This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          IKx7m3R5zAuDvSygPWqkCWcvY1p8hXa7hgBKCHjpm/I=
Subject key identifier:   8C:14:45:60:1A:C2:3B:43:A2:DC:5A:4D:C6:97:F1:C7:A1:33:9E:DE
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       019BF3BD9FC1C1495792602D5A693CD38591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 06:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:49 +0000
Files and hashes:         1: C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa (hash: B34d2p77+B66jN6Am9ioz0IrGKVKuaBXb571jLLG784=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: UHjQsGomyTdmRe1lXBw3dTXEZVWqqIvESi8ri1+O9tQ=)
                          3: IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa (hash: b2TJ8DWoax+zX+jq6uzbhSSPpoR4UPspESjwpSfojeU=)
                          4: VyGXcLXLR7aE-sDxtLP4io6t1tc.roa (hash: gURrYwXKEDvB9SMdTVcuAN6Si8eouAWukW6eTK+MJTo=)
                          5: plhSuqqJa0jwOYQK5HTONg70a4M.roa (hash: cKDU2K6sGfkO/N88v+vmRc1FSMIHeKN+UvIPHCWpjco=)
                          6: yL1p9BGlippA5i5iVucMVBM9S4Q.roa (hash: oRvpMIJ5EsAuSoZty3HeQ0Lgu38Q+0FUJoGBlWaTjec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:9f:c1:c1:49:57:92:60:2d:5a:69:3c:d3:85:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Jan 25 06:00:49 2026 GMT
            Not After : Jan 26 06:00:49 2026 GMT
        Subject: CN=8c1445601ac23b43a2dc5a4dc697f1c7a1339ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:4d:ab:8d:d6:2f:01:d1:94:27:3c:e2:70:
                    1f:0e:df:08:10:8a:8d:68:97:09:26:85:af:d4:9d:
                    20:83:a6:2c:1b:1e:c9:46:1e:80:93:6a:48:ad:cf:
                    d9:4b:84:e6:6d:09:7b:36:de:cd:a5:24:c3:be:3d:
                    7c:4c:ce:9d:d0:6a:71:e2:21:ba:e5:fd:62:8d:f3:
                    73:d9:80:60:dd:c4:56:ee:96:4c:0c:bd:3c:71:ec:
                    a3:72:91:0e:8d:53:1a:36:e1:c0:d2:f0:a0:79:b3:
                    1e:8b:25:7a:7f:42:1c:9c:87:5c:34:34:d9:2b:ae:
                    86:f0:31:6c:a6:1f:c3:ea:75:43:89:51:a2:96:d8:
                    dd:2c:26:eb:13:81:6e:e4:ae:c2:2a:b0:d3:f6:3a:
                    78:41:d8:47:2d:7b:2b:5e:75:37:b3:72:26:8f:99:
                    f1:3f:cf:00:b6:f0:17:e5:22:51:80:dc:5a:38:3f:
                    4f:c0:d6:8d:e3:5a:e0:43:99:bb:7a:43:f2:d4:b8:
                    a3:84:de:0e:bc:d4:c6:97:dd:1c:00:15:3a:0c:ec:
                    55:0b:9e:38:7e:c1:f7:14:7e:60:99:c3:61:fd:65:
                    01:c0:92:c4:0f:97:a7:a4:42:25:49:18:9b:56:b3:
                    f1:7d:ef:55:fc:87:12:aa:9b:91:d8:e7:ae:56:e3:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:14:45:60:1A:C2:3B:43:A2:DC:5A:4D:C6:97:F1:C7:A1:33:9E:DE
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:1a:c9:db:0f:ab:e5:ca:23:26:b6:a6:69:6f:30:18:35:
         e2:42:d4:73:d0:bd:88:d9:eb:29:ad:f6:63:fa:12:ac:92:e2:
         a9:b8:48:fe:cd:23:60:9b:61:ed:c8:b1:54:2b:2e:2f:05:8f:
         b2:ba:53:42:2d:b2:c0:92:ad:80:b7:d1:29:06:bc:6d:90:cd:
         ba:93:e6:03:f1:0f:10:e2:8e:eb:08:4c:80:3c:d4:18:aa:f7:
         c9:2c:dc:b8:30:7d:fa:e5:f5:fd:57:1c:98:08:d4:ab:a5:69:
         e2:4f:ff:06:b0:c5:e6:13:03:f1:d6:24:7e:40:25:ea:73:80:
         45:7b:0f:55:a5:e1:7a:2b:46:de:85:71:fc:fb:e4:c4:6e:36:
         f2:05:14:ef:c7:af:f5:66:b9:b2:dc:c5:79:01:da:ca:16:a6:
         a1:1c:b7:19:bb:a7:7a:54:c7:4c:aa:43:68:5b:fc:dc:73:7d:
         29:bb:e9:bf:04:42:bb:a9:ed:62:b4:18:3e:e0:d8:f7:a2:6f:
         b5:31:b7:d0:36:cb:fd:3d:15:7e:c4:af:f3:f0:c5:4a:7b:64:
         e5:33:50:31:43:c4:de:e7:6c:23:be:1e:69:f7:4a:c6:da:a6:
         bd:b3:5f:ce:4e:87:e4:f3:00:c2:f5:1f:06:c2:ef:c2:92:fe:
         ad:f7:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:58 2026 by rpki-client