This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File:                     EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier:          jdcqTAubDkfnTS0veEffCZ/OvART3muogw3VEzGDkvA=
Subject key identifier:   25:8C:62:45:27:40:85:78:57:CC:6B:1F:8B:A9:BF:90:56:19:CD:9F
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer:       /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial:       019BF3867C75CB7289AF08F31C303D57C9AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number:          10E6
Signing time:             Sun 25 Jan 2026 05:00:35 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:35 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:35 +0000
Files and hashes:         1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: vdGUBAEnoBK0yWODSrXs2J0bGhK9jpdUQBLPfLLZDls=)
                          2: WF-zTcv0SSwFqssAuBLS2p_bL9I.roa (hash: l4mNR1FXgT0HOl3cKSL3WOvdMxH31IZ3vfxu50tZ0OU=)
                          3: avu8Q3Omr--tF4tpRu9jq83ydCc.roa (hash: QpRUqaU18HNyF42VH945x7YyAx6ix+RRAhRlCjxO5Gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:7c:75:cb:72:89:af:08:f3:1c:30:3d:57:c9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
        Validity
            Not Before: Jan 25 05:00:35 2026 GMT
            Not After : Jan 26 05:00:35 2026 GMT
        Subject: CN=258c62452740857857cc6b1f8ba9bf905619cd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:25:20:48:53:e5:5e:46:af:88:85:6b:39:
                    02:69:bf:c8:45:63:b3:df:12:4e:b1:32:3e:39:ad:
                    61:8d:89:ff:31:39:3c:bf:a2:5e:0c:3d:8c:9c:53:
                    91:de:39:5f:66:ca:6e:a0:80:e1:82:e4:4f:38:50:
                    57:0a:bd:32:47:2f:ff:67:8a:8b:37:c4:09:04:35:
                    7c:ae:32:ad:9a:37:eb:a2:1a:45:65:ea:e8:c2:ad:
                    c1:ba:f2:10:ef:e1:1e:c2:b9:7c:d8:97:f8:30:51:
                    2a:f3:b3:5a:03:db:d0:9a:f1:82:19:84:d8:1b:0b:
                    30:2e:e7:79:47:f1:72:87:a3:70:64:99:2a:ee:74:
                    dc:c9:d0:2c:02:c4:c7:14:9c:81:3e:40:cf:ca:89:
                    6d:88:0e:c1:69:09:03:25:2f:26:3e:c4:b9:f6:d2:
                    6b:96:d0:37:a3:1e:9f:61:f7:78:a4:a4:fc:57:c2:
                    26:26:92:1b:c6:f8:50:67:1f:30:85:6e:9c:29:ca:
                    f6:d4:e9:db:64:f6:75:70:1c:9b:dd:91:8b:d3:40:
                    4d:f1:f5:95:78:7e:9a:50:0a:60:1c:62:fd:a6:79:
                    a0:91:6f:47:1d:dc:1c:f6:c2:6e:28:48:e0:dd:2e:
                    57:68:18:5d:d0:e8:28:e1:f9:dc:d3:3c:4d:2f:f8:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8C:62:45:27:40:85:78:57:CC:6B:1F:8B:A9:BF:90:56:19:CD:9F
            X509v3 Authority Key Identifier:
                keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:06:83:15:1c:84:bc:87:dc:c6:3b:b5:20:61:f9:56:0e:0d:
         39:5f:50:1f:93:2f:7f:b6:72:7a:6e:94:07:a8:da:c9:00:e9:
         46:19:21:c5:1b:bf:0f:bd:e0:e6:db:05:b3:52:6f:21:a6:2b:
         e4:7c:30:c9:98:f5:50:82:95:0d:46:09:8e:c6:2b:df:56:73:
         0c:36:15:55:c6:54:e3:c8:3a:d5:94:79:6d:ad:de:52:0c:67:
         69:5e:17:cb:d0:aa:75:48:5e:ef:07:c4:ee:dd:b5:ed:89:cf:
         16:15:f9:58:e6:cd:ae:9f:13:b3:a0:93:77:85:8f:58:6a:df:
         ee:1c:7c:5f:8f:aa:f5:6a:2e:ca:a3:d8:4d:14:e8:ce:cd:1d:
         ab:ff:d1:fa:f7:93:ca:45:f9:29:3c:7e:c9:d9:27:77:17:af:
         a7:e6:3d:ed:68:be:ff:8b:35:5d:09:54:a6:99:ae:7d:e0:76:
         d0:ad:e9:9e:ae:25:16:11:a1:6e:0c:74:a5:f4:6e:f4:e7:93:
         77:ad:bb:77:86:f4:30:21:f4:8d:39:1f:6a:9b:4f:7a:83:28:
         b0:8a:a4:25:2b:eb:0e:43:4f:e7:52:82:d5:56:2e:4b:4c:e5:
         52:63:74:a2:d2:a6:8e:f1:24:12:7f:e3:80:79:b8:37:f6:7b:
         f7:53:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:05 2026 by rpki-client