This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
File:                     EneXY60_H0taSgVSxgOUlrz_OlQ.mft (raw, json)
Hash identifier:          JLBtBo4XGV+lNaprEZViPMYnqewp1U/m5Jx9Uy5STEw=
Subject key identifier:   04:76:37:7C:7B:32:0D:1E:8C:84:95:BB:30:07:70:95:FA:CB:A5:E6
Authority key identifier: 12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54
Certificate issuer:       /CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
Certificate serial:       019BF8083CCB6E782D615D901967E946DAFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
Manifest number:          06D7
Signing time:             Mon 26 Jan 2026 02:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:47 +0000
Files and hashes:         1: EneXY60_H0taSgVSxgOUlrz_OlQ.crl (hash: pvJcIMpCwCOAg37ZNUcAJHJ+cd/lcFOXyEwfhCniSvQ=)
                          2: UzOrLWhUOmxJo-9-GopnHirI6rA.roa (hash: ivvlDNqDoglSy4St2MYsnKCj1fkTi6UxACy5meF4qEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:3c:cb:6e:78:2d:61:5d:90:19:67:e9:46:da:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
        Validity
            Not Before: Jan 26 02:00:47 2026 GMT
            Not After : Jan 27 02:00:47 2026 GMT
        Subject: CN=0476377c7b320d1e8c8495bb30077095facba5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:67:19:a2:cb:59:f6:74:60:0b:50:ef:e9:
                    2d:7e:7b:8a:70:38:d3:8f:b1:aa:71:a5:29:01:ce:
                    e9:6f:10:88:b6:67:92:21:a5:4b:87:80:28:30:ca:
                    55:6d:d5:f6:b1:ce:f1:21:2b:46:e7:e7:a8:01:e6:
                    3a:92:79:31:81:62:7c:dd:de:45:69:a9:68:63:36:
                    81:d4:3c:b2:ff:68:31:02:16:2a:18:37:10:64:61:
                    12:6a:68:2f:c8:ea:6b:14:a2:21:44:08:5b:7d:6f:
                    05:e1:cc:78:bd:d5:0b:2c:a0:da:65:1a:5e:e2:24:
                    79:d3:53:af:6b:2f:44:b0:b6:5b:96:65:0a:eb:d6:
                    c8:8b:25:4e:f8:90:37:d0:51:eb:5a:30:0d:3e:db:
                    00:95:54:6a:38:34:c2:b3:ea:c2:0e:5a:eb:d2:a3:
                    9a:f5:ac:fc:33:b7:d1:4a:78:28:19:b1:73:c6:b5:
                    ab:d6:03:e1:d2:80:92:5d:7d:8e:c3:8c:4a:dd:e2:
                    70:24:c8:a0:5a:5c:07:c0:88:5b:f0:34:30:98:ea:
                    5f:5c:a0:f8:90:98:4e:4f:5c:2f:76:6e:ec:9e:98:
                    28:e6:73:5f:78:44:08:ec:8e:f4:28:aa:22:a8:33:
                    45:32:a9:ef:92:4b:cc:bb:c1:07:90:03:92:88:d7:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:76:37:7C:7B:32:0D:1E:8C:84:95:BB:30:07:70:95:FA:CB:A5:E6
            X509v3 Authority Key Identifier:
                keyid:12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:69:f1:e0:c0:f4:b1:dd:52:b3:89:4b:ee:25:1a:35:c7:
         77:59:07:a5:fb:61:f2:5f:37:6e:61:0b:4d:55:c3:7e:54:c8:
         ad:b8:ab:5e:15:36:8c:81:49:0a:08:d8:ec:93:8c:58:be:3e:
         32:6e:9c:fa:f8:05:c2:e2:01:3b:bb:f5:ca:6f:a0:f6:f4:5a:
         03:d8:6c:37:22:15:a0:e2:92:c9:3e:15:44:a1:ae:9e:e9:c4:
         b7:5d:ee:55:03:5a:ec:09:90:56:12:0a:f9:f9:6b:0f:52:71:
         26:1d:62:5b:04:5b:30:ad:f3:26:8d:ab:fb:68:b4:8f:1c:fc:
         90:4c:99:72:fa:aa:81:e1:b6:c4:c2:dc:5d:ba:16:bf:70:17:
         94:26:ca:79:e2:e5:11:ca:cd:73:d5:48:1c:5a:13:08:cd:a5:
         15:84:8a:7c:62:eb:86:1c:ce:9c:a6:22:c1:f3:34:ff:69:9b:
         aa:16:39:5f:db:c9:cd:94:2a:d1:6c:69:69:d2:86:42:e9:9f:
         aa:4d:be:ad:95:7b:12:af:fc:24:fa:8e:d6:0e:73:8d:1c:0e:
         c4:fd:e1:48:f7:02:1b:ca:62:33:9d:ca:7e:e4:fe:43:f2:6f:
         d1:0e:10:9c:b9:fe:a6:7b:c6:db:ea:be:a5:7b:0d:a9:e8:44:
         12:84:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:39 2026 by rpki-client