This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
File:                     eodGp2zag2kAnSiUHvFWI5xqY6E.mft (raw, json)
Hash identifier:          veTWACevavV6luWiRzYBEGdzkj6OXp7T9731G+e+yfo=
Subject key identifier:   D0:7E:AE:E8:44:79:3A:F3:9A:EA:B2:04:43:FE:A7:AD:A9:E7:C6:E0
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Certificate issuer:       /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial:       019BF68821D12B1BD58285F8807709FF8D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
Manifest number:          16E6
Signing time:             Sun 25 Jan 2026 19:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:15 +0000
Files and hashes:         1: eodGp2zag2kAnSiUHvFWI5xqY6E.crl (hash: eFWsvn7INdUteEL4JrC+FCMOWR/5FeFdcqBiAFrtTQs=)
                          2: iCAmIkG0tX2_SD8pqaheFxWF6uc.roa (hash: Q6JSdax9g/NUOy48SKBnrtutX2ymtkhxJcIyQ6WMWac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:21:d1:2b:1b:d5:82:85:f8:80:77:09:ff:8d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
        Validity
            Not Before: Jan 25 19:01:15 2026 GMT
            Not After : Jan 26 19:01:15 2026 GMT
        Subject: CN=d07eaee844793af39aeab20443fea7ada9e7c6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:97:07:66:13:41:4c:bf:6a:d3:ba:dd:ba:
                    7b:71:d0:ea:21:7e:db:f2:e0:a7:ec:fa:96:d7:35:
                    de:c4:79:ea:e2:2b:d5:f3:69:26:4b:34:95:79:1f:
                    2a:d9:e2:14:a5:71:5a:d3:56:d3:74:b7:c3:fd:cd:
                    9d:a6:4f:80:d8:af:e9:96:43:90:21:af:a6:1d:ac:
                    ae:dd:d0:de:67:ea:b7:69:87:69:ae:7c:0e:b7:c9:
                    19:f0:d0:c6:72:77:c5:4f:83:5f:53:ac:81:31:20:
                    2b:42:1f:ba:e2:8d:ac:dc:b7:b8:c6:18:de:4d:ea:
                    44:cb:dd:26:6d:83:0b:93:55:05:e1:18:d5:18:c8:
                    8b:33:53:44:c7:1d:da:7c:e4:ba:6f:03:f1:90:0c:
                    aa:52:61:55:2d:e6:5d:e6:ea:c8:ff:07:a9:73:20:
                    45:31:2f:05:49:11:6a:92:f2:47:fd:e7:06:dc:f2:
                    f7:9c:e9:5f:d5:02:50:8b:ea:c3:4d:bf:ee:53:f7:
                    56:be:2f:e1:cc:eb:01:1e:ea:bb:77:25:9e:c8:80:
                    ef:3c:00:67:9c:55:ec:59:81:75:73:53:19:8d:b9:
                    a2:4a:c1:2d:14:d9:10:c0:c1:c9:b1:30:02:5e:5e:
                    79:f5:5f:10:9e:10:a7:62:0b:3d:5c:c6:76:6e:e1:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:AE:E8:44:79:3A:F3:9A:EA:B2:04:43:FE:A7:AD:A9:E7:C6:E0
            X509v3 Authority Key Identifier:
                keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:72:ea:c0:b1:69:51:28:ae:d6:2b:54:31:5c:70:f0:26:1b:
         0c:70:44:e0:bc:0e:0b:8a:8f:ee:6e:32:26:8e:6e:0a:49:05:
         f7:f5:05:2c:bc:7c:1a:05:b4:55:22:07:58:34:e6:06:dd:19:
         61:e0:f1:41:5b:a7:fc:a3:37:66:70:f1:68:32:e3:78:3d:35:
         df:31:9d:73:68:8a:83:18:ac:aa:fe:9a:36:20:a2:e2:6d:83:
         7e:b1:4b:8a:29:e1:39:82:51:cb:24:e1:4e:ad:a0:f7:98:59:
         89:9d:67:56:f7:28:57:3f:fb:93:87:89:98:f1:fd:74:1f:52:
         b7:19:c7:5a:a6:ae:5a:f3:75:81:e0:35:dd:c2:7b:e4:b5:66:
         14:7f:58:4e:87:59:c2:81:2b:31:00:b0:33:da:74:0c:fe:96:
         6c:d9:0e:da:a9:4f:d9:ce:57:2f:29:11:e9:08:a6:9b:d2:01:
         0d:57:c4:08:13:1f:10:5d:62:f2:35:7b:fb:23:d7:27:a3:0b:
         19:d0:b8:30:29:1a:be:71:b9:07:4b:6d:80:95:88:ea:31:2f:
         8b:7c:f7:e5:f2:c5:bc:28:fa:6d:8e:12:83:e9:e3:8a:4f:62:
         37:9b:ba:f6:f1:0b:62:40:39:99:b5:48:32:25:2f:67:77:8e:
         79:24:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:16 2026 by rpki-client