This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File:                     xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier:          Q232+6uxPUCqrVXt31dlXLsmz5ooV1idHlZRaH/lG9c=
Subject key identifier:   E9:0F:8F:88:D5:C0:88:CD:86:2D:6B:E5:44:F9:6B:53:10:9F:6E:BE
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer:       /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial:       019BF5075999F069CBD5838DDB72EA5B2A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 12:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:58 +0000
Files and hashes:         1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
                          2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
                          3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: 6YxmQP0UZGdci9yEKpmlrCkG4ObKFYr1bRxKQT2zLMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:59:99:f0:69:cb:d5:83:8d:db:72:ea:5b:2a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
        Validity
            Not Before: Jan 25 12:00:58 2026 GMT
            Not After : Jan 26 12:00:58 2026 GMT
        Subject: CN=e90f8f88d5c088cd862d6be544f96b53109f6ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:57:94:22:eb:4a:0b:f9:55:40:62:cd:7e:
                    4c:d1:23:d5:4d:33:9f:86:6c:f0:ec:ab:5e:b5:38:
                    62:72:ad:81:f7:c1:79:5c:c1:89:2c:fc:be:9e:b7:
                    2a:93:b1:b1:8a:3f:be:7c:f3:a7:61:99:3e:13:24:
                    11:a0:ee:2a:84:89:a8:83:7e:f3:fd:85:6a:ca:2f:
                    63:f8:74:62:5a:c7:bc:81:ea:64:81:c8:e8:f2:04:
                    4e:27:36:82:1b:53:fd:a2:11:8e:24:92:09:5e:fb:
                    96:58:60:b5:a5:7f:5a:bf:e8:3c:df:89:04:cb:de:
                    c3:c0:9f:d6:d4:18:cf:37:dd:12:4f:62:8f:92:c4:
                    25:23:14:a6:98:10:02:cc:6b:b2:f3:cb:89:27:a9:
                    4c:2a:aa:7f:af:98:62:24:b9:05:ed:e4:13:e8:f6:
                    f8:6d:62:cd:a0:31:b6:a6:da:d5:c6:e6:03:d9:7c:
                    88:0d:53:e9:1f:f8:fb:cf:81:4c:ea:4c:5e:11:dd:
                    7b:4d:3b:c8:a3:d1:64:bf:7e:8d:4e:d2:9e:e3:79:
                    bf:99:d8:90:e1:31:0a:c2:25:54:ad:97:13:41:c6:
                    fd:53:d1:78:e4:f7:6c:63:a3:de:53:d9:c6:10:50:
                    6d:27:4f:37:7d:fe:d7:54:4e:df:5c:9c:d3:3c:7b:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0F:8F:88:D5:C0:88:CD:86:2D:6B:E5:44:F9:6B:53:10:9F:6E:BE
            X509v3 Authority Key Identifier:
                keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0d:27:80:b7:8c:61:36:21:3f:ff:7f:cb:a7:37:90:92:67:
         e9:33:6c:64:a1:28:6d:60:3a:83:05:6f:05:b7:fd:81:d2:6c:
         20:fb:dc:1c:77:b1:56:88:69:dd:f0:90:8e:f9:e4:7e:bb:00:
         56:5e:c7:14:2c:ce:30:5d:b4:e1:f2:9d:47:c7:7a:95:dd:24:
         12:8e:23:8f:4a:3c:ef:27:3f:44:b2:a8:21:09:45:85:89:42:
         ff:85:69:0b:ed:e6:73:21:cb:a9:91:d6:d2:8d:48:1e:22:5e:
         d7:d4:7f:5e:f0:cd:ad:0a:a4:27:54:54:3b:53:44:d6:5f:2f:
         8f:9b:c3:ad:40:2b:1a:f9:d6:2d:15:76:ee:47:99:c5:f2:d6:
         2d:94:9e:2b:ec:21:11:85:8f:e3:f4:af:d7:c3:9e:0a:b4:a2:
         de:b4:d3:76:81:ee:da:38:5b:14:7f:cb:4b:70:7c:f3:c1:be:
         00:87:9e:53:e3:a2:31:56:56:c6:0a:28:8b:c7:8e:33:4b:56:
         d3:ed:0a:f3:66:01:a9:3a:28:86:79:8e:55:b2:ef:0f:5e:99:
         e9:35:fc:80:d5:20:ac:bd:6c:2e:01:88:ef:37:f9:0e:03:d8:
         22:b0:27:95:6b:42:62:d2:f3:75:b2:d5:60:25:ae:a2:7f:25:
         23:9a:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:12 2026 by rpki-client