This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File:                     EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier:          3VxzuCAsRW3GXXg/mJZ9zjpqNym3hmMX5pS8hK6/sNI=
Subject key identifier:   9B:4A:36:89:0E:79:AC:93:D0:C6:EF:92:90:CA:5F:93:85:AB:03:31
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       019BF5E39961F360224992684744B83F5B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number:          18D9
Signing time:             Sun 25 Jan 2026 16:01:32 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:32 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:32 +0000
Files and hashes:         1: 0NKhDKM-5Ss2PkXpqTneoEemaz8.roa (hash: Ast2f0yb+CsukurTEugrLSF0q9KXQ7PgzYdbYYQejg4=)
                          2: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=)
                          3: 1-ewOHA560m92pvJmgD394GLjXdY.roa (hash: m5iiq8c/JoAaZRHPkzppbq82OZoH1asGDKiHhvIFdVM=)
                          4: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: knQGwyayGUz+2zMcsiVZu51TH2XyN2k93i+YimQcGd4=)
                          5: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
                          6: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
                          7: JmhicKD1lpz591RoqlsxNBqyets.roa (hash: ep3JcMrNC9be2VyWFaoo1+JCAdDvrddwqy1Hz2d8GPw=)
                          8: RiCeGoLJLFsyXLs4imgog-X_h40.roa (hash: m5IiGNSxjj3YSYsLMUU0YB0kkycBv85oeXqVJ5P7/kM=)
                          9: W4SfK7LVjjxj4b0TkQOGGde1P4A.roa (hash: FSzilaKZCTJ2hNW8MT0y1/bk1wNZ6lQ1QM8Hv1wN7Ss=)
                          10: _3kzqKok3z7fQDLrnmIfOGBMWpE.roa (hash: vrsV62/+f0qeXZvSNXU86WQluWpB748JDnGujS/D0TU=)
                          11: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
                          12: qvKhr5U_aSV29tqa6qG63IQExJg.roa (hash: 19Pqv0I3k0ysS4Ds1RGDeXEbjr/g0gLwWhCbqWMrBZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:99:61:f3:60:22:49:92:68:47:44:b8:3f:5b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Jan 25 16:01:32 2026 GMT
            Not After : Jan 26 16:01:32 2026 GMT
        Subject: CN=9b4a36890e79ac93d0c6ef9290ca5f9385ab0331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:73:8e:41:98:d9:cd:c0:9b:1a:cd:97:21:
                    83:9e:4d:7b:49:0e:a5:f9:19:0f:4c:6d:9d:31:af:
                    0f:0d:92:b2:b2:63:8f:ac:47:c4:22:fc:b1:29:c2:
                    73:0e:51:2f:41:af:10:b4:b9:98:c4:c5:97:8c:da:
                    22:c0:da:2b:f6:fa:dc:71:96:4e:3b:17:34:cd:3c:
                    80:6d:81:d6:bc:48:0e:c2:eb:de:82:b6:c2:34:c5:
                    2e:28:48:65:a6:37:44:c6:26:a7:e3:54:02:13:6c:
                    e0:59:91:ce:43:f5:fb:f7:7d:d0:2e:b9:0b:9c:24:
                    46:e2:4b:c9:9d:a5:69:21:c0:fd:3f:79:67:f5:f1:
                    f7:45:7b:ea:1d:1a:94:7c:c2:0b:0b:26:20:b4:1e:
                    d8:58:4b:2f:ec:d8:40:6a:8e:d3:10:51:20:b1:2d:
                    10:83:d9:8d:a8:1f:a9:ec:ac:a3:29:97:26:29:3d:
                    d9:b9:56:b7:d0:c9:5b:1b:03:61:d5:db:26:73:78:
                    36:49:75:9a:79:46:7a:c0:b6:3a:5d:a3:62:48:fb:
                    94:49:ac:11:f1:c8:f5:e2:81:ed:4c:4f:01:7b:b2:
                    4b:9e:9b:d9:3b:50:4b:8a:2b:04:01:9d:ea:9a:93:
                    a6:03:9e:74:e9:49:7f:d2:8e:3a:3e:f4:f1:ed:35:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:36:89:0E:79:AC:93:D0:C6:EF:92:90:CA:5F:93:85:AB:03:31
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:77:3d:f6:97:ee:3f:24:6c:13:27:db:91:9f:eb:a1:d0:
         16:8f:f5:50:5c:db:71:45:a7:89:a0:e6:6d:69:08:9a:7d:c8:
         6f:87:84:4b:58:d8:52:64:62:56:f8:bd:e8:3f:24:c3:27:28:
         7f:89:ae:51:eb:ee:48:83:09:be:51:37:a2:c6:b2:a1:40:88:
         2b:38:15:2e:e4:8d:8e:87:e6:36:9b:fa:70:45:b8:1c:20:ac:
         03:2e:71:65:3b:c1:97:53:31:81:8c:13:ca:c8:d7:11:5d:bf:
         bc:ee:14:80:4d:19:86:8b:ad:be:7d:0a:79:90:f9:41:47:f7:
         b2:bc:b9:ac:1f:5a:02:c1:6d:7c:f5:34:77:a5:f6:b7:de:a5:
         63:7e:56:00:0b:c2:cd:8f:90:4e:39:7c:0c:49:0e:14:99:f5:
         e6:9b:f6:b9:5c:4a:52:c1:29:e3:56:a9:a2:03:f5:45:89:5d:
         01:6c:4a:db:14:70:e1:bc:37:9a:49:52:34:db:a7:09:88:b4:
         83:01:bf:5e:be:f5:a1:73:c2:3c:7f:f3:ec:f1:07:ca:b7:cd:
         8e:c7:64:cd:16:74:f8:a8:53:29:8d:1d:15:2f:0e:c0:10:3c:
         03:83:8d:a0:4b:2f:6e:e2:53:e6:6b:fe:21:84:fd:8e:8c:b4:
         48:02:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:51 2026 by rpki-client