This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File:                     eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier:          zRKi+MOm5P+4v7Po7HqQDU+qnVfzfVOx7UdQkmgM0SY=
Subject key identifier:   E9:1C:BC:52:64:9D:69:0B:17:EB:7D:F8:52:43:57:7C:AA:2E:A6:55
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer:       /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial:       019BF6BF1DBFBA0C2640199509B01A138305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number:          085B
Signing time:             Sun 25 Jan 2026 20:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:18 +0000
Files and hashes:         1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
                          2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
                          3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: sy+YbbFTFuEv88vFobv1K3jIQfRYFSeM1KIK7octQpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:1d:bf:ba:0c:26:40:19:95:09:b0:1a:13:83:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
        Validity
            Not Before: Jan 25 20:01:18 2026 GMT
            Not After : Jan 26 20:01:18 2026 GMT
        Subject: CN=e91cbc52649d690b17eb7df85243577caa2ea655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:9e:c3:bf:cc:a9:5d:f5:9c:8d:c8:a3:d5:
                    94:14:72:32:d1:f2:c6:ed:86:bd:fc:16:2e:1d:42:
                    65:42:e9:60:5e:25:3e:bd:ed:5c:c3:a3:eb:e0:36:
                    92:ee:8d:cb:b7:6f:ef:0c:3f:6f:ad:9f:33:c3:f9:
                    11:cb:5a:b7:a7:04:bf:2d:1d:79:a9:a1:e6:ff:83:
                    06:9c:62:7a:75:68:f0:2e:79:36:2c:80:a1:76:24:
                    ce:2a:a5:25:55:e1:16:6b:1f:4e:5a:b9:19:7b:67:
                    dc:35:88:b3:91:69:72:3f:79:93:87:94:d7:09:92:
                    a2:1f:ce:62:46:f3:97:38:6d:6f:cb:8c:4f:1b:04:
                    e3:cf:21:ff:d1:ce:3b:4c:91:72:53:40:7c:29:51:
                    ae:be:4a:cb:a2:d6:04:1c:9d:5d:f4:32:5a:5c:49:
                    ba:4e:11:b8:e1:8c:c4:12:41:64:82:86:41:d5:f1:
                    ba:14:39:e2:ef:6c:5a:88:7d:7e:e3:f3:d1:50:5f:
                    5e:88:d1:25:6c:e9:c2:6b:43:50:ea:7e:62:85:49:
                    1e:e9:99:1e:66:a0:0d:f0:d1:d5:82:ba:b7:55:40:
                    95:71:5f:b8:14:90:3b:98:5a:92:46:f3:9b:45:0a:
                    f3:92:f0:eb:db:aa:07:e5:33:e2:65:ea:4e:0d:09:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1C:BC:52:64:9D:69:0B:17:EB:7D:F8:52:43:57:7C:AA:2E:A6:55
            X509v3 Authority Key Identifier:
                keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:71:17:c5:bf:3d:a9:07:95:d5:99:e8:0a:c7:b0:3e:07:59:
         2b:a2:82:1c:f7:3b:ea:ac:64:ff:91:6d:4e:23:b5:77:da:b8:
         d8:b3:19:27:7f:28:7d:9b:43:b0:f0:0e:5e:b9:05:fc:fc:1c:
         9f:a9:b2:2a:f6:81:bd:ff:a7:2b:26:eb:6c:cd:67:26:62:0a:
         c4:f8:3e:c5:5c:73:3d:a0:0d:5c:f2:a0:f9:f8:10:a7:30:1d:
         ac:0e:bf:fa:e7:29:a2:92:10:6b:6a:fb:3c:6c:7f:e1:3b:b7:
         c8:82:69:65:29:1e:20:7d:08:a8:91:da:2b:5b:34:b5:5e:d4:
         d9:e4:ee:73:c2:61:6a:ff:7c:8b:da:1f:c7:c9:c7:a4:33:5f:
         05:c1:1a:b6:c4:be:58:5f:38:e0:35:83:77:bf:bb:a6:27:d0:
         f1:7b:02:23:60:b8:f9:37:e4:59:54:4a:e2:ba:21:11:1b:52:
         72:cb:14:10:cf:d4:16:6d:9b:81:fc:35:da:ec:88:9a:16:0f:
         a8:e8:69:1e:78:0d:b9:7e:18:80:92:e5:70:d0:f3:cb:5d:ee:
         ba:b3:0f:e7:f1:b0:e1:0a:15:0e:a1:bd:12:c7:c7:25:3b:d7:
         37:30:a3:fd:7e:39:6e:27:11:78:8d:a5:83:0b:fe:6b:16:5d:
         30:c8:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:54:59 2026 by rpki-client