This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
File:                     64JTR370B4ekh0qzFSNEcKeBRzE.mft (raw, json)
Hash identifier:          jvT5Aoxuo7PcwpQIiD6U3CYhUyWd3VLnfUQ4Uh3tFMo=
Subject key identifier:   0F:B6:81:B1:5D:B2:C8:51:35:50:18:64:5D:66:A5:23:BF:CF:9D:3F
Authority key identifier: EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
Certificate issuer:       /CN=eb8253477ef40787a4874ab315234470a7814731
Certificate serial:       019C1B02CA85D36644BB8D4B357E7ED17692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
Manifest number:          27
Signing time:             Sun 01 Feb 2026 21:01:33 +0000
Manifest this update:     Sun 01 Feb 2026 21:01:33 +0000
Manifest next update:     Mon 02 Feb 2026 21:01:33 +0000
Files and hashes:         1: 64JTR370B4ekh0qzFSNEcKeBRzE.crl (hash: cxbdptRKbgjcl3EuFKUhZHywSRmeWFDkkyEj+PHdLC8=)
                          2: 74ND96wfWQblEmEn_XmLMDJc8Ms.roa (hash: fBrsi159ZXwbpr8tOXDtntruPENEKrwv65q61vBIq4U=)
                          3: GjVB6VNfky3Cv5QhaFAqU2u9HJ4.asa (hash: kqdn8mHVdB0J+vYDLZ9IAW32CYuXvCsidQRkLRwVd0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:02:ca:85:d3:66:44:bb:8d:4b:35:7e:7e:d1:76:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8253477ef40787a4874ab315234470a7814731
        Validity
            Not Before: Feb  1 21:01:33 2026 GMT
            Not After : Feb  2 21:01:33 2026 GMT
        Subject: CN=0fb681b15db2c851355018645d66a523bfcf9d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:07:36:1a:e2:83:0a:99:d8:40:c4:ff:2c:
                    1a:82:26:34:b1:da:fb:04:28:f0:07:fb:96:30:ff:
                    55:8a:0b:cf:2b:a3:d2:0d:84:bb:50:9c:01:42:87:
                    30:6b:cb:e3:54:6b:3a:27:b5:c4:0d:94:fa:13:12:
                    36:da:bf:11:2a:3c:9d:3a:e0:bb:4c:00:01:3c:9c:
                    a0:9f:ae:22:10:24:b3:3d:27:e2:78:12:31:24:9c:
                    b2:2c:b6:cb:d1:1d:7c:27:a6:ed:4e:14:f5:08:73:
                    a1:bc:1b:f6:c1:df:c8:ad:35:fb:55:dd:e6:2e:76:
                    46:97:37:c5:9d:b1:2d:e6:4b:28:0e:b7:5d:dc:ef:
                    79:32:1b:d1:81:07:fe:e7:95:06:6f:31:2e:0a:ae:
                    18:43:1c:22:8f:0f:6a:92:83:38:d9:9e:a4:77:39:
                    ce:7f:c7:c1:0c:5c:86:ed:7d:21:0e:12:44:11:70:
                    cc:1c:22:39:51:c5:06:2e:6a:6b:e4:93:62:a1:54:
                    26:4b:4e:76:51:b0:5c:2a:6e:a6:94:42:a3:25:52:
                    7f:02:ce:8d:4b:a9:1f:e2:af:64:5e:d3:83:f7:8d:
                    28:b6:de:1d:da:12:bb:4f:6a:c3:4c:ef:7b:2e:bb:
                    3a:d5:03:cd:90:a8:50:dc:93:e2:84:89:ef:84:0d:
                    de:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B6:81:B1:5D:B2:C8:51:35:50:18:64:5D:66:A5:23:BF:CF:9D:3F
            X509v3 Authority Key Identifier:
                keyid:EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:d8:3f:12:dc:fb:92:76:2d:98:83:c9:75:f7:a3:99:e0:
         94:fd:01:36:cb:67:31:15:8f:9a:d2:5f:ae:53:f4:7f:dd:7c:
         b5:b7:af:50:60:3c:ed:49:79:7f:e3:46:2a:33:77:f1:7e:12:
         e5:de:57:01:d9:70:20:3f:9f:42:10:16:91:ab:36:d2:cb:fe:
         22:14:db:56:61:95:43:ec:81:87:68:1d:8a:e2:f4:5f:33:19:
         28:7d:65:bf:e4:84:57:9d:82:56:48:08:2b:bd:6d:b8:64:f5:
         90:0b:78:3c:26:4b:b7:67:94:9e:77:b4:94:d4:38:48:78:60:
         e5:40:38:05:d6:9b:15:d6:31:f0:57:17:c3:0f:ff:42:7c:d6:
         56:2e:c1:8d:53:f3:62:8d:99:98:0a:b4:1d:3d:99:16:5e:32:
         f8:11:a7:55:86:e0:c0:c3:03:2e:77:dc:03:dd:cc:aa:c4:ba:
         23:4a:bf:ea:c0:97:5e:6e:c7:ad:3f:67:f2:2c:67:da:8e:26:
         43:ac:4c:95:eb:fc:ad:b7:0f:40:4e:a2:63:74:4f:c1:d2:77:
         e0:a2:29:ce:fd:ae:f3:51:62:c0:ed:0d:08:8e:cb:f6:d7:4e:
         d2:b4:f1:97:41:19:d1:ac:1b:2b:b0:fc:eb:59:1f:6d:36:a0:
         57:84:12:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:07:44 2026 by rpki-client