This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File:                     78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier:          SJkXg4nm6YFK1Ihn+eygZhxoTETs8ifwb/Ic/RsfSgs=
Subject key identifier:   3E:64:60:28:99:24:75:3A:DA:34:8D:81:3C:9C:27:2E:CA:A5:6A:D0
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer:       /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial:       019BF763CE54DF1986D4AF7A52168F016737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number:          0B5B
Signing time:             Sun 25 Jan 2026 23:01:11 +0000
Manifest this update:     Sun 25 Jan 2026 23:01:11 +0000
Manifest next update:     Mon 26 Jan 2026 23:01:11 +0000
Files and hashes:         1: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: 2LZN4gs5S2TbgZ0ZOWq3SnBq/uEH49mTxlGNPMZl5E4=)
                          2: U6lz5micbQvsEzEwVp3dL7mR1Os.roa (hash: NW13lN/avpR4aBD/HcMl0sRLodoqqzCepoA5qJR1XKA=)
                          3: WH8m0TMkVXBPbucXPDw6oUIRye4.roa (hash: IB0keQjNG9LRUVYhpn54n8Irz+pRxwCtrbopId4wJAg=)
                          4: t4MpcNa2tIl4W9G2LCTJWkEphB8.roa (hash: xbauCMbU4PS3RK6IhRtrAnQJjuwdmggI6BkwUnHhNwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:ce:54:df:19:86:d4:af:7a:52:16:8f:01:67:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
        Validity
            Not Before: Jan 25 23:01:11 2026 GMT
            Not After : Jan 26 23:01:11 2026 GMT
        Subject: CN=3e6460289924753ada348d813c9c272ecaa56ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:17:7c:8d:e7:99:ca:af:fe:c6:a7:d8:ae:
                    64:53:23:f2:f6:d8:b8:5d:01:b8:fa:f7:a8:94:82:
                    5d:f8:92:92:1a:ef:7e:5c:96:47:ac:85:74:d4:ba:
                    51:a2:87:fd:71:5a:a9:f5:14:17:1c:24:ff:52:8b:
                    65:02:d4:2e:a7:1f:f6:c2:ff:bd:74:e2:d5:3d:25:
                    d5:fa:43:5a:c0:e0:e4:f3:da:9d:9f:56:84:32:9b:
                    4d:db:74:2a:bd:31:2f:6e:0b:66:22:83:c6:4a:5f:
                    05:9a:62:ea:a9:4a:43:a7:76:b9:b1:be:6d:48:88:
                    0b:ac:00:e7:f2:a2:d4:d9:c0:82:94:17:e4:e4:b9:
                    f8:90:5d:97:59:bd:e0:01:f7:40:32:8f:e0:11:9b:
                    23:91:38:ba:72:ff:dd:24:ba:02:4e:77:2f:e6:87:
                    47:8f:26:13:bf:20:c4:03:a1:d5:c0:c8:3b:2f:c9:
                    9b:78:46:32:d6:6d:31:b4:51:d0:46:dc:8a:09:d6:
                    ba:a0:24:7d:66:cc:50:b9:f0:8d:4a:8c:87:51:45:
                    f5:8d:c0:85:16:39:a7:3f:3f:e2:d4:bd:69:2c:a4:
                    5c:67:79:83:ad:7c:35:81:32:bb:12:ae:96:96:1c:
                    48:e3:33:a8:89:f7:ea:e6:49:72:b7:2f:d1:45:a4:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:64:60:28:99:24:75:3A:DA:34:8D:81:3C:9C:27:2E:CA:A5:6A:D0
            X509v3 Authority Key Identifier:
                keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:31:84:72:4c:1c:69:87:a3:a6:11:92:ac:51:d1:1b:78:39:
         1a:ea:0f:ef:61:41:c4:31:47:3c:2c:93:46:fe:a6:9e:d8:89:
         ba:c0:32:28:f1:7d:9a:7d:73:f7:64:19:89:45:ba:98:4e:a1:
         90:05:0c:ca:6f:16:5f:b5:33:a0:41:4b:50:7d:a6:b6:cf:ba:
         a1:be:a2:2c:55:6a:8a:a6:49:74:9e:e1:09:f4:f1:fb:e7:15:
         a6:20:e8:d0:f6:1c:62:ef:92:eb:07:f4:9c:d9:d3:61:a1:b0:
         5a:fb:3b:a4:86:14:77:53:94:6a:d0:f4:fd:03:5c:9e:ad:eb:
         12:30:11:2f:6a:f4:75:24:2b:ee:69:f2:55:9a:37:d5:6e:71:
         5f:ac:e2:cb:09:ed:38:e1:ac:a3:69:46:c6:72:33:c0:93:ab:
         d7:3b:12:c7:9c:dd:de:3d:5d:15:a4:cd:82:6d:60:fc:ad:64:
         a5:12:3f:cf:0e:38:2f:0a:8b:e6:fe:11:84:5e:ac:5e:11:54:
         e3:79:2a:ce:06:6f:83:34:68:84:9a:24:bd:ca:30:ed:90:be:
         be:b5:50:8d:b7:47:a4:1c:d0:8a:63:27:66:d8:3a:16:64:94:
         08:12:18:67:c0:9a:58:08:80:0c:54:10:65:75:87:75:f9:a4:
         11:9b:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:48:07 2026 by rpki-client