This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File:                     7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier:          ouvcDwHx41pdrYTa0r3amXiORjO4oPgOnFgX7irNuzU=
Subject key identifier:   D5:98:E6:F6:B2:EF:5F:38:3D:F2:F7:CE:91:A7:B2:F8:62:09:C9:33
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer:       /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial:       019BF6BEDC6485E18F9D6698F57093EDA16B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number:          1806
Signing time:             Sun 25 Jan 2026 20:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:01 +0000
Files and hashes:         1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: HwxQA3JREZVfIFrcYymPuB7ptdTDW3diHLO94cmI6ww=)
                          2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
                          3: QjmmSQtuTEwVRLNgjWi1-_buOYk.roa (hash: iGWXEQ+bzEdCoqctThCJX9CzR90FyOfcbpLC/ESLWio=)
                          4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
                          5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
                          6: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
                          7: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
                          8: zx3WBwHkzNsgOV5-TkoYXRcSw5A.roa (hash: 4eHXkHe5YH2jE8fgsQc251JhI+IMaU/jZg/f89akxiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:dc:64:85:e1:8f:9d:66:98:f5:70:93:ed:a1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
        Validity
            Not Before: Jan 25 20:01:01 2026 GMT
            Not After : Jan 26 20:01:01 2026 GMT
        Subject: CN=d598e6f6b2ef5f383df2f7ce91a7b2f86209c933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:d2:c9:9a:66:52:e4:d4:3a:ec:e6:87:31:
                    63:18:28:f1:6c:d6:21:b3:76:35:89:9a:80:fd:cf:
                    be:d6:e8:71:8e:e0:93:7f:64:ca:35:dc:0d:87:13:
                    2e:6f:dd:cc:dd:4b:69:7a:02:71:4e:b6:f2:63:95:
                    06:e0:f0:64:c8:44:6b:6b:40:80:84:01:92:d7:5e:
                    58:60:26:95:bd:19:d2:7f:4e:4d:96:38:a5:2c:e3:
                    1b:2f:1f:54:d7:b5:9e:2b:8f:48:72:8f:d5:b4:46:
                    be:c7:e2:52:a2:b9:89:5b:3d:7d:57:a5:47:40:07:
                    83:8a:84:0f:c3:6b:59:4d:5e:93:ac:a7:41:f1:7c:
                    ab:92:25:3e:fc:eb:ca:0e:53:2a:01:15:78:01:4b:
                    c3:b8:04:b8:6f:ad:3a:fc:43:06:e2:1c:ea:8d:97:
                    18:81:63:63:e3:1e:cf:59:be:3c:5b:72:6f:c1:07:
                    e1:f7:f6:40:11:c3:db:99:97:6a:8a:b8:db:38:92:
                    5f:db:49:85:96:0e:54:d8:cd:b1:8b:28:69:dc:72:
                    f0:6f:9d:8c:a2:c0:ad:10:ca:73:5f:5c:e6:7b:2e:
                    cb:04:8a:aa:af:00:10:87:1f:ce:7b:f3:58:e2:94:
                    8c:72:87:4a:f4:73:1a:7d:26:0e:f2:fb:77:c4:8c:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:98:E6:F6:B2:EF:5F:38:3D:F2:F7:CE:91:A7:B2:F8:62:09:C9:33
            X509v3 Authority Key Identifier:
                keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ac:ac:a9:c5:88:c3:2f:cd:f4:5f:59:c3:a3:21:00:5f:57:
         01:96:a5:fd:5a:22:66:15:c5:27:4c:d1:64:6d:7b:2c:a9:dd:
         4c:3d:3e:45:7c:dc:a0:2d:60:6f:4f:72:db:38:83:15:72:70:
         0f:5a:4c:9a:b7:97:6a:db:56:9d:ec:80:bc:0e:b1:de:45:14:
         83:1e:16:93:05:13:82:32:11:1f:f0:ab:cb:04:77:b9:0a:03:
         59:2e:59:97:b4:74:3c:48:53:52:9c:68:ad:f2:f7:71:60:df:
         e2:95:5f:23:3a:79:e3:b2:da:ae:94:34:09:c3:b2:c7:71:6c:
         50:66:58:1a:6d:a3:4d:d0:f3:c8:04:18:98:99:08:bb:b9:02:
         b5:3b:4b:97:45:ad:9a:60:55:52:52:b6:24:73:38:fa:88:a8:
         60:60:f0:fb:ec:2e:b9:3d:30:84:4c:8f:cd:f0:d6:65:22:5e:
         2a:85:98:e7:02:7f:a5:f2:8d:56:0b:d1:f7:08:71:57:96:7e:
         b2:b4:3f:54:ae:bc:47:5d:a7:0f:d1:9d:8b:ef:8b:9b:d9:88:
         40:56:46:13:8a:9d:9a:0b:ad:a3:da:c2:2c:61:e7:b8:d5:c1:
         bb:59:d0:8b:8b:c5:d7:20:97:4f:ea:08:7b:2d:91:98:32:90:
         6e:70:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:24 2026 by rpki-client