This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          vKUw8+45umO2oCF7eXnUXxEcGezLi6u+nzS8L/1B5rY=
Subject key identifier:   25:23:61:6C:7F:8F:EC:80:2B:A8:F2:0E:7A:E2:F8:55:84:6A:97:F2
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019BF8ACCF2C0E184E3CDC664454D1D592E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          073B
Signing time:             Mon 26 Jan 2026 05:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:33 +0000
Files and hashes:         1: ArkmqC5cV4rKHjFzE81Ldao0sEs.roa (hash: hEg6+Nvrfwd2KymAJ5TeuyiIIA0Jz1wye1KL+ASCfyU=)
                          2: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: Smdx7VCwVZe52Rau8pzUfQdviu9vX2xCYMyVwVPdtFg=)
                          3: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          4: QgtZQ0805OCM2cokT2qKD6cPctM.roa (hash: DavE4PxcjRUDAkMRKuUWGBvO9WpwG+932yjIkhXYMNA=)
                          5: ZhB3SHNyZsayrfOH0UW61vc7vmA.roa (hash: mWJxQJcBLaSuCYVydxxPxheALcOefDmmGX4VM1mnW5w=)
                          6: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          7: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ac:cf:2c:0e:18:4e:3c:dc:66:44:54:d1:d5:92:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Jan 26 05:00:33 2026 GMT
            Not After : Jan 27 05:00:33 2026 GMT
        Subject: CN=2523616c7f8fec802ba8f20e7ae2f855846a97f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:c2:1d:85:b4:fd:75:e7:32:e1:a6:55:d6:
                    28:c2:54:36:a0:47:0b:89:58:38:63:7b:76:6c:d9:
                    a4:5f:31:85:45:38:53:ba:f4:4a:80:1e:82:bc:f1:
                    5f:cd:1e:71:6e:fb:17:10:e0:19:3a:79:2b:20:4c:
                    27:f6:64:a5:ba:b0:19:e1:33:92:8c:b0:b9:9b:f7:
                    72:8d:5f:76:48:69:3e:41:fd:4d:5d:e0:55:9a:70:
                    3e:85:7d:d7:32:2c:39:34:90:54:a7:ee:8e:45:ac:
                    b6:e7:fd:7c:aa:ed:2b:16:2f:33:c0:88:76:74:e5:
                    cb:0f:36:19:0f:ce:7c:b2:34:11:d5:8f:cc:4e:61:
                    10:b7:67:12:d2:39:e9:66:aa:34:5c:f1:97:21:47:
                    10:8a:40:c3:b9:d7:4a:96:d4:30:e1:d9:90:24:18:
                    6a:c0:4f:89:b8:67:4e:25:a7:d4:41:d0:df:48:b2:
                    64:fe:af:49:15:30:78:b3:87:fa:97:fd:92:84:2e:
                    4e:c2:03:43:0a:14:b2:a4:ed:26:d4:d8:6f:00:93:
                    18:a2:e3:68:a4:d8:d8:09:5c:35:85:9f:e5:40:0c:
                    73:7b:1a:6d:7d:4f:67:ed:36:14:e3:a4:50:da:a9:
                    7e:c4:bf:4e:54:60:86:87:9f:5f:82:a3:91:0e:82:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:23:61:6C:7F:8F:EC:80:2B:A8:F2:0E:7A:E2:F8:55:84:6A:97:F2
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:b4:fb:d8:4c:59:78:b3:1f:27:5d:3c:bb:e3:6f:3f:26:
         4d:0f:4a:f6:89:fb:b3:54:80:a2:92:6c:38:15:9c:bf:56:e7:
         e0:eb:14:67:a2:ff:ae:d5:82:fa:a8:16:70:1c:6f:9c:0e:f5:
         15:ab:8d:e5:35:e0:67:a1:6b:6c:88:c0:38:9d:84:2a:d6:4d:
         bb:7e:f6:02:61:e7:73:37:78:42:e0:95:52:3a:68:ea:31:e0:
         fc:27:24:f6:ed:2f:fb:bf:f1:3b:f4:60:cd:ce:91:a2:0a:7c:
         18:06:fd:0a:46:91:06:63:bc:00:ff:a1:cf:3d:7a:6b:25:02:
         b3:3e:5b:9c:5a:55:2b:1e:c1:15:e1:54:0b:ac:58:60:72:ab:
         22:e8:e7:aa:81:13:96:ac:b5:19:78:61:f7:cc:dc:1f:e2:2a:
         3e:09:5a:51:0a:60:d1:5c:6b:e8:91:2f:2a:b2:c4:65:20:fb:
         98:ad:96:47:bc:c3:40:7e:c7:fd:b4:6d:57:e4:e9:a5:6e:60:
         fb:fd:d1:94:ca:4b:40:6e:72:89:3e:9c:55:56:c3:ad:6b:03:
         d1:ec:c3:cd:d2:4c:96:a2:64:21:5e:18:db:31:45:a3:02:bf:
         da:f5:eb:be:03:bc:f5:d7:33:f1:df:d3:8e:d6:15:a7:de:25:
         84:7f:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:25:38 2026 by rpki-client