This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
File:                     EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json)
Hash identifier:          0T1NabPF/qIaIB1fOAy74U9EdsPI1dKl3PddsAnkiM4=
Subject key identifier:   15:AD:B3:B5:97:1C:89:CE:7E:98:65:E7:FD:1A:ED:8A:04:74:53:2F
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Certificate issuer:       /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial:       019BF6BF378D080B29C6013BFB83CCAAEFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 20:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:25 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:25 +0000
Files and hashes:         1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=)
                          2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=)
                          3: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: xpI7yd/qKzmS7EEgyiQQ8JwEkUXVYgLePWphwDX40zE=)
                          4: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=)
                          5: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=)
                          6: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=)
                          7: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:37:8d:08:0b:29:c6:01:3b:fb:83:cc:aa:ef:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
        Validity
            Not Before: Jan 25 20:01:25 2026 GMT
            Not After : Jan 26 20:01:25 2026 GMT
        Subject: CN=15adb3b5971c89ce7e9865e7fd1aed8a0474532f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:96:11:59:82:a2:52:1e:1b:75:f0:f7:6d:
                    42:e3:6b:fa:06:8f:50:e2:3b:00:f6:fc:02:e4:84:
                    52:92:90:64:f8:87:7e:44:81:ce:c0:64:aa:a5:07:
                    2d:49:41:e9:41:b0:66:b6:ed:52:c2:27:14:f9:6e:
                    9f:58:a2:36:d5:d0:2d:e4:71:da:16:8e:9f:95:d5:
                    21:4d:ff:72:d1:2f:1c:af:af:24:b9:fa:0a:55:c7:
                    af:38:9f:40:cb:7f:3c:5e:89:a1:81:5c:4f:15:2f:
                    4d:c8:01:5a:65:e2:ed:3f:bd:be:98:8c:a1:d8:76:
                    f9:38:7e:78:5a:77:aa:40:01:99:9a:f3:68:02:03:
                    79:99:19:c5:49:d3:c9:a5:5d:95:f8:aa:94:6f:97:
                    f4:2c:4d:1f:b1:9b:15:e0:e6:ef:77:15:dc:ef:06:
                    2a:d4:e9:21:18:d3:f5:7a:2f:ab:68:f4:0c:f8:30:
                    5e:45:6e:9e:b6:1f:de:5a:46:e4:3f:d9:a3:4a:b7:
                    3b:3d:a0:69:b8:af:97:c0:57:c9:88:66:fa:ed:ec:
                    f5:0e:92:1c:ce:1c:23:93:e5:78:05:57:72:67:2a:
                    ed:ff:cb:30:bd:c1:45:64:a3:e0:c0:d3:ac:8a:96:
                    37:85:6c:81:80:19:0f:35:f8:82:76:a4:10:2d:b4:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AD:B3:B5:97:1C:89:CE:7E:98:65:E7:FD:1A:ED:8A:04:74:53:2F
            X509v3 Authority Key Identifier:
                keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7e:01:b5:94:1c:73:eb:16:79:79:01:67:5b:6e:54:40:4e:
         e3:78:9d:5d:6d:24:33:ac:7a:bd:85:a3:0d:0a:21:41:33:78:
         53:ef:4f:e0:6b:46:bf:3a:99:44:73:45:62:8d:94:94:42:9b:
         67:04:82:b2:76:05:60:f9:a8:cd:cb:87:ff:53:09:85:bd:88:
         15:29:be:0e:f4:99:2f:70:fb:be:47:42:3c:b9:14:12:18:19:
         f5:6d:19:b5:bd:81:9e:63:b1:a0:bf:bd:66:7a:b6:e2:7f:0e:
         ed:5c:30:03:0b:e8:33:db:ec:bd:38:f0:2f:6f:fd:22:59:21:
         6d:ab:d8:e2:30:9e:f6:33:eb:54:ef:74:49:d6:c6:71:22:a0:
         f2:0a:42:ad:ed:67:61:48:82:c4:bd:87:f4:e7:f9:99:ab:92:
         9f:b7:ff:53:58:0b:66:39:3d:b5:0a:df:56:12:d8:06:19:cc:
         3e:dd:0b:5c:ff:7d:e8:19:66:50:1f:33:87:7d:6e:e0:b2:08:
         c4:33:a4:84:9a:01:af:98:51:be:a7:f6:65:56:4c:31:20:f6:
         79:f0:db:a1:18:15:12:f6:09:ec:f7:72:1a:ad:c3:78:1e:8e:
         ec:6b:a5:77:f3:52:71:bb:0d:fd:61:9e:7c:ee:60:7a:35:e7:
         76:63:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:12 2026 by rpki-client