This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
File:                     EzGVE_0LkEFwYKIYt21iuOP7zFE.mft (raw, json)
Hash identifier:          PBQ4qx6rzXB18lozuAMh8aMFXYLw/aLLE5jt9KBqeiw=
Subject key identifier:   07:3B:A1:3F:A2:0B:84:11:0A:40:A0:FE:F5:65:64:4B:29:BD:49:BF
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Certificate issuer:       /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial:       019BF6F5727F8DB784808335008E54A22C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 21:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:39 +0000
Files and hashes:         1: EzGVE_0LkEFwYKIYt21iuOP7zFE.crl (hash: kbB1MtZ7GbXPHniBkaZh7aFvX9yx4K56Ca9eVaWVlgo=)
                          2: Ob8fGkRohSHq1skwjGiLyM9Evpc.roa (hash: //MGT454DritNERUSy+6CxGxoGkSZKzuZu6i79JiNaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:72:7f:8d:b7:84:80:83:35:00:8e:54:a2:2c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
        Validity
            Not Before: Jan 25 21:00:39 2026 GMT
            Not After : Jan 26 21:00:39 2026 GMT
        Subject: CN=073ba13fa20b84110a40a0fef565644b29bd49bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:4f:42:bb:39:33:1c:be:82:9c:dc:6c:d9:
                    1f:a3:e4:a1:ef:fb:74:4d:e1:5f:32:2a:ae:95:30:
                    35:d2:fc:4f:97:5f:e8:5e:44:25:49:a6:95:a0:63:
                    34:5a:5b:b1:ef:8f:12:b4:95:62:f8:98:5c:37:04:
                    16:6c:c7:8f:ec:7f:b6:64:61:25:c6:54:46:10:65:
                    84:1b:34:95:9f:5d:5d:94:7d:7a:0a:26:e1:a0:a3:
                    06:16:f1:89:38:0a:13:ec:33:a8:7d:12:d1:6a:0c:
                    bd:ef:a6:c7:e2:27:9b:21:bd:07:8a:f0:2d:7b:4f:
                    0e:ab:f5:39:c8:89:96:d6:25:76:35:26:20:bf:48:
                    74:26:51:dc:72:e6:38:59:10:bb:7c:79:03:54:64:
                    24:6b:6a:a2:0d:d0:5b:42:f4:08:49:19:d7:99:05:
                    45:07:93:c6:82:7f:99:74:8b:d1:c1:c2:fc:ca:13:
                    7c:4b:66:95:70:2f:8e:e6:b6:95:98:9d:25:4e:53:
                    de:fb:a8:3a:a5:8c:8e:a4:0d:07:b1:31:05:ec:83:
                    01:3a:83:04:be:4e:67:ac:ac:06:6a:4d:4f:73:86:
                    25:36:4e:6f:b5:17:f8:f1:d2:b7:ac:8b:42:e5:86:
                    94:26:fa:2f:a4:39:91:e7:a1:47:fb:9d:7c:37:80:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3B:A1:3F:A2:0B:84:11:0A:40:A0:FE:F5:65:64:4B:29:BD:49:BF
            X509v3 Authority Key Identifier:
                keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:a0:52:b2:dd:8b:0f:f4:a9:a2:b3:5b:16:2c:8b:f5:8e:
         c1:1e:e6:e9:52:12:8e:5e:bb:91:83:6c:9a:31:50:74:f8:14:
         a2:a9:73:2c:8a:a0:fa:f1:06:06:f1:2c:c5:b3:d8:e7:b1:d6:
         56:ab:8d:56:ba:c1:54:06:10:2d:ec:6c:f7:2c:c2:8d:74:ed:
         bb:30:4d:d1:04:f1:d3:a1:2d:aa:10:66:59:78:49:f3:ed:4f:
         f8:49:f2:d3:a4:03:8f:26:b0:58:d3:72:d9:5e:96:93:cf:96:
         ed:04:f6:ec:6a:4e:7a:ac:a5:05:8e:ae:f8:0c:55:cf:62:d5:
         10:2a:f6:f4:a8:df:75:96:81:d8:59:70:0e:6b:12:0a:06:84:
         96:79:cc:59:97:be:36:f6:12:fb:6e:77:e0:3e:d6:96:2d:27:
         83:8e:be:41:13:db:be:22:8a:87:17:23:41:69:ab:46:48:fd:
         2d:9a:d0:4f:cd:68:58:02:92:eb:5f:b0:05:c3:93:a9:2a:92:
         2e:dc:4f:98:68:5d:03:e3:10:f8:16:8e:7a:91:db:3d:4a:d9:
         ce:69:51:98:51:1b:67:ef:40:ea:90:22:16:24:bb:20:12:d8:
         54:a8:49:65:03:d1:79:dd:cb:1e:f2:58:9e:c4:93:92:78:2b:
         74:1b:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:01 2026 by rpki-client