This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          QawZO4FmldHScfXf5OmbG7D/yYUassBndn3biuatehg=
Subject key identifier:   D4:7F:38:23:98:32:55:F4:4B:AD:22:C6:60:6C:32:5B:EF:CB:C4:B8
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       019BF650EE8BD1FDBF725B9521711DBC49DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0E6C
Signing time:             Sun 25 Jan 2026 18:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:57 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: F7JCl7TE5SojXmgNwg5P2dybf45HReJavTIWxiV1sqE=)
                          2: tiPSu8Y-m7bFT2Q5p7YlDzHrV6E.roa (hash: rj77DrlmC39KWKVNN8waQm35MPNGKCIe/g9stIOU5to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:ee:8b:d1:fd:bf:72:5b:95:21:71:1d:bc:49:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Jan 25 18:00:57 2026 GMT
            Not After : Jan 26 18:00:57 2026 GMT
        Subject: CN=d47f3823983255f44bad22c6606c325befcbc4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:f7:dd:4c:b7:90:7d:b5:75:a2:b3:2c:1d:
                    b4:10:18:a0:40:f8:40:5f:9c:49:89:84:1b:8a:2d:
                    0b:d5:9f:87:2c:ec:d5:31:cf:fa:dc:09:b7:cc:7c:
                    f5:7a:b1:d4:69:c1:ba:9b:3a:a5:3d:61:bb:a5:59:
                    72:7b:69:7a:ad:09:fb:85:e7:c6:df:1e:97:62:ad:
                    4d:63:55:7b:44:d2:f2:6b:47:d2:5e:35:d5:96:47:
                    1f:93:79:b8:54:ab:38:9c:a6:2d:60:74:57:0b:c1:
                    50:f6:cd:43:89:67:f3:45:f4:86:47:94:08:0f:b8:
                    e0:d1:89:3b:47:39:11:39:19:db:60:15:92:0e:f8:
                    ad:a0:11:38:7c:b0:ee:a2:cf:5d:a1:43:e8:88:c9:
                    d8:c8:2a:3e:2a:6c:80:59:57:3b:1f:fd:da:6d:6c:
                    58:49:8b:28:03:bc:2c:80:81:58:1c:55:6f:1d:94:
                    e5:7a:23:f4:df:9c:00:42:51:54:df:cb:a6:36:3c:
                    16:77:57:07:32:a3:4d:6f:a7:d2:e5:e0:00:9b:b8:
                    5e:f4:ff:ed:e4:84:62:f6:ad:57:9b:bf:2f:ed:32:
                    95:0f:38:fb:2a:47:59:dc:3a:92:c6:e5:5c:63:d5:
                    c7:cb:cf:7c:01:ab:f0:42:ef:9f:68:a3:82:3e:f5:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7F:38:23:98:32:55:F4:4B:AD:22:C6:60:6C:32:5B:EF:CB:C4:B8
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:81:32:79:07:34:e3:40:c9:cf:0e:67:43:e8:2c:1a:e6:
         ec:61:1f:76:bd:9f:99:13:5c:3c:72:1d:fb:b7:ad:5c:97:a6:
         7e:66:8d:c7:5c:e6:a8:36:7c:d9:42:cd:d8:63:84:cd:88:cf:
         c8:df:d9:10:fa:46:88:fa:e8:8d:14:7c:e2:94:51:80:84:1e:
         b9:84:23:0d:53:16:89:85:50:50:71:a3:d9:be:69:23:0c:a6:
         f3:19:b6:d0:cb:dd:e5:a8:20:03:3a:1b:9a:71:98:15:b1:33:
         b3:d2:2f:d6:5a:ea:d7:30:f2:71:fc:88:51:05:a8:4a:6e:95:
         5b:8c:6d:f7:87:32:e5:af:86:61:d5:6c:77:3f:0b:9a:a2:a3:
         ad:d5:51:c4:72:dd:54:28:b1:fb:97:a2:ec:c8:d4:1a:25:a5:
         3d:6e:53:35:2f:fe:65:4b:91:45:39:d6:ff:43:4f:b9:ee:29:
         93:a5:ef:40:2f:ae:16:a1:e2:5c:ca:19:d9:1c:88:17:9d:65:
         45:30:a1:4e:29:5e:ea:f0:f3:f5:a8:9f:ed:99:f0:de:1f:7b:
         0a:7f:3f:37:7a:c5:dd:b1:06:0f:5c:96:2f:9c:90:84:e6:fe:
         57:61:4f:73:22:bc:2a:f2:3e:0f:58:81:6e:f0:ab:10:c8:06:
         2e:53:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:52 2026 by rpki-client