This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          SXVsAFyVig/8iAuO7Gw0/X56MxSCJ4qMaT6ketDsHPY=
Subject key identifier:   6B:B5:88:16:B6:2C:71:E5:DD:7F:8F:C9:C1:29:67:9C:4D:93:7B:C6
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019BF53DF6A797B35FD160A23B3589409938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0925
Signing time:             Sun 25 Jan 2026 13:00:37 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:37 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:37 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: uzKpSMJKbohXA97NRImykvhtccaEXcAFqUTF0kXTNJs=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3d:f6:a7:97:b3:5f:d1:60:a2:3b:35:89:40:99:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Jan 25 13:00:37 2026 GMT
            Not After : Jan 26 13:00:37 2026 GMT
        Subject: CN=6bb58816b62c71e5dd7f8fc9c129679c4d937bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:54:0c:55:19:73:28:c3:dd:1e:50:5a:02:
                    0b:96:8d:9a:eb:6a:92:21:e8:11:a5:b7:f4:3b:b0:
                    b3:b9:cf:3d:ab:0d:d3:ff:0a:1c:35:ed:96:d3:11:
                    dc:a2:0f:b3:56:b1:d8:60:c2:e6:61:03:b4:25:24:
                    be:75:8c:8d:2c:4a:c9:76:8c:cf:5e:77:5b:f5:9a:
                    89:58:8c:79:3b:ab:72:30:dd:d7:ad:fe:07:6d:01:
                    07:36:46:d1:e2:e2:1d:18:21:d2:3e:28:c1:0c:4e:
                    22:1c:0f:fc:4f:c1:8b:45:d0:c7:fd:6a:1e:cd:1d:
                    b8:9f:8a:9f:f3:f3:23:91:d9:43:42:64:65:e1:cc:
                    04:89:e3:51:d9:00:73:84:92:bc:fc:34:fe:e2:db:
                    e9:83:1a:d3:1a:13:75:40:73:96:fa:7a:65:70:e0:
                    de:27:33:a3:53:ac:11:eb:0d:10:c0:b5:79:5b:ff:
                    9d:52:71:0a:81:e9:4a:5d:31:8e:bd:d4:8f:12:11:
                    c4:b7:64:3b:a5:3f:61:f1:c6:f9:18:11:51:3c:cb:
                    2c:e8:69:f3:14:df:e0:85:33:5e:1d:6b:8a:66:5e:
                    00:1f:de:17:75:56:bd:ed:46:85:38:53:22:5c:97:
                    e3:68:de:0a:2e:57:9b:7a:30:4b:90:8d:8c:79:ac:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B5:88:16:B6:2C:71:E5:DD:7F:8F:C9:C1:29:67:9C:4D:93:7B:C6
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:68:3a:af:cd:32:8e:5c:f9:df:a8:79:69:2e:c8:d0:16:e8:
         b9:2a:d5:bd:23:b2:dc:20:66:ae:f7:9a:8c:cd:98:90:15:d9:
         6c:50:5f:2c:24:66:c6:2d:55:11:d8:77:bc:4a:cb:dc:d4:59:
         e0:cb:88:fc:6c:5c:92:80:8c:fb:85:e0:dd:73:44:2e:7d:b5:
         f1:3f:1a:2a:d0:86:c4:41:20:82:06:f5:b1:82:6c:c3:8f:2e:
         73:d3:db:a6:0b:45:9e:b1:85:ac:5c:f0:d9:ca:85:2c:1f:57:
         f4:1b:ee:a1:b6:56:7e:88:f4:bb:74:2b:b5:d8:b8:c3:63:ea:
         35:23:d8:54:c1:cd:c5:4b:07:c5:e0:92:83:8d:ac:07:9d:7a:
         52:0e:6f:bb:90:85:f5:e9:61:96:db:20:53:94:35:c1:ba:bc:
         64:2e:5c:e8:89:42:57:56:d9:a3:e4:9e:3c:36:de:1e:87:eb:
         a0:79:05:6e:f7:9b:8a:f5:dc:0d:16:fa:7d:dd:9b:f0:2a:74:
         69:71:c9:3b:2a:cf:0f:c8:16:20:a8:b4:c4:70:aa:4b:ff:db:
         5c:43:c8:c8:56:55:70:16:f8:13:71:2c:96:ba:d6:a6:9a:cf:
         58:19:17:1b:9a:d1:a3:fe:41:a7:ff:24:ae:82:be:1e:e2:6e:
         07:bd:35:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:40 2026 by rpki-client