This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
File:                     eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft (raw, json)
Hash identifier:          GOcHaRIv0JNGx8qik6S6sjxEaUoklXLchbBrVqVN5fQ=
Subject key identifier:   24:6C:53:C7:03:2A:42:C0:2F:B1:10:A8:30:B5:5C:70:48:6D:CD:C0
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Certificate issuer:       /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial:       019BF5070F1A73220FBF525501380F5D08B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 12:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:39 +0000
Files and hashes:         1: DFoJ8Ykped-mXhqm_OYd3pUCI78.roa (hash: pZAEPyW72cPOpC8U6Y92sF/916oHQlyolVnKoAI3w7U=)
                          2: EAfbw1tdW7YS4g6-HEloi9AGb3M.roa (hash: 7CA/xL5oWj2FQS+a86+X9Pizakh1u78n/2EeRBlMlDE=)
                          3: XN0LNDGWFEA-zEvu1r5zaAXSqy4.roa (hash: FmKonZ3MVtB3ys5G7IPWHLskIr/TqahntltgsmFFZdc=)
                          4: eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl (hash: FBjQYfvUA/EAHa78Sqy9yVy/IZwZRrqJupOWLGOGgOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:0f:1a:73:22:0f:bf:52:55:01:38:0f:5d:08:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
        Validity
            Not Before: Jan 25 12:00:39 2026 GMT
            Not After : Jan 26 12:00:39 2026 GMT
        Subject: CN=246c53c7032a42c02fb110a830b55c70486dcdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:c5:4d:fc:f0:bf:a6:ce:33:42:e9:6c:5a:
                    5d:07:32:db:22:69:de:df:9d:84:b4:ec:03:b0:ab:
                    40:64:09:ef:c3:ce:9b:27:86:92:08:cb:e9:e0:ba:
                    45:44:f3:be:ec:73:8c:c6:23:b5:6e:ed:df:53:8d:
                    98:f9:cd:30:cc:46:84:b6:64:5b:e0:1c:08:c3:fb:
                    bd:ae:90:88:4c:6d:3f:82:c4:0e:92:51:23:41:f4:
                    59:14:f8:6d:42:a1:c9:64:89:1f:9a:12:5b:e9:06:
                    31:bc:4c:2f:37:52:06:df:19:a6:5e:5a:c3:85:8c:
                    42:78:7d:f9:71:cd:7d:9e:66:d9:12:fb:cf:fd:b7:
                    23:de:39:a6:99:00:80:6e:be:60:f3:33:6a:e3:85:
                    52:89:7e:c2:a4:2d:0c:c2:b7:18:60:df:73:0c:e4:
                    92:f7:80:02:d1:06:0d:2a:9b:ae:70:f1:97:70:87:
                    e4:db:14:35:b6:19:a5:b5:7b:a6:17:bf:18:cd:55:
                    6e:ce:41:16:b1:33:f3:70:f6:0e:d9:e6:0d:3e:ca:
                    33:cf:48:7c:f9:a6:fe:e2:ef:71:e1:4e:63:32:60:
                    18:57:16:ea:2a:8c:0f:a7:13:e0:21:09:16:57:38:
                    3f:5d:f6:bc:5d:d0:03:f0:0c:49:86:4a:85:96:59:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6C:53:C7:03:2A:42:C0:2F:B1:10:A8:30:B5:5C:70:48:6D:CD:C0
            X509v3 Authority Key Identifier:
                keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bf:a6:86:47:ca:08:22:99:9d:cf:7d:52:84:e5:4f:77:87:
         a9:8f:74:e6:e3:8c:21:83:76:18:3a:c8:6c:ee:c9:3e:87:6f:
         7c:c5:09:49:4b:0f:ca:cb:0e:bc:b0:c2:2f:1d:c8:79:a3:2d:
         8a:7e:9f:bd:8a:80:5c:fd:1f:8c:6f:ce:4f:36:f3:ac:73:ec:
         6b:b3:01:c6:05:fc:34:59:b0:1c:13:79:6f:6b:67:4c:1d:77:
         f0:87:94:12:a8:4d:3b:e3:94:0b:24:31:2a:80:24:4f:d9:59:
         f0:a5:b4:d2:d7:b9:32:ec:e2:1c:93:b2:c8:7d:05:eb:b8:ac:
         9b:c2:3b:78:13:24:a1:ed:60:48:fd:9e:03:14:33:50:a1:2f:
         82:65:4f:1f:53:eb:80:2b:73:9b:b3:0e:e1:9e:26:e4:22:ab:
         18:e6:e5:b6:52:bf:d6:8a:81:e5:71:37:e2:0a:d8:0b:bc:55:
         6e:d0:f4:45:49:96:46:f1:54:2e:44:8a:47:59:d6:c1:25:92:
         ec:cb:d9:8f:02:a6:70:27:7e:8e:11:97:cf:29:1b:6a:69:61:
         e0:19:90:83:7d:85:ef:33:c3:10:81:8d:5c:b2:aa:38:66:0f:
         4f:04:60:cf:22:80:78:9f:46:16:5e:37:29:5b:54:3e:2b:d1:
         7e:d4:7d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1Bw8acyIPv1JVATgPXQi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MzU2YzZhODMxNjgwZTliOGI3Yzk1NTE0OTUzMDA3YTk0
MDdlODcwHhcNMjYwMTI1MTIwMDM5WhcNMjYwMTI2MTIwMDM5WjAzMTEwLwYDVQQD
EygyNDZjNTNjNzAzMmE0MmMwMmZiMTEwYTgzMGI1NWM3MDQ4NmRjZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J3FTfzwv6bOM0LpbFpdBzLbImne
352EtOwDsKtAZAnvw86bJ4aSCMvp4LpFRPO+7HOMxiO1bu3fU42Y+c0wzEaEtmRb
4BwIw/u9rpCITG0/gsQOklEjQfRZFPhtQqHJZIkfmhJb6QYxvEwvN1IG3xmmXlrD
hYxCeH35cc19nmbZEvvP/bcj3jmmmQCAbr5g8zNq44VSiX7CpC0MwrcYYN9zDOSS
94AC0QYNKpuucPGXcIfk2xQ1thmltXumF78YzVVuzkEWsTPzcPYO2eYNPsozz0h8
+ab+4u9x4U5jMmAYVxbqKowPpxPgIQkWVzg/Xfa8XdAD8AxJhkqFllkJCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRsU8cDKkLAL7EQqDC1XHBIbc3AMB8GA1UdIwQY
MBaAFHg1bGqDFoDpuLfJVRSVMAepQH6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYt
NWRjMzkyZGU2MzdiLzEvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYtNWRjMzkyZGU2Mzdi
LzEvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFr+mhkfK
CCKZnc99UoTlT3eHqY905uOMIYN2GDrIbO7JPodvfMUJSUsPyssOvLDCLx3IeaMt
in6fvYqAXP0fjG/OTzbzrHPsa7MBxgX8NFmwHBN5b2tnTB138IeUEqhNO+OUCyQx
KoAkT9lZ8KW00te5MuziHJOyyH0F67ism8I7eBMkoe1gSP2eAxQzUKEvgmVPH1Pr
gCtzm7MO4Z4m5CKrGObltlK/1oqB5XE34grYC7xVbtD0RUmWRvFULkSKR1nWwSWS
7MvZjwKmcCd+jhGXzykbamlh4BmQg32F7zPDEIGNXLKqOGYPTwRgzyKAeJ9GFl43
KVtUPivRftR9Bg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:59 2026 by rpki-client