This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File:                     E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier:          Xw9s4wNlW2RDXDXAw00tyLTTuzlB2gkaAqYiRdNk5Xo=
Subject key identifier:   46:24:1E:AB:9E:46:9B:08:87:B7:EB:81:1B:3D:7E:36:3A:EC:22:E6
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer:       /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial:       019BF4D0A32A0F79ACEC12728A7E585103F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number:          0A76
Signing time:             Sun 25 Jan 2026 11:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:12 +0000
Files and hashes:         1: 1i3ycNEeYj-VatnlrPGPrqjOEzQ.roa (hash: yiGwpv8DfLlrX47th/7VqfHpghlHCSjl1pUN8vlfcTg=)
                          2: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: 7Cv+tdTl9HA8vQjeRv1xHP5bZtpvqrdHqMo7x6WFzGA=)
                          3: RZPlUQ-_Cc0IRWMLHv1pcJJqcY4.roa (hash: fLckeaqRp6EH0MIb6WqLGIVdk4naPv7XqR6uKgb5zT8=)
                          4: dCC6snPiHlYjC1vabuiYF6tPKGg.roa (hash: tNg6JKDmFjnhc25HWSYTUlB99R9oi7iEOMfOHvuuaoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:a3:2a:0f:79:ac:ec:12:72:8a:7e:58:51:03:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
        Validity
            Not Before: Jan 25 11:01:12 2026 GMT
            Not After : Jan 26 11:01:12 2026 GMT
        Subject: CN=46241eab9e469b0887b7eb811b3d7e363aec22e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:44:1b:a0:0d:a4:cf:d6:6c:d4:d6:f9:bf:
                    c8:7f:ba:34:44:5d:e9:ea:f6:dd:ff:b0:2c:ab:24:
                    ea:c4:87:1f:f8:d3:0a:2d:a3:f1:37:9e:6e:1a:47:
                    dd:23:28:cd:5a:ce:03:3a:39:60:d5:a7:aa:a7:05:
                    f6:0b:1c:19:d2:ab:78:e4:d1:b6:f6:c9:c0:9b:f1:
                    45:69:91:10:e7:82:b2:e0:34:f7:64:56:47:dd:ce:
                    14:72:e3:08:60:22:88:8b:3c:17:87:73:db:65:e4:
                    d4:1c:e6:f6:93:39:c0:08:9e:36:5c:e9:98:6f:92:
                    34:e4:75:7b:ad:b8:68:eb:c1:39:ac:35:f1:02:0c:
                    c4:b2:d1:20:d8:3d:c6:5c:f2:2e:0a:76:13:74:92:
                    7d:6b:96:65:c2:8b:af:10:c5:7a:ba:41:08:5b:16:
                    45:d2:05:b5:04:23:71:47:80:15:94:73:f0:76:b1:
                    77:db:d0:5d:ff:c8:e4:f6:5d:22:21:39:06:22:7b:
                    76:af:f5:a3:a8:bd:80:e4:9a:e3:ea:51:b0:7f:23:
                    dc:b0:dd:f9:93:03:c2:e4:00:e0:52:f9:ab:86:11:
                    71:fc:e8:18:ec:d2:5a:a0:e6:98:03:b3:4b:41:dd:
                    1c:69:42:8d:50:ff:e4:a9:44:1b:4f:eb:e8:50:5d:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:24:1E:AB:9E:46:9B:08:87:B7:EB:81:1B:3D:7E:36:3A:EC:22:E6
            X509v3 Authority Key Identifier:
                keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1b:10:d2:c5:8d:e2:d8:a0:3a:4d:c1:46:6f:9f:d5:f3:30:
         f2:76:a5:a6:cc:02:9b:bc:4f:30:a9:b2:88:1a:3e:ca:33:11:
         a6:c9:b6:77:a5:1c:0d:5b:78:88:71:f7:84:ff:13:27:ce:e2:
         dd:ed:61:eb:73:15:92:f9:44:c6:87:40:f3:e2:f8:86:f0:55:
         dc:37:4f:d9:9d:59:a7:11:cb:83:22:f0:24:52:d6:49:6f:c8:
         89:14:ba:97:61:39:0e:6b:34:ac:f8:34:5c:f5:e6:cd:7b:a5:
         86:95:9e:20:25:f4:07:6b:93:ed:cc:ac:d1:f0:6f:cd:0d:ba:
         cb:7c:94:ee:6a:89:59:c6:fa:5c:df:d7:14:74:2b:1c:5a:93:
         09:fe:34:dd:70:22:ac:d6:17:29:7e:fb:87:5d:49:3a:1b:f0:
         16:06:da:21:17:f2:26:36:d4:d8:cb:a6:03:83:5c:ff:ae:f6:
         57:8c:1e:36:d0:8c:97:c6:31:3d:68:e0:19:c8:8c:41:cf:27:
         71:52:55:05:45:2d:65:d3:4a:40:bf:2e:c6:81:60:0b:ef:ef:
         3b:c1:da:f1:c6:89:7c:bc:e4:95:4b:24:83:88:90:17:3c:b0:
         e0:7f:0b:ce:2a:42:49:c6:bb:a8:d2:bc:b1:10:29:f1:1c:f6:
         1e:ac:9b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00KMqD3ms7BJyin5YUQP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2
MThkZDIwHhcNMjYwMTI1MTEwMTEyWhcNMjYwMTI2MTEwMTEyWjAzMTEwLwYDVQQD
Eyg0NjI0MWVhYjllNDY5YjA4ODdiN2ViODExYjNkN2UzNjNhZWMyMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttJEG6ANpM/WbNTW+b/If7o0RF3p
6vbd/7AsqyTqxIcf+NMKLaPxN55uGkfdIyjNWs4DOjlg1aeqpwX2CxwZ0qt45NG2
9snAm/FFaZEQ54Ky4DT3ZFZH3c4UcuMIYCKIizwXh3PbZeTUHOb2kznACJ42XOmY
b5I05HV7rbho68E5rDXxAgzEstEg2D3GXPIuCnYTdJJ9a5ZlwouvEMV6ukEIWxZF
0gW1BCNxR4AVlHPwdrF329Bd/8jk9l0iITkGInt2r/WjqL2A5Jrj6lGwfyPcsN35
kwPC5ADgUvmrhhFx/OgY7NJaoOaYA7NLQd0caUKNUP/kqUQbT+voUF3CiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYkHqueRpsIh7frgRs9fjY67CLmMB8GA1UdIwQY
MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt
ZGQxZWM1N2Q3ZTc0LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0
LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBsQ0sWN
4tigOk3BRm+f1fMw8nalpswCm7xPMKmyiBo+yjMRpsm2d6UcDVt4iHH3hP8TJ87i
3e1h63MVkvlExodA8+L4hvBV3DdP2Z1ZpxHLgyLwJFLWSW/IiRS6l2E5Dms0rPg0
XPXmzXulhpWeICX0B2uT7cys0fBvzQ26y3yU7mqJWcb6XN/XFHQrHFqTCf403XAi
rNYXKX77h11JOhvwFgbaIRfyJjbU2MumA4Nc/672V4weNtCMl8YxPWjgGciMQc8n
cVJVBUUtZdNKQL8uxoFgC+/vO8Ha8caJfLzklUskg4iQFzyw4H8LzipCSca7qNK8
sRAp8Rz2HqybMg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:15:14 2026 by rpki-client