This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File:                     eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier:          IE+az124I9eJGJY4TmE/bxozFPkLL2wjJSPKFL2lzTw=
Subject key identifier:   7F:9E:DD:1A:4B:37:D6:E1:F7:BA:1F:DD:AE:6E:07:C3:57:D8:95:25
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer:       /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial:       019BF350A5CE82AA604917C20134DD5B9347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number:          068E
Signing time:             Sun 25 Jan 2026 04:01:47 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:47 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:47 +0000
Files and hashes:         1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: q7p98p0i0hRYAFQ4j/Rvz3lPiIPhtRWjHOHm6OcQQec=)
                          2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
                          3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:a5:ce:82:aa:60:49:17:c2:01:34:dd:5b:93:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
        Validity
            Not Before: Jan 25 04:01:47 2026 GMT
            Not After : Jan 26 04:01:47 2026 GMT
        Subject: CN=7f9edd1a4b37d6e1f7ba1fddae6e07c357d89525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:69:0f:24:71:5a:3b:fd:32:a8:ff:a1:ec:
                    22:b0:66:78:b2:32:4e:27:55:e8:f2:14:02:7a:a8:
                    09:23:6a:a9:ea:c4:2d:15:98:41:ca:36:c7:31:37:
                    e0:d6:99:a9:7d:b8:7b:03:0e:bc:67:15:1c:10:10:
                    8c:b7:60:2d:30:64:2c:2d:09:95:e5:84:dd:f8:74:
                    99:1e:15:38:2c:c7:00:2a:2d:65:4a:e7:e8:60:1e:
                    77:81:81:84:29:92:ef:17:56:b6:67:83:d1:38:6b:
                    ed:dc:72:fe:20:b6:8a:1d:1e:b0:4c:f7:22:82:5c:
                    df:d6:d8:2d:05:8e:ec:ef:3e:e2:18:ef:20:e5:b1:
                    39:f9:d2:10:07:93:c4:be:d8:07:7f:39:13:5b:05:
                    2e:d6:7c:3b:87:a5:e6:94:dd:bf:aa:ac:c3:e7:5b:
                    f6:1c:25:32:cb:ff:aa:5e:38:49:3d:5f:9e:75:e6:
                    10:e2:08:91:e0:97:16:aa:8a:f4:cd:28:9e:ea:ce:
                    44:8a:b3:b5:4a:ba:b8:01:7d:39:9e:e8:e4:fc:6b:
                    06:05:48:1e:ab:6f:8f:18:61:82:9f:68:8c:2b:d3:
                    b2:b7:4c:59:41:c6:00:1f:bc:9e:7e:2f:65:4b:76:
                    73:a1:9d:5e:2e:21:7c:5d:e6:39:78:60:64:f2:2e:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9E:DD:1A:4B:37:D6:E1:F7:BA:1F:DD:AE:6E:07:C3:57:D8:95:25
            X509v3 Authority Key Identifier:
                keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:0a:55:fb:cf:af:c6:fa:79:b7:c4:72:7e:cf:aa:f8:d2:
         23:0a:21:f5:ef:88:d0:a8:91:65:fb:41:b3:0c:07:34:6b:eb:
         0e:c7:36:89:6b:67:5d:b7:18:c7:a1:32:fb:d4:1d:ae:34:97:
         83:f6:d9:49:36:fa:9e:97:b4:60:77:10:38:2a:d6:30:65:5c:
         61:84:37:6a:51:84:b0:34:69:a9:76:80:71:6c:97:e2:01:fe:
         82:15:6a:df:5e:d8:24:70:40:63:bd:0b:d0:8f:f1:cb:0a:ee:
         69:ef:69:20:f5:7f:ed:d5:fe:93:28:12:4c:f0:fe:70:d6:db:
         84:0a:22:3c:e5:61:3e:b3:b3:61:3b:6e:a6:f6:b2:20:62:3c:
         14:bc:97:b8:48:04:95:4b:60:e7:05:cc:03:7a:8d:90:54:fa:
         ac:9a:5e:3b:6b:93:f6:3e:3e:8b:12:55:e6:a7:7a:12:49:81:
         a6:94:48:ff:e8:41:3e:55:ba:12:08:a6:44:10:75:d0:46:9a:
         1a:97:ec:bd:44:de:16:80:e4:b2:93:1a:93:57:f4:63:42:15:
         c2:2f:88:6f:bd:82:c4:75:4b:84:40:dc:3d:58:c1:f7:79:e5:
         50:28:81:a9:ae:c7:e2:e6:7a:e4:a7:5d:b4:2b:7d:dd:90:c0:
         9d:1d:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:07 2026 by rpki-client