This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
File:                     EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json)
Hash identifier:          EhirIFhftIeWKU5iCeDihOipJWquqcnRnkSsZZMq4Lg=
Subject key identifier:   71:BB:27:A3:20:88:D8:34:5A:08:83:C4:E9:19:0E:07:0E:C0:D9:E3
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Certificate issuer:       /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial:       019BF650B1D0B981C9273B84C256E86159EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
Manifest number:          17F3
Signing time:             Sun 25 Jan 2026 18:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:41 +0000
Files and hashes:         1: 7DKhg71ZB3nnMpauf53JDjRxvcE.roa (hash: JaQt7Bz1hiKlJT1Mi9uSBQ4bdQnONHvQK2D4cbBsnd4=)
                          2: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: 4jtMy/i7B3xz1nKP6y882/kt4qGUb+YjtdoSRq6vkWg=)
                          3: IUysQoBsRWVOL5sdLOOClz3M4Tc.roa (hash: Q0b0Ej5B0Uf7P54rUhyCPtXaonVa+DMphvbAdFQOd6c=)
                          4: _D31CaslokzBzJb570s1tCqC6rU.roa (hash: vPfarYHxZRzOYIcHGYTZOf+++xHO9r+2vS0OJV7F/0s=)
                          5: hMkkOV3vcdpEBCz-ov_DfQAHhD8.roa (hash: E0l9RjnNf9Lrz/LeJVfSiJ9Bu3PLC8j0ZQdTbyOvhkY=)
                          6: iIvK0GriwCR5-e0INxYXsaN5HeA.roa (hash: y+xjj91MYcyeEl9ZZP8msaIhf1Zsnrl/qJUlt2VVY1Q=)
                          7: omKHkE8YHZq1XP5PN9HMJprVOp8.roa (hash: MmpJRNhqaLRfTIGoiK2U5hLmuW2sEbpdb2u4AXDgU9A=)
                          8: sL9_3JSSE2xT5n7OAXMAHMxKq1g.roa (hash: vGCCVcEYQcDBKDtRD4+hEi2hrb6nrXfbvM90L9lRcO0=)
                          9: xC4HZY2FAIOZlVLev_OryihHWUo.roa (hash: t5wlokLTk+K42yuANt3hwr4tFRZLOSrgIWyKhOKmoyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:b1:d0:b9:81:c9:27:3b:84:c2:56:e8:61:59:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
        Validity
            Not Before: Jan 25 18:00:41 2026 GMT
            Not After : Jan 26 18:00:41 2026 GMT
        Subject: CN=71bb27a32088d8345a0883c4e9190e070ec0d9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:a5:b5:a1:ae:78:9e:0d:7d:d6:17:2b:27:
                    0b:e8:99:7f:a6:fa:13:29:1a:36:85:07:2f:51:f8:
                    8a:ab:f4:50:13:94:08:f8:19:3f:28:dd:4e:f4:85:
                    48:87:e4:71:75:34:18:51:56:c1:0f:61:be:4f:4a:
                    d3:e4:e1:cb:15:a2:24:d7:d3:e6:1b:f2:ad:2b:f4:
                    89:9f:55:7a:7e:ce:60:42:0d:e3:be:5a:cc:90:78:
                    a8:c8:d8:0f:f0:43:df:fd:58:d5:15:80:45:9a:42:
                    48:80:56:6f:c8:5b:12:a3:77:ef:47:3b:a4:1e:61:
                    4d:f4:03:f2:be:a1:6e:b5:c1:f5:7d:7b:4d:ca:a9:
                    0b:4b:51:e6:92:fa:15:40:bf:98:b2:1f:ce:bf:1a:
                    8a:fa:7e:eb:80:c9:22:6f:66:6a:2b:78:0b:11:d2:
                    71:99:2d:f6:b6:15:86:39:3e:90:53:27:9b:51:f4:
                    1c:b0:a7:2c:a3:f6:44:a0:b3:95:78:be:a1:72:7a:
                    3f:15:65:4d:6f:6c:15:ef:86:ee:4b:a0:51:c2:91:
                    a2:dc:57:27:bd:9e:28:6d:b1:3d:78:01:71:39:d9:
                    1d:a7:1e:47:7e:d4:2d:a7:30:ef:7e:c9:d5:6a:1f:
                    a1:4a:7f:49:6a:ba:26:7b:36:da:e7:13:cc:6e:67:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BB:27:A3:20:88:D8:34:5A:08:83:C4:E9:19:0E:07:0E:C0:D9:E3
            X509v3 Authority Key Identifier:
                keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:90:9e:4d:ff:ba:9e:c6:19:5a:58:d6:98:13:22:2e:20:a7:
         65:e3:ab:48:c2:6b:df:50:33:09:a2:97:b4:a1:e7:c1:e3:60:
         c0:c3:7d:0f:80:05:86:c4:17:17:77:fc:f2:4b:98:c5:bd:fb:
         78:89:e7:bb:18:a2:98:d5:79:1f:80:a1:b2:8c:7c:b9:00:fe:
         d8:2b:0d:1d:d5:7e:75:c8:3e:28:7e:82:25:c9:b1:34:3c:3d:
         cf:2f:f9:38:47:2a:dc:9c:d1:05:96:88:02:42:c5:40:19:07:
         03:7c:cd:58:9a:0b:d5:42:11:8f:da:14:11:ae:e2:29:8d:fe:
         4b:e4:f6:8e:66:b9:3e:69:86:bc:bd:30:5c:38:7f:2b:88:75:
         a0:56:55:0d:48:06:32:08:df:45:be:8d:39:1d:fa:9a:32:c2:
         56:2c:75:b7:12:e8:b4:b4:eb:a8:39:13:4a:2e:7f:65:ef:8a:
         08:7f:4f:bb:32:d1:3f:d1:92:1f:69:ff:e7:6c:f8:44:19:b0:
         bd:7d:89:27:ec:de:8e:6a:9d:2a:fe:1c:73:61:1b:96:c5:29:
         0f:89:e6:c4:5b:ae:fa:2c:73:9f:34:cf:a8:db:02:d2:43:84:
         43:e3:8d:2d:e9:7f:99:ce:4d:ac:c0:e3:36:e3:18:3f:03:a5:
         ff:5e:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:51 2026 by rpki-client