This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
File:                     EDQGi16fcxQnfivpcmxzITGxdWw.mft (raw, json)
Hash identifier:          M6W4VBPiiSq+bUe+NMFMOrctmbn1o8wF35YO9qgvGlE=
Subject key identifier:   B6:D0:EF:CD:20:F1:B9:D7:33:53:20:1E:8E:60:37:11:DD:00:0D:E1
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Certificate issuer:       /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial:       019BF57501C685723B166E992A5666A5D780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
Manifest number:          125D
Signing time:             Sun 25 Jan 2026 14:00:44 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:44 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:44 +0000
Files and hashes:         1: EDQGi16fcxQnfivpcmxzITGxdWw.crl (hash: 5oT4qgsO9dJWHel/GLwe7m1ucYf+85u3zLqhRPY86Ls=)
                          2: cXWQ-OpF5MSEV9XXbIDzHhHfbiM.roa (hash: Zd/md0ukR3Ww6duMAFycBCzHzVmUmkCQrekRunAgt5g=)
                          3: jC1UMhzd3h1Q3atKjtTnlNFdpsA.roa (hash: NFrj/OLNRqiAhcTOxCMOPhXsniRxRJ7HRzSqYahvwnI=)
                          4: rsawLrO96jwzQrzzu3CfFkKtYnw.roa (hash: HQ1fM2wpncL4ax6ClPUzOmxESKKTwCgtFlm5YWlXFgU=)
                          5: vHD86KYB1N29A0e-cvqB8rPM3F8.roa (hash: DwKiTQxab+kFzesYYY7Xei5mhs2C32CiRtfMcTYT+ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:01:c6:85:72:3b:16:6e:99:2a:56:66:a5:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
        Validity
            Not Before: Jan 25 14:00:44 2026 GMT
            Not After : Jan 26 14:00:44 2026 GMT
        Subject: CN=b6d0efcd20f1b9d73353201e8e603711dd000de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:92:61:c4:44:9d:18:cf:b2:b3:7b:6e:d5:
                    d8:16:74:fe:b3:4c:e4:c2:ad:33:3c:f5:fd:31:cb:
                    a5:ac:e4:7f:2b:2c:6a:d1:31:54:98:9c:49:8e:87:
                    82:22:18:bb:cc:af:13:19:1e:12:09:65:be:91:ed:
                    32:5a:24:75:eb:85:e7:b7:92:d6:4b:d4:59:d5:88:
                    cc:8d:a9:03:78:93:87:f6:ad:f8:ba:aa:16:13:e6:
                    5f:fc:5e:37:d9:1b:71:e8:74:40:d8:3a:8e:df:9b:
                    c9:a7:37:eb:5b:e1:40:f7:0d:f1:fa:cb:44:b9:d5:
                    80:fc:10:49:85:90:19:cf:04:d8:83:ce:5a:c4:10:
                    52:3d:b3:89:eb:01:ad:29:9a:97:25:b0:88:08:12:
                    00:24:ea:41:2a:37:21:43:f6:4c:04:08:0e:fa:d3:
                    28:bf:14:3b:03:a7:94:ed:a0:7e:c9:d6:aa:66:94:
                    ca:0a:bf:63:60:40:2d:2d:60:b9:e5:91:08:cd:d8:
                    14:64:93:75:c2:92:48:46:40:a9:4e:8a:ec:47:87:
                    bf:45:ed:53:a9:ae:f6:84:4d:07:e6:85:78:95:0f:
                    c6:a5:f9:6a:2a:ae:6a:d4:49:04:15:3b:b4:54:5a:
                    3a:6f:5c:c1:1a:ec:cd:cf:5a:f4:a7:bf:03:fa:e5:
                    cc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D0:EF:CD:20:F1:B9:D7:33:53:20:1E:8E:60:37:11:DD:00:0D:E1
            X509v3 Authority Key Identifier:
                keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:50:31:1f:2f:36:5d:eb:3f:ff:29:39:02:fe:4b:81:30:
         c1:02:4a:d5:93:bd:9c:ef:b7:e5:a8:25:4a:0a:d4:89:6f:2d:
         95:cc:1a:2f:10:0c:75:49:a9:90:0e:a8:66:71:08:b8:11:de:
         17:60:44:03:86:95:f0:22:00:24:e1:d5:e6:b6:59:b9:09:7b:
         22:cc:ea:ab:57:a4:5e:20:cf:b4:1e:9b:01:97:2e:2f:f9:11:
         18:90:58:5c:ae:6f:c5:88:4e:42:bb:ee:1c:38:49:4d:f0:d6:
         6b:68:ce:a8:a6:7a:b5:12:26:40:a3:25:26:cd:f9:e6:ba:8a:
         95:cf:2c:00:d9:08:88:c4:c9:d8:8a:a6:0c:a7:1b:6e:96:31:
         e4:3a:9e:5c:4e:1b:2e:55:d1:56:b7:f8:7c:16:ec:ab:5c:19:
         c1:ee:ff:82:2c:b7:5e:99:a5:1b:47:89:b5:b2:7a:28:d8:da:
         15:32:40:f1:d0:11:8f:db:63:e4:31:07:89:ff:fd:7b:df:84:
         46:b9:38:7f:d8:c8:dd:e8:e9:f8:00:41:c9:8b:8e:2e:e7:f0:
         ba:82:2b:59:ca:34:af:4a:95:71:a5:2d:d1:80:bb:b1:2e:88:
         44:24:a8:1a:9d:8c:d5:fb:19:13:1a:23:ba:f1:2c:ed:4a:23:
         39:17:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:48:36 2026 by rpki-client