This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File:                     ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier:          mx+JU5OoSv0GnZXNNrSJzcfULbmXelVgKfDEf5TtYq4=
Subject key identifier:   3F:FF:11:21:88:32:17:66:F9:33:7E:54:51:16:AE:C1:28:52:C0:97
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer:       /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial:       019BF4626953A4502853C195C215386EEDBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number:          0F4B
Signing time:             Sun 25 Jan 2026 09:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:48 +0000
Files and hashes:         1: 1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (hash: vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=)
                          2: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (hash: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI=)
                          3: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: tJ3jfoTtGpDDmyhPNVAdIIbeB3dONdUzvo/Yu3PNrjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:69:53:a4:50:28:53:c1:95:c2:15:38:6e:ed:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
        Validity
            Not Before: Jan 25 09:00:48 2026 GMT
            Not After : Jan 26 09:00:48 2026 GMT
        Subject: CN=3fff112188321766f9337e545116aec12852c097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:3b:b1:01:ad:31:33:1e:5c:0d:41:6f:59:
                    1d:c1:d0:ff:55:6f:22:7e:33:bb:70:85:74:48:c9:
                    86:7d:81:49:25:f0:ed:c2:a5:7a:cf:95:cc:92:93:
                    c6:9d:64:81:7e:9f:25:c0:cf:c2:50:03:a9:18:e3:
                    04:89:f0:3e:07:57:d2:2b:9e:dc:0a:f4:8d:50:0f:
                    d2:b5:58:cd:33:10:43:33:66:64:52:13:71:33:86:
                    91:41:8f:b7:6a:da:8d:50:c4:ba:9f:1d:1b:d4:87:
                    3d:49:02:e8:f4:5b:c8:c8:8e:9a:70:ad:ef:cb:5d:
                    c2:c0:f7:fe:4a:34:03:dd:10:df:66:0d:15:e6:7a:
                    ac:4e:88:51:38:c3:51:1c:db:09:a3:fb:a7:c8:a0:
                    29:b6:68:2f:50:87:02:8e:c0:32:76:96:54:78:00:
                    6f:89:a7:2f:ba:76:16:8f:ca:36:9a:b6:26:8c:f8:
                    82:86:8f:d1:44:99:42:da:87:45:43:1b:69:3f:0d:
                    e5:9f:68:23:5f:d0:ad:a4:33:03:64:f4:b0:f8:40:
                    b9:31:b5:e0:30:35:66:bd:a8:a3:52:d1:9d:bf:63:
                    ed:d1:69:30:f6:59:23:75:e1:fb:df:2f:08:7b:6a:
                    b0:d7:34:c1:8b:a3:8e:8b:de:a3:7c:e0:2d:7a:57:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FF:11:21:88:32:17:66:F9:33:7E:54:51:16:AE:C1:28:52:C0:97
            X509v3 Authority Key Identifier:
                keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:83:cb:c4:c4:44:8a:91:68:c4:05:74:fb:fd:49:80:c5:bd:
         82:66:85:59:a2:80:fe:84:32:f8:e8:fe:f3:68:df:17:b9:b6:
         0e:9a:a1:f9:0a:04:fb:f2:85:9f:5a:6d:12:9b:2e:ca:ac:2a:
         53:e7:76:a1:6f:54:84:88:80:e3:8f:d5:22:0e:40:06:12:f9:
         eb:32:8f:58:ac:fe:1e:d3:d9:20:36:65:3b:29:24:07:75:64:
         eb:10:9f:e0:63:12:ff:49:32:de:fe:78:50:6d:16:6a:b0:3b:
         14:20:f5:ac:ed:fc:e2:17:47:95:5d:40:08:a2:2d:94:67:1b:
         37:1c:eb:da:03:2d:aa:b4:22:93:52:82:21:74:58:ac:02:b8:
         9c:49:d0:f3:a0:4d:93:e3:eb:80:82:80:dd:be:10:d1:f1:09:
         89:1f:b5:d2:3c:84:ae:d9:74:93:d2:1e:94:e9:23:12:56:29:
         b1:86:30:88:9f:bd:a5:0f:b9:10:53:d5:b1:29:e3:c0:51:1b:
         ff:02:8b:71:75:9b:7c:04:da:6c:a4:bc:83:da:33:39:c2:52:
         51:2f:7e:f2:41:f9:33:08:56:c7:94:85:36:a6:ac:b3:da:70:
         20:89:7e:a9:f6:66:1a:0c:01:c9:ba:59:b0:49:2b:a3:2a:90:
         f9:ce:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:28 2026 by rpki-client