This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          qG5LlbEXOuUO1izSz6th51bpjPjNXBKLjcz7tz/CefI=
Subject key identifier:   A5:8F:88:03:60:A6:72:D6:F4:F0:1D:85:5E:45:4E:51:82:54:A5:FD
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       019BF53EE13F6817154FFB7C7EC4F2915FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          1808
Signing time:             Sun 25 Jan 2026 13:01:37 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:37 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:37 +0000
Files and hashes:         1: 1N0Tquv34EniQ5Ndo3qkKU2TXrU.roa (hash: GSji7vKxqKL5BrP7KjCJdEr6rUnL66eW/IvNJy35ZDs=)
                          2: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: wUlRN2E1IrfDfOKlXynnapUgM0BMEOmmgRNpIqltU9U=)
                          3: J7GPCuP-10SpSyVCFlPlKa7j_TQ.roa (hash: C/Bmm1uex1v5gT0sTjxxNFMaiLu5ZTn+YiphEqVg8Ag=)
                          4: V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa (hash: SpJKlMHIP1jKpgIyEhNcs3LX1OPy0pKLU5ZQbriXEB4=)
                          5: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (hash: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU=)
                          6: vUEAM-YPMOE_bnpwdo0XUZOektc.roa (hash: zwIeH3cOS34rB1Ez6T+f1Zfu0JaPz2Ntp3EY+zq8h/o=)
                          7: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (hash: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:e1:3f:68:17:15:4f:fb:7c:7e:c4:f2:91:5f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Jan 25 13:01:37 2026 GMT
            Not After : Jan 26 13:01:37 2026 GMT
        Subject: CN=a58f880360a672d6f4f01d855e454e518254a5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:61:35:33:5e:65:0c:ab:8c:6a:a8:c3:f4:
                    1c:aa:c8:d9:4b:0e:6f:a7:27:d6:51:99:1e:9e:a1:
                    20:a1:11:2c:05:c3:49:e8:be:81:1c:1a:c9:e0:89:
                    b8:f3:86:6c:09:06:9c:d8:e6:15:fd:5b:a6:d9:6c:
                    56:0c:fb:1a:b0:de:16:0c:8b:be:80:3a:17:c4:bc:
                    78:c7:5f:08:b5:36:ba:57:d6:26:8f:7b:fa:ce:1c:
                    36:9d:8e:5d:97:84:d1:84:b0:83:ec:7b:80:6d:5f:
                    8c:46:21:ac:7f:a9:72:76:96:4a:e8:35:08:95:27:
                    93:68:cc:6e:9f:f2:55:ce:06:71:b5:68:aa:0a:39:
                    2b:cd:fc:bc:d8:2e:e1:9e:0b:94:28:e1:a4:49:a3:
                    2b:87:87:dc:a6:78:df:42:a9:a3:07:08:fa:fc:64:
                    72:bd:80:c1:25:ef:cc:14:cf:bf:bd:b9:29:80:8e:
                    7a:21:c7:ba:a8:98:9f:13:86:50:94:b5:c8:ab:72:
                    de:3a:02:e9:2a:e8:c3:db:6c:51:87:f1:5f:b5:af:
                    49:42:d2:2e:4f:86:fd:9e:25:fe:3b:e8:07:6a:f0:
                    38:74:d5:8e:0f:c5:bb:d4:c5:f5:4a:6c:2d:98:0c:
                    23:b4:84:0b:5f:24:41:d6:6d:b7:a4:35:f1:59:cd:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8F:88:03:60:A6:72:D6:F4:F0:1D:85:5E:45:4E:51:82:54:A5:FD
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d0:f6:5d:27:94:5b:e8:b1:30:2c:13:ca:e8:b8:2a:54:52:
         84:66:3d:3e:9d:59:b2:ac:3c:1a:fc:29:fa:a3:3a:ab:23:a7:
         2a:c9:11:0b:51:4a:0a:60:18:12:cf:0b:f4:97:9e:04:12:cb:
         10:45:91:41:04:aa:5c:6a:61:45:b2:b9:77:dc:7a:3d:e1:dc:
         c4:1d:4a:4f:2e:d9:aa:83:67:7d:14:83:d6:99:2e:11:ae:08:
         8d:45:6b:50:4b:f0:cb:26:5f:ea:24:9b:9c:58:e0:b3:40:9d:
         2d:d8:21:96:c6:c4:06:ed:d3:ef:f1:ed:9c:84:25:d3:d8:4c:
         89:d6:eb:2d:6e:1f:cd:55:4d:fd:47:86:79:52:e3:f1:5c:3d:
         bb:56:6e:e2:15:ac:27:de:6e:67:b9:35:66:e6:ae:e5:e9:32:
         a6:e5:13:ae:77:44:15:25:be:d3:2a:8b:68:9f:af:ee:7f:de:
         4e:fd:f5:67:3f:5f:ed:d0:13:51:04:ff:5a:07:36:67:36:6d:
         54:46:2f:14:9e:b2:11:d5:f8:0f:b0:e4:21:f4:94:c5:26:12:
         82:fa:c1:18:b8:ac:ba:e5:b4:dd:38:cd:d2:57:1b:a2:24:3b:
         dd:ab:e0:f8:5e:76:70:0e:5d:f1:9a:6f:0e:44:7d:56:5a:b9:
         e4:00:1b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PuE/aBcVT/t8fsTykV/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3
YWRhY2EwHhcNMjYwMTI1MTMwMTM3WhcNMjYwMTI2MTMwMTM3WjAzMTEwLwYDVQQD
EyhhNThmODgwMzYwYTY3MmQ2ZjRmMDFkODU1ZTQ1NGU1MTgyNTRhNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNFhNTNeZQyrjGqow/QcqsjZSw5v
pyfWUZkenqEgoREsBcNJ6L6BHBrJ4Im484ZsCQac2OYV/Vum2WxWDPsasN4WDIu+
gDoXxLx4x18ItTa6V9Ymj3v6zhw2nY5dl4TRhLCD7HuAbV+MRiGsf6lydpZK6DUI
lSeTaMxun/JVzgZxtWiqCjkrzfy82C7hnguUKOGkSaMrh4fcpnjfQqmjBwj6/GRy
vYDBJe/MFM+/vbkpgI56Ice6qJifE4ZQlLXIq3LeOgLpKujD22xRh/Ffta9JQtIu
T4b9niX+O+gHavA4dNWOD8W71MX1SmwtmAwjtIQLXyRB1m23pDXxWc19SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWPiANgpnLW9PAdhV5FTlGCVKX9MB8GA1UdIwQY
MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt
MDY0NDE0ZDAzNDBmLzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm
LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtD2XSeU
W+ixMCwTyui4KlRShGY9Pp1Zsqw8Gvwp+qM6qyOnKskRC1FKCmAYEs8L9JeeBBLL
EEWRQQSqXGphRbK5d9x6PeHcxB1KTy7ZqoNnfRSD1pkuEa4IjUVrUEvwyyZf6iSb
nFjgs0CdLdghlsbEBu3T7/HtnIQl09hMidbrLW4fzVVN/UeGeVLj8Vw9u1Zu4hWs
J95uZ7k1Zuau5ekypuUTrndEFSW+0yqLaJ+v7n/eTv31Zz9f7dATUQT/Wgc2ZzZt
VEYvFJ6yEdX4D7DkIfSUxSYSgvrBGLisuuW03TjN0lcboiQ73avg+F52cA5d8Zpv
DkR9Vlq55AAbEw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:07 2026 by rpki-client