This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File:                     4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier:          lTVEqZPx9znkaMKdXe8zYMw1nMgTQmr34I3jnpjrnWY=
Subject key identifier:   66:7F:DA:33:69:EA:E5:DB:FB:E0:EE:7C:99:19:D6:06:DD:62:2D:AF
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer:       /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial:       019BFC52A67558E4AAFF4E440650E60A4712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number:          1314
Signing time:             Mon 26 Jan 2026 22:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 22:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 22:00:33 +0000
Files and hashes:         1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: rHgFff7s4hifxbbfI28e5ikmPb+eUhxZnRW0JDJByeM=)
                          2: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (hash: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg=)
                          3: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (hash: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:52:a6:75:58:e4:aa:ff:4e:44:06:50:e6:0a:47:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
        Validity
            Not Before: Jan 26 22:00:33 2026 GMT
            Not After : Jan 27 22:00:33 2026 GMT
        Subject: CN=667fda3369eae5dbfbe0ee7c9919d606dd622daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:f0:d4:07:75:61:80:ae:45:9f:26:8d:83:
                    e4:31:18:43:5b:ad:a1:5e:46:53:ec:24:fd:1d:44:
                    88:3c:ee:db:f2:9c:cd:8a:f4:cd:1b:54:91:5e:c4:
                    2b:de:21:50:27:d1:63:c3:e8:24:10:f5:09:b3:52:
                    8b:39:42:d9:5f:fb:04:c2:c8:1e:74:94:37:17:81:
                    31:08:9b:3c:8f:dc:26:94:7e:23:46:f7:43:28:4a:
                    7d:31:34:08:28:c9:8d:22:f0:1e:54:53:51:ab:13:
                    24:10:85:eb:78:11:a7:dd:29:8b:88:ff:76:3e:cf:
                    83:9f:33:45:a5:8a:75:0e:f9:be:05:ed:cd:59:6d:
                    05:ba:6c:d0:4c:20:f6:29:b3:c7:c5:b2:a7:0c:95:
                    54:9f:f0:d2:4f:ce:3d:f6:e2:cc:c7:66:e9:4b:9a:
                    99:35:00:19:16:bc:55:14:71:25:47:ba:c8:2f:c9:
                    0f:51:60:49:d5:8b:74:3d:31:d1:5a:9d:aa:f3:1d:
                    2e:d7:af:07:a7:d2:cf:2e:48:57:60:bd:84:49:80:
                    03:96:b7:34:fc:be:89:33:d0:32:b6:27:f6:91:3c:
                    90:83:79:10:7f:18:67:d7:50:c1:25:39:29:a3:1d:
                    40:e7:db:07:3c:71:4f:4c:fd:39:26:86:1f:c2:88:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:DA:33:69:EA:E5:DB:FB:E0:EE:7C:99:19:D6:06:DD:62:2D:AF
            X509v3 Authority Key Identifier:
                keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:37:1c:0c:28:94:bf:c3:38:e5:3c:89:e1:9b:c9:47:9a:bb:
         01:b7:c9:3f:5e:3a:e0:82:2c:b2:0d:c4:e6:08:65:04:9e:ea:
         0a:1d:6d:3a:92:13:9f:e8:3b:37:d6:f5:89:24:f3:f7:16:9b:
         9f:65:51:36:f3:34:e2:7d:89:1f:59:4a:de:87:b4:56:94:01:
         77:6f:76:b0:b7:22:8c:03:f5:52:ae:6c:3c:8e:8f:4c:43:da:
         67:65:f2:f8:ea:0b:5e:fb:8b:26:fb:c2:76:57:53:92:27:7e:
         53:a4:16:64:83:89:17:7a:f5:46:08:45:6c:d3:24:ba:cf:30:
         75:63:2a:6f:f5:ee:6f:e7:31:bd:42:46:98:c0:a3:8f:9d:09:
         5f:79:40:9f:f9:65:3f:4b:db:f0:35:83:03:13:60:e8:42:bd:
         f0:e0:d9:3e:5f:60:38:44:88:e0:59:e2:9a:68:7d:51:ed:ad:
         2d:0a:67:51:8c:33:0d:0b:40:c8:51:78:fa:7a:4f:3e:bd:74:
         83:2d:ce:3b:77:52:68:4b:3f:0b:bd:a7:a0:b8:00:48:eb:4b:
         e9:d6:73:3d:4d:ee:0e:6d:f1:9f:95:f4:2d:71:13:1c:e8:1b:
         f3:9d:87:9b:55:ab:a6:d4:62:40:ee:58:0c:a4:7b:a6:24:f3:
         60:90:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:17:52 2026 by rpki-client