e8:d8:66:d6:94:68:c9:d5:41:7d:3a:9b:78:62:3c:
         12:48:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 21:03:46 2026 by rpki-client