This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File:                     evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier:          9RubZ2Jr4u5r60vbXEpp0WYvGef7kIo5w40HBodqLjE=
Subject key identifier:   54:27:DC:34:EA:DE:22:63:1F:3B:BC:40:43:CF:CF:F9:14:4F:1B:22
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer:       /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial:       019BF2065A337C31C5F85A707CF8DD4B7794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number:          079A
Signing time:             Sat 24 Jan 2026 22:01:00 +0000
Manifest this update:     Sat 24 Jan 2026 22:01:00 +0000
Manifest next update:     Sun 25 Jan 2026 22:01:00 +0000
Files and hashes:         1: V66HJYFriZ5IsLfzQnEEiBV4Qd8.roa (hash: 8XPaW6i45AJEe25djtC6P54qz+Rb4g3K7vpBnD6+9v4=)
                          2: XASNzZ7eNfFZgvbJT8Q1lC9Tw84.roa (hash: pBgoU7wOpw4nY7mOMS9Fl6YvITNZqmO4sxUzQmgNOCY=)
                          3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: 14F0PZidaVDpBXioWG5ZOjo1O6jIKtA3nfRBJXpI9VY=)
                          4: x8rtYvoQZMNut6lhRb4aMkAq0js.roa (hash: nUuWeYtzWwss47rmzR4BBXj/AZGrFJGMJoFw56T6Rv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:06:5a:33:7c:31:c5:f8:5a:70:7c:f8:dd:4b:77:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
        Validity
            Not Before: Jan 24 22:01:00 2026 GMT
            Not After : Jan 25 22:01:00 2026 GMT
        Subject: CN=5427dc34eade22631f3bbc4043cfcff9144f1b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:f4:58:7b:9d:17:c3:b9:c8:25:b6:56:36:
                    4f:e3:f3:00:8b:71:b4:6e:ee:20:87:25:5b:67:17:
                    f8:7a:e5:46:a1:b3:61:90:9b:de:7b:be:bb:59:6a:
                    9f:50:62:85:b9:f4:b8:cc:db:02:73:27:34:81:18:
                    cc:fe:c3:02:8e:0b:67:fc:0e:cc:06:5b:10:05:2b:
                    40:b6:79:b6:7c:31:07:f8:d4:a7:ab:16:0d:54:1c:
                    c8:be:6b:62:20:2c:09:cc:b9:de:33:ef:59:41:53:
                    8d:85:c7:d8:a7:0f:28:6c:0e:66:bf:f8:b4:61:4e:
                    de:53:97:f9:f2:26:5c:5b:bd:3c:7a:43:40:72:8c:
                    4f:9d:f7:2f:81:f4:fe:21:6f:8b:c2:46:70:19:64:
                    38:e2:7b:17:88:0d:32:6a:fd:3c:18:f6:c6:19:85:
                    e6:fd:19:72:75:10:57:ea:54:a8:9c:7e:7a:f6:83:
                    6a:5d:60:0a:f7:21:a1:65:b3:4b:a8:09:23:45:f0:
                    6d:4a:ae:4f:81:c6:54:82:6a:9f:bf:e5:58:95:24:
                    da:4f:2d:6d:74:ad:b3:99:48:d3:8a:24:d6:58:ea:
                    7d:5a:8d:c0:f3:c1:d3:86:1b:1d:d9:d4:4d:1e:90:
                    2b:dd:5d:b9:59:b6:f7:ef:a2:fd:80:65:bb:5a:9f:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:27:DC:34:EA:DE:22:63:1F:3B:BC:40:43:CF:CF:F9:14:4F:1B:22
            X509v3 Authority Key Identifier:
                keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:5a:92:1e:88:dc:cd:58:15:f9:c5:16:29:b2:3d:2b:d5:
         b4:2a:2a:df:48:c6:95:ca:15:46:f1:e8:4d:52:7e:61:c7:56:
         fd:f7:5d:29:5b:0a:06:0a:d0:8c:7d:b9:19:b4:6d:88:dd:54:
         f4:5b:c0:5b:f4:ac:15:ef:f0:72:ef:9f:3a:69:8a:ba:5f:7b:
         e2:95:2a:90:20:a1:cd:d5:0e:ca:bc:1e:8e:fe:3c:d0:db:36:
         2b:70:c1:c8:f1:0c:22:af:de:77:db:76:1c:43:52:fc:94:c9:
         41:3f:1f:5e:75:c8:f3:a9:7b:0f:ee:4b:59:6f:e2:87:33:b4:
         97:62:ce:0e:59:9e:42:b6:e8:4a:ed:69:c8:9a:b4:2a:36:ad:
         f8:aa:cb:b7:2f:5a:f8:c8:5c:5d:fc:14:e1:39:16:3d:de:9c:
         67:d2:fd:c3:6c:6d:f9:5c:16:d4:0a:fc:98:40:3f:87:68:ce:
         17:e8:70:90:94:54:76:ce:9b:cb:75:c2:0d:bf:00:45:18:15:
         f5:e6:00:77:b4:67:f6:b2:0f:ad:ce:70:5c:72:44:7d:10:bc:
         b3:30:a7:03:7f:d1:2c:72:59:f0:0e:be:15:a5:78:ce:93:e7:
         73:5f:31:01:c0:5d:07:7c:43:0a:99:f1:27:9e:23:04:a5:50:
         3b:85:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:10:59 2026 by rpki-client