This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
File:                     eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json)
Hash identifier:          kNu1NuQBy4xOEK3Tw0KiKH2Irr3SHurs77DiJNWBHjg=
Subject key identifier:   CB:51:91:91:12:14:80:7A:C0:29:DC:26:35:15:68:B5:51:08:25:62
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Certificate issuer:       /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial:       019BF8AD99528F71737D1883F7BD0C4C1D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
Manifest number:          166D
Signing time:             Mon 26 Jan 2026 05:01:24 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:24 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:24 +0000
Files and hashes:         1: 46SpZkulob1qI8XSQosdiJhHEWo.roa (hash: HfmlNEm+q4mKiMwfDLGAB9WzmcIjE5Zp5Gvj/U9yVns=)
                          2: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: 8NXWXg6NZyarIEEERdslvc7CP+lYof0xxVF5SD6lpDc=)
                          3: wVHVc0bqRNzroQm7A3wRlpqpwnw.roa (hash: c/GhDxl0nFCEK8Y/vnuoeBfu7bdOUD08bFNu1z8ZDmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:99:52:8f:71:73:7d:18:83:f7:bd:0c:4c:1d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
        Validity
            Not Before: Jan 26 05:01:24 2026 GMT
            Not After : Jan 27 05:01:24 2026 GMT
        Subject: CN=cb5191911214807ac029dc26351568b551082562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b5:e2:9e:50:14:82:51:46:6d:15:e7:74:00:
                    f6:1c:8e:6d:7a:99:62:23:67:ce:a4:55:c5:5e:8b:
                    c4:2e:ea:ea:2f:bb:c5:9c:47:e9:4d:1b:65:8d:41:
                    27:1e:9c:10:a2:70:ad:a8:8b:5f:9d:fc:29:43:b0:
                    e9:fd:e7:8f:fd:58:0c:53:39:63:40:52:78:0d:c6:
                    bc:8f:65:85:61:e8:01:f5:4b:7c:66:5d:b6:21:8b:
                    dc:68:b2:e2:d9:e6:b8:a3:74:85:5b:4f:7e:fe:2e:
                    95:e7:ce:f3:b2:72:d1:c3:4f:ec:56:54:7f:25:55:
                    48:40:a9:78:dc:63:e7:f3:5e:51:87:f8:5f:f8:36:
                    70:d4:25:a3:4f:1b:8a:c1:66:da:48:60:b6:5d:d7:
                    f5:1a:e3:93:91:c7:13:92:e3:ef:2f:7c:79:43:1f:
                    79:22:61:98:76:e7:30:12:3d:d7:0d:e4:5d:a0:20:
                    3b:42:4d:e1:6b:32:37:ff:7b:33:c7:cf:84:5b:15:
                    83:41:56:99:d3:93:5e:01:6d:40:e0:63:cb:47:a7:
                    d1:df:e6:9c:da:8b:33:8b:6d:8a:d5:9f:02:4f:fe:
                    c4:eb:c7:67:dc:41:f5:63:a6:1d:9c:4c:38:77:f5:
                    72:fe:29:26:88:2c:1d:d3:4c:fd:04:ee:87:0b:cc:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:51:91:91:12:14:80:7A:C0:29:DC:26:35:15:68:B5:51:08:25:62
            X509v3 Authority Key Identifier:
                keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:49:5d:3e:86:0d:2e:07:8f:e3:cc:b8:2c:b8:19:df:c7:51:
         9a:64:79:16:f1:3f:55:65:c2:9d:f6:ef:0b:6a:3e:02:35:8a:
         a7:12:54:53:4d:7c:eb:99:1b:6e:71:81:74:16:25:a2:1a:d1:
         85:70:1f:ae:a4:84:d0:d3:5c:d3:5e:4b:13:7e:de:7b:2f:ca:
         0a:dd:5c:e4:39:46:6d:51:05:91:8e:ae:ab:c7:04:73:7c:eb:
         88:6e:49:e4:0b:c7:0d:80:8c:49:52:44:69:11:c7:75:5e:8a:
         ca:1c:4b:cf:f7:2a:e8:11:ab:ed:c9:31:38:24:03:1d:53:b0:
         03:6d:03:2c:70:c8:8a:d6:1d:7e:0f:fd:b4:89:bb:31:da:c8:
         88:a4:33:5a:ce:b1:b1:9f:1a:6c:98:04:fa:59:21:f2:f1:d3:
         91:e3:53:30:1e:61:d6:5d:0a:fc:bd:85:87:02:e9:da:e6:13:
         81:5d:6e:5c:15:d6:74:5a:ba:bd:ae:fb:af:bc:f5:97:d7:51:
         95:bf:30:21:d9:53:d1:f5:e0:34:6e:96:88:c6:81:c0:3a:80:
         b6:75:98:e1:fd:66:cc:d7:5a:fe:f7:99:b9:5b:e2:74:07:47:
         be:3d:b0:4e:82:0b:ef:e3:1a:32:d9:3e:0d:f3:73:59:d0:8e:
         b3:5b:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:39 2026 by rpki-client