This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          81kD8oTZSWG3M1e/TOQ4IJOUbkTcVX53cGPcQaZbeAU=
Subject key identifier:   EB:3C:11:DF:44:0F:9C:43:01:9D:D8:E3:17:50:47:06:00:EC:F2:C3
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019BFC1BF1B568AD91B928F271D665D7B954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          17F3
Signing time:             Mon 26 Jan 2026 21:00:48 +0000
Manifest this update:     Mon 26 Jan 2026 21:00:48 +0000
Manifest next update:     Tue 27 Jan 2026 21:00:48 +0000
Files and hashes:         1: I2q3ifUktwdWLFVk814q3GS4fWI.roa (hash: IGOlAHTyV8D50YrVyxyBur7sPUQLiEB5K2gkPY8V5KM=)
                          2: Or_Trx_pyk3P2RfQHAGvSoa3E_o.roa (hash: D6cpvG3bXYxnFOjIpxhw7hO0pHmMSae7H7JteYOOGpA=)
                          3: OxGf8ePayJwU09gGZnySyoA8iyo.roa (hash: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA=)
                          4: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (hash: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU=)
                          5: VqNP0Im1R2Xhcy1xVWos-OfuEPE.roa (hash: iduPoCIxSjpp0ZSpvCwLlS/MLtsMgKgNiTHnlQR8wrA=)
                          6: YueSZbKV98CmzxsiRfWA83jDNEs.roa (hash: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw=)
                          7: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (hash: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds=)
                          8: e71RJyBktjssZjwClroR216iOMA.crl (hash: Tjf/ggqQ8A4ONVn8mZY9fRbY6z2lN92AjmYV6KdsMCo=)
                          9: oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (hash: c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=)
                          10: w2zX0OlEApQBeN-eJRqrMs7-KhQ.roa (hash: VAl4aNgTKdrb4Wh3EXu5ag7LbozTNcCxOnMz/M31Mvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1b:f1:b5:68:ad:91:b9:28:f2:71:d6:65:d7:b9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Jan 26 21:00:48 2026 GMT
            Not After : Jan 27 21:00:48 2026 GMT
        Subject: CN=eb3c11df440f9c43019dd8e31750470600ecf2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:80:1a:b3:75:5a:7b:a3:ad:a1:c2:24:62:
                    00:01:e3:b3:b0:09:66:8e:b6:20:0b:33:5a:68:48:
                    d1:fe:13:b1:de:c6:e0:88:b1:8c:dc:9e:51:d3:97:
                    9e:59:19:1d:3a:3d:54:bb:6a:e0:34:46:4b:e0:9c:
                    a9:b3:7b:98:53:89:3a:9e:96:2d:f5:b3:84:78:7c:
                    7c:19:53:69:9c:a2:14:25:4c:0d:8f:04:2e:02:97:
                    b1:e3:82:a9:b7:dd:c0:a3:73:10:70:5e:4e:08:ca:
                    e1:e7:7d:bf:34:39:59:10:c3:06:59:77:e0:5d:8d:
                    44:9e:ea:43:aa:36:fd:3a:4b:e8:b9:26:ea:08:54:
                    0b:7e:3b:52:c9:56:0d:c0:1b:d7:0a:58:0e:6c:34:
                    b1:8d:97:e4:29:00:90:2b:05:16:1b:a4:fa:ef:34:
                    f2:64:3e:15:81:af:7b:14:ef:36:e1:a4:d7:c3:fd:
                    f0:34:65:c4:da:e0:fe:56:f2:be:80:78:90:59:a8:
                    8f:ec:96:be:1c:cd:2a:6d:eb:d1:be:ab:26:7c:0b:
                    8a:0a:d7:06:4d:c3:89:cb:41:8b:a0:85:de:e5:d6:
                    c7:98:30:02:07:d2:91:95:2b:ec:9d:81:80:93:f0:
                    ad:25:07:ca:54:4a:5e:9b:52:1b:8b:6f:cc:0e:4a:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:11:DF:44:0F:9C:43:01:9D:D8:E3:17:50:47:06:00:EC:F2:C3
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:f7:68:f0:4d:33:93:d0:8a:dd:3f:7c:d0:dc:83:93:e0:
         73:52:fd:ee:f3:5d:6a:38:43:de:12:16:8b:58:94:62:bd:36:
         1f:5b:78:82:6e:7a:72:ae:ef:ee:f3:80:9d:dc:a9:57:d0:71:
         e2:1c:c1:86:11:39:eb:b2:b6:e9:37:4f:84:1d:f4:c0:d1:98:
         28:02:0e:5a:ae:98:4b:7a:8a:28:dc:1d:cc:fd:86:42:87:c3:
         5e:bd:6b:91:15:d5:09:7c:f3:8f:f9:01:0f:5c:71:30:15:98:
         2a:fa:75:13:3f:d1:7c:8a:4b:7d:66:e7:74:c0:f5:33:97:2e:
         29:d8:27:37:1b:32:3d:57:d0:e9:80:9a:bf:7b:a9:00:96:b8:
         39:58:f4:9c:13:81:6c:75:c1:7c:90:ca:c5:94:7c:ba:1b:42:
         29:ad:39:1e:38:be:d0:8a:01:6b:13:8e:68:ad:73:60:5e:a9:
         b2:92:fe:8b:c1:a3:4e:ef:0d:69:66:62:3a:e5:c0:ef:61:03:
         9c:78:61:32:16:2f:83:e7:91:e2:bc:2d:93:ea:24:44:7f:ca:
         9b:dc:e0:1d:8c:71:7c:15:36:5f:39:9f:d7:c6:44:e6:62:fb:
         75:5d:33:de:b3:c1:8d:42:a4:2a:03:bf:01:ee:00:2e:6e:1b:
         8d:32:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:07:33 2026 by rpki-client