This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File:                     eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier:          U5xSJGNzy3yRH2UAzlRdhjrjKU1NSoSbAdaH8eaLJrg=
Subject key identifier:   C1:9C:07:CF:99:C2:51:1D:F2:A0:C0:09:21:75:27:93:24:4A:23:23
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer:       /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial:       019BFC8A67FD52658B87AF8780F0A2C6B900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 23:01:27 +0000
Manifest this update:     Mon 26 Jan 2026 23:01:27 +0000
Manifest next update:     Tue 27 Jan 2026 23:01:27 +0000
Files and hashes:         1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
                          2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
                          3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: NpbWENLVWrYXMXUONraXYt+BXQkNRVNm/iHAL0uIRGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:8a:67:fd:52:65:8b:87:af:87:80:f0:a2:c6:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
        Validity
            Not Before: Jan 26 23:01:27 2026 GMT
            Not After : Jan 27 23:01:27 2026 GMT
        Subject: CN=c19c07cf99c2511df2a0c00921752793244a2323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:02:4d:93:ac:98:fa:c1:cf:50:a3:93:9d:
                    ed:eb:0f:61:a4:7a:b7:61:c1:e5:f7:01:3d:22:30:
                    fb:89:5a:31:e6:bc:be:a5:81:e3:55:cf:44:c6:e7:
                    2a:54:5d:21:2a:fc:27:16:7d:f3:b1:17:3c:9b:cf:
                    17:cf:a7:5f:67:8c:ff:35:b7:91:f9:d2:f3:eb:8a:
                    c6:9e:a9:a0:7a:15:57:d7:45:9f:a6:0e:48:7d:52:
                    3e:60:c8:fb:04:5a:12:9d:f3:89:05:9f:42:96:82:
                    4f:f2:96:ea:46:d5:8f:4f:0a:f6:37:18:35:5f:77:
                    14:c9:79:dd:9f:65:a7:83:dc:d2:bb:98:6e:ff:64:
                    29:d9:bb:b0:74:94:9a:69:53:0b:b8:13:30:97:b8:
                    58:4a:ec:0f:48:4a:88:6c:84:a1:bf:ed:46:73:33:
                    bd:5f:a2:d4:11:a6:0a:cb:f1:a6:66:3a:af:e3:01:
                    a1:2f:78:87:fe:f7:e4:27:a3:5d:c6:df:36:66:cd:
                    9f:69:43:65:92:fd:85:90:44:86:e0:19:4d:c4:c6:
                    46:61:ac:22:ff:50:27:c6:cd:8e:c1:7a:1e:e2:c8:
                    7e:64:f0:f1:4a:55:15:96:58:de:1e:e5:15:da:3e:
                    cb:7b:1e:b0:1a:a4:96:63:63:1a:83:fb:49:e6:24:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9C:07:CF:99:C2:51:1D:F2:A0:C0:09:21:75:27:93:24:4A:23:23
            X509v3 Authority Key Identifier:
                keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:20:97:99:f8:4f:ee:7d:94:20:e0:e2:e5:24:e5:eb:92:64:
         0b:10:9c:f1:e6:40:b4:5c:a6:75:a9:5f:1a:31:99:7a:b3:1c:
         10:41:08:7b:eb:c5:5e:a9:46:ab:63:de:de:38:36:4e:ae:36:
         53:e5:66:6f:b4:41:23:4b:f2:8e:8d:03:e1:9f:ef:9a:3f:80:
         a3:9e:3f:b3:71:5f:33:12:4e:22:c1:7a:61:2b:e8:0c:5c:18:
         61:13:4a:f1:be:50:83:ec:6c:43:0d:4d:63:a5:2c:5f:6a:9c:
         c8:61:aa:48:18:05:31:d7:35:91:52:63:16:76:bb:b1:b4:da:
         d1:1f:99:4e:cb:db:73:f1:74:bc:c2:1a:a9:36:ab:de:95:43:
         59:5c:5a:3a:05:59:a9:fa:26:f4:00:3b:a0:ad:67:f0:17:7a:
         0d:02:91:d9:bd:5d:76:13:35:61:ab:75:b5:b1:25:5c:f1:b2:
         a5:6f:8d:4f:d2:f7:25:f1:6a:de:2e:f6:bb:06:ec:11:d9:8d:
         11:91:91:49:35:6f:9d:58:87:87:0a:4c:25:71:98:53:88:6e:
         86:70:a4:5b:17:c9:41:4b:dc:f9:96:c1:ce:0e:b5:e3:3f:01:
         85:9c:21:29:fa:c6:5e:30:ed:e5:fb:86:9b:41:1b:cb:73:84:
         1a:09:cc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:37:32 2026 by rpki-client