This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
File:                     eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft (raw, json)
Hash identifier:          9k5tzr8ST4Et/a+EIuR0M/mw6UZY7RsuJW0K6ftj5s8=
Subject key identifier:   07:6B:09:35:56:2D:1C:EA:25:E8:E3:D2:18:F9:72:EB:D0:FC:E6:8C
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Certificate issuer:       /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial:       019BF61A0BC7DAFFFD98DA3574AC72825986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
Manifest number:          01DC
Signing time:             Sun 25 Jan 2026 17:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:00 +0000
Files and hashes:         1: TQNI8cQSDUVw34W6ZTwGYZVMqXk.roa (hash: Awh5KrfX+HKhRUgeqGTHvrRVEc6ZCfXov7wUkGa6uMc=)
                          2: eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl (hash: SmCdlBIQfe95WK0Htsq21pYwDBBydjsQBWZVzwH8Xl8=)
                          3: vcYfbPfGVs0aMYKOlxwdnUc65Uc.roa (hash: YMNkeJBfcEDciUVO4DqSW7poLvVvmF0rwrSlq2tpwWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:0b:c7:da:ff:fd:98:da:35:74:ac:72:82:59:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
        Validity
            Not Before: Jan 25 17:01:00 2026 GMT
            Not After : Jan 26 17:01:00 2026 GMT
        Subject: CN=076b0935562d1cea25e8e3d218f972ebd0fce68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:a6:30:32:98:3a:8c:1b:76:0d:a3:47:d1:
                    07:35:91:ce:b3:2b:f8:a1:6f:04:59:41:c9:90:90:
                    c7:d7:0a:2b:9d:86:a5:e9:79:24:d1:37:68:34:c5:
                    bd:54:60:12:fa:b8:8c:01:c3:3a:ea:e2:31:ad:44:
                    22:5c:ab:58:16:cc:89:7e:a4:ca:d7:96:82:af:8f:
                    5b:b0:61:f3:33:f0:3d:b9:70:97:ce:4b:b9:69:7b:
                    65:d4:c8:97:11:c2:e8:97:04:99:ec:92:a5:0e:83:
                    c6:9b:97:76:75:ca:54:48:58:2f:4c:4b:c7:e8:18:
                    eb:6b:9c:d8:42:8d:72:35:99:da:b7:25:59:75:85:
                    01:9a:89:7d:dd:80:54:5c:51:11:23:ef:ab:26:18:
                    54:35:89:70:ad:55:b3:dd:87:af:9c:76:bf:15:4d:
                    25:5e:f9:d6:bd:ff:5b:2b:26:fa:da:54:5d:17:32:
                    56:3d:a1:e8:af:96:48:6e:55:5d:5d:a9:cb:05:bf:
                    e0:6d:ca:5f:cc:27:64:58:b3:98:3e:9d:0a:ad:66:
                    2a:f4:b2:df:15:5d:ee:cb:c0:ab:81:26:21:2a:4b:
                    e2:45:3d:f5:d6:bf:a3:4a:9d:6b:ec:a9:60:7d:07:
                    ec:f6:d2:d7:bf:94:d6:8a:27:10:78:be:c7:9c:c7:
                    4a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:09:35:56:2D:1C:EA:25:E8:E3:D2:18:F9:72:EB:D0:FC:E6:8C
            X509v3 Authority Key Identifier:
                keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:39:a2:80:36:43:27:83:14:b9:ba:f1:af:e4:52:75:43:5c:
         24:21:2a:4a:09:eb:c6:66:94:7b:89:fb:9a:1b:1d:b4:94:3f:
         c0:43:97:e5:8f:ed:bf:c7:7f:a7:9f:16:99:53:d0:0b:b8:3b:
         a0:42:d9:76:88:9f:2d:9c:53:d1:e4:33:0c:81:40:9c:7c:e1:
         3f:bb:cb:b0:71:b1:ad:80:af:b6:c3:6e:a2:4c:d3:7e:bd:76:
         8c:82:3e:40:ae:79:6c:35:86:2a:ad:69:d5:05:f8:ed:8f:9b:
         ff:77:58:34:b9:9a:74:6c:0f:88:5d:e5:38:88:29:5e:00:75:
         16:8b:ea:81:d3:83:0d:12:4a:b8:55:47:28:7a:b8:fe:7d:67:
         96:7c:6e:b0:8c:a0:8a:76:13:b6:8a:6f:58:f5:8d:85:61:92:
         da:c7:e4:0d:8f:f0:4e:de:10:43:6e:44:6d:98:d1:38:89:61:
         b8:a0:b0:86:ee:32:d8:30:09:c3:0a:c2:4e:a5:1e:34:53:60:
         3a:a8:17:2a:9e:7a:11:b9:d0:26:e0:a4:39:43:ff:8c:73:71:
         51:24:d5:72:f0:4e:1b:3e:a3:42:0a:21:65:31:f4:2a:e2:4e:
         e0:0e:a7:27:3e:04:23:72:d8:5c:fd:05:73:8c:91:8a:d3:65:
         24:48:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:52 2026 by rpki-client