This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File:                     EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier:          9U/Aks21QlhXl5CAEw+gt2Md3Ur1YJNqphNuSIV0B+E=
Subject key identifier:   BA:23:DE:44:70:D9:B3:99:C9:6A:A2:1E:A5:80:8F:D8:36:0F:31:DA
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer:       /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial:       019BF83F77700A19AA1EAE8EFCDFC6B89B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 03:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:07 +0000
Files and hashes:         1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: AB+JA6ZDt3Nk2TjZAyvbyZeAP3S+vzEsI+uXmHC4DO4=)
                          2: JiVKV04Q5Yi0YVXZPhzPrQnrdaE.roa (hash: Je/rPrN5iQLTZAw+1b3i8YRBUtHfjaLY04H9s+UkqOw=)
                          3: WNCvUST9GFQgH9lNnrBxz7wn1MA.roa (hash: Y8xEIX8tbfw6KstlTGIt4As/gEkptm/Cc262V8KE5HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:77:70:0a:19:aa:1e:ae:8e:fc:df:c6:b8:9b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
        Validity
            Not Before: Jan 26 03:01:07 2026 GMT
            Not After : Jan 27 03:01:07 2026 GMT
        Subject: CN=ba23de4470d9b399c96aa21ea5808fd8360f31da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:88:de:be:9d:a9:d2:91:2c:1d:f6:03:a7:
                    f7:ea:6e:77:e2:9f:d5:38:c3:df:c8:76:04:35:d1:
                    11:d8:b0:10:c4:a0:51:83:3a:d2:c1:48:eb:e4:ce:
                    9f:fa:fd:69:3b:7c:fa:29:02:52:55:fc:15:3e:be:
                    54:c6:af:96:a9:37:57:b8:5d:e7:9b:86:62:8c:24:
                    c7:3a:60:65:d6:fe:ca:6d:51:ba:b1:6d:69:e3:45:
                    d7:fc:13:53:2c:11:b9:fc:ef:c7:f0:8b:51:4a:28:
                    b4:c9:00:54:f6:e0:d8:da:17:48:37:0e:ec:f1:43:
                    95:94:3e:9c:20:14:dc:79:c8:24:2c:00:03:50:88:
                    bc:8e:9b:23:ed:40:74:01:0b:0e:ad:7f:01:69:86:
                    c3:80:89:49:53:f0:ee:4d:89:b8:d6:59:9a:46:b0:
                    31:e2:bd:fc:cd:65:c0:8e:83:7a:f4:ac:b8:08:d1:
                    65:a7:d3:53:8a:07:92:fc:fc:45:60:cd:f6:a5:ce:
                    9d:8c:59:51:3c:ee:b1:51:91:3a:bb:91:35:39:ae:
                    df:79:3c:b8:1a:52:6d:0d:65:ea:d2:96:4c:e7:db:
                    c8:bf:e0:19:60:ab:52:e5:7f:09:d0:68:c1:3f:19:
                    13:6c:af:66:48:87:6d:ee:f3:a2:bd:01:d1:10:80:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:23:DE:44:70:D9:B3:99:C9:6A:A2:1E:A5:80:8F:D8:36:0F:31:DA
            X509v3 Authority Key Identifier:
                keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:26:6a:fb:5f:21:f0:b1:84:15:16:a9:94:1f:e0:ac:c9:
         09:19:76:23:03:21:64:ef:6a:33:2d:16:e1:14:fc:60:8f:47:
         d5:ca:2e:57:38:51:16:e8:9d:08:51:2d:fc:ba:00:10:86:14:
         44:7d:87:40:a2:8e:f0:e2:b4:a8:0e:25:c1:11:f9:26:a1:67:
         49:0a:3d:af:b6:3c:e7:e7:d1:9f:0d:fc:fd:d3:87:3a:8e:ea:
         71:9c:55:ba:71:e5:a2:13:b8:be:29:4a:72:79:2e:10:7c:21:
         5a:f9:5b:9f:5d:3d:7c:4a:06:c7:bb:ff:c9:4d:66:33:e9:06:
         26:5f:e5:cc:2a:44:cc:b2:eb:27:f4:07:be:af:a6:66:2d:0d:
         dd:7e:5c:b2:6a:0e:b5:09:12:4f:a2:6c:cc:82:c0:3b:cb:b9:
         40:43:49:10:bb:bf:c4:1f:d4:46:3d:4b:b8:d6:14:54:c0:8f:
         76:95:c5:63:b2:46:29:4b:e8:a8:29:65:e4:1b:46:3e:ac:4f:
         4f:2e:6e:b6:62:be:a5:80:17:17:54:c2:04:db:f3:6c:a7:4b:
         fc:bc:ed:7f:d4:38:e8:21:69:c8:20:fb:d2:a1:fd:73:cf:71:
         da:e5:c1:80:60:6c:8b:e2:ea:ef:00:1e:0d:d4:2d:18:8d:e2:
         ab:56:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:47:51 2026 by rpki-client