This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File:                     76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier:          Vo23s4ptq4aMw4+QnssJiFxDsoGXhWKcLWAZjYXSBs8=
Subject key identifier:   32:97:6E:6C:9E:CE:61:03:D5:16:04:EA:DE:AF:BA:35:8A:1D:9C:00
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer:       /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial:       019BF4D0A60E25C69BAFBB419844ACDF7283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number:          10F6
Signing time:             Sun 25 Jan 2026 11:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:13 +0000
Files and hashes:         1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: 0psNKv1KO5O0CS+1R67TovYZR8clzFdQCz21sZ0bvxM=)
                          2: d0r-Z1tATflEg34xH8LpeTJxCeg.roa (hash: /VLriREqzzV93h2U9Y2YNTNewlDjbuqqOCTeloMXxjY=)
                          3: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (hash: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:a6:0e:25:c6:9b:af:bb:41:98:44:ac:df:72:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
        Validity
            Not Before: Jan 25 11:01:13 2026 GMT
            Not After : Jan 26 11:01:13 2026 GMT
        Subject: CN=32976e6c9ece6103d51604eadeafba358a1d9c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:46:92:da:57:ec:cf:6e:34:01:cd:59:1b:
                    9a:20:9f:ac:a0:bb:a6:16:67:b5:fd:e3:e0:5a:f9:
                    37:76:c5:40:cd:55:35:1c:87:8a:8e:08:dc:a5:a0:
                    ef:7f:82:1a:95:d5:26:f4:2d:dd:f3:6e:fc:07:32:
                    bc:a9:23:83:32:b0:4d:57:d9:7f:04:d0:93:7a:7a:
                    95:d1:70:d5:ff:e3:1a:44:4c:0d:44:ed:1b:dd:ff:
                    22:3d:ad:ce:32:81:7f:8e:c4:64:64:ac:68:ea:c0:
                    8a:7a:91:d3:f6:48:da:23:58:ea:10:e8:69:cd:57:
                    7e:0a:e0:05:ae:74:07:b9:2c:63:17:5f:4b:32:99:
                    80:98:1f:d1:a6:f9:08:63:9c:da:eb:f0:00:f9:61:
                    49:2b:38:ff:6b:b2:6b:18:c8:c4:9b:04:f0:dd:29:
                    ec:62:ae:9f:33:ae:9f:de:2e:91:50:7f:c4:e7:73:
                    60:ef:09:82:5a:d5:9a:09:43:71:5d:2b:53:08:19:
                    41:fe:4d:ed:fb:cb:00:c3:06:03:d3:fa:0a:d2:eb:
                    6b:44:68:90:b4:c6:30:3e:47:a9:21:44:68:a2:db:
                    41:ef:63:43:8b:41:66:ab:0b:64:33:8f:3d:83:9d:
                    e2:4f:d6:eb:6f:9a:c5:0d:0c:20:cd:ad:61:3b:7f:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:97:6E:6C:9E:CE:61:03:D5:16:04:EA:DE:AF:BA:35:8A:1D:9C:00
            X509v3 Authority Key Identifier:
                keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:15:56:f4:87:77:18:46:fb:08:d0:c1:04:cb:bd:5c:2d:cf:
         51:f2:38:b2:4c:9a:5e:a0:9b:fb:d3:91:02:2f:9e:52:68:f7:
         5f:8f:6b:83:1d:75:8b:5b:80:ee:21:46:7e:9b:b3:00:63:97:
         d6:f2:ec:4a:83:a7:9f:ed:f8:9b:6d:5d:7f:d9:17:f9:60:45:
         d2:c0:ea:21:a5:e4:21:dc:c5:5c:5d:a4:a3:af:f0:09:ab:85:
         2c:40:cf:68:e6:b2:0f:83:85:8a:3f:4e:ee:89:46:e3:25:fc:
         e1:e8:1e:3d:98:a1:1f:5b:60:c0:a7:e1:9d:44:41:dd:65:bf:
         c6:b0:02:fe:88:63:8c:97:ef:06:6b:3a:bb:bb:a7:80:85:b7:
         78:88:0a:b9:04:58:04:11:35:4b:92:e2:90:88:56:6a:10:35:
         50:ce:fa:8a:66:8c:5d:bc:7d:ce:92:64:b3:c7:d1:0b:3c:95:
         c6:64:5b:a0:9e:e3:f6:0c:4d:23:1a:eb:06:34:28:ad:e5:a8:
         54:24:9f:dc:ec:e7:3c:d1:c7:da:5d:28:81:f8:ec:54:b1:2f:
         ce:10:3f:56:bb:a3:1c:2d:6a:f7:ad:5e:4a:28:c3:dd:63:8a:
         08:be:68:f1:c0:94:3f:df:16:45:b5:3a:28:4e:71:32:b9:36:
         05:0c:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:23:15 2026 by rpki-client