This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
File:                     Ee_b1yf7W9U87GlXoptHwsNKg0w.mft (raw, json)
Hash identifier:          pRlVYsZpXVqglFLFD++gDDemt+VEb0tvi0Lq3f4A0pQ=
Subject key identifier:   96:FD:C6:36:1D:25:43:C7:38:53:9D:C2:DB:AB:7D:B0:62:01:E9:F4
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Certificate issuer:       /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial:       019BF575369C422127915F80F10F5122B5E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 14:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:58 +0000
Files and hashes:         1: Ee_b1yf7W9U87GlXoptHwsNKg0w.crl (hash: 3FiI5lP2IRce851Kmqfoi0jyqfK5k7kkCOsGzDSyTVo=)
                          2: QQeKybyvUtPZq8rtSA1qJFplh-8.roa (hash: Q+OBW6DZJdlZ5hkFmp4+rBZr4bNQDjXlXvwILFLY5Hw=)
                          3: fUcJvuI5M0eo5b7UJPq8sGJaGH8.roa (hash: pvDkmaTgQN4sNGe38GsqD+fJLQuvpfb1vbqdHC2CF7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:36:9c:42:21:27:91:5f:80:f1:0f:51:22:b5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
        Validity
            Not Before: Jan 25 14:00:58 2026 GMT
            Not After : Jan 26 14:00:58 2026 GMT
        Subject: CN=96fdc6361d2543c738539dc2dbab7db06201e9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:56:cc:a6:a7:b4:70:95:d8:5b:6e:e5:ae:
                    ec:f9:bf:cd:62:4e:e6:fe:b9:f7:96:08:af:09:db:
                    36:e1:af:de:6e:ed:a6:8c:bb:2d:36:c2:91:dd:fd:
                    b9:7f:7a:2c:92:7d:b8:f7:e6:53:a0:c5:99:ff:9f:
                    31:04:bb:26:56:ea:59:d4:02:72:a9:1f:de:5e:f0:
                    be:d3:a5:c6:4d:b4:d4:0e:0d:6b:32:76:c7:36:de:
                    44:c2:c4:f4:4e:76:83:13:d0:a2:b3:fb:36:d5:3d:
                    be:6c:a8:65:d5:df:6a:ce:e3:82:ec:05:3b:78:79:
                    89:81:44:a2:ef:71:91:91:9c:5d:43:82:b0:9f:6a:
                    8c:1f:53:70:dd:b7:10:ac:99:73:e2:09:df:70:91:
                    0e:35:80:33:ff:b1:c4:86:93:35:a0:38:e2:61:e4:
                    bc:db:f1:46:d7:7e:ec:46:83:2c:ab:3d:58:65:88:
                    08:60:42:89:d6:ea:8e:cc:65:a9:89:b7:f1:4a:c7:
                    1c:f4:7c:38:68:fd:55:8b:2f:30:83:05:87:b1:f3:
                    9c:67:df:5d:c2:9a:81:19:21:03:91:a3:f3:b7:ba:
                    0a:51:ed:ff:ce:1e:4a:05:ab:03:27:86:05:8b:50:
                    bd:e8:72:95:2a:bf:81:02:c0:ef:9a:9e:05:fe:46:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FD:C6:36:1D:25:43:C7:38:53:9D:C2:DB:AB:7D:B0:62:01:E9:F4
            X509v3 Authority Key Identifier:
                keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:f3:3b:52:f2:1f:a8:e1:91:28:ac:26:dd:0c:f4:7d:85:
         cb:b1:c9:97:5a:4d:0b:be:ef:5c:2e:b5:f6:bd:40:c1:36:85:
         ca:99:18:0c:76:90:2c:d1:59:87:29:2a:cb:dd:f2:6c:9c:d3:
         af:e4:a3:4c:34:55:99:f5:0d:53:18:c3:e9:9f:88:6b:20:0a:
         7d:9c:09:72:bf:91:b2:0b:9e:63:4d:72:06:22:0c:1f:7b:6d:
         59:ab:0c:53:dc:bc:ab:9e:63:5f:cd:83:8f:4d:c9:9c:f9:e7:
         38:fc:f3:52:27:ef:66:ad:3f:fc:ff:8e:96:46:14:37:53:6c:
         d1:63:0b:10:a9:a1:98:84:b8:0a:ca:23:54:d4:e8:47:8a:29:
         36:5e:6b:32:fe:83:75:61:c6:cf:a5:9c:03:a6:fd:fa:1a:24:
         9a:8b:09:b2:15:7b:ac:ce:71:c6:1a:b7:52:40:da:c0:90:1f:
         a4:c6:7d:51:60:0b:1d:6f:78:e0:61:a5:67:86:05:08:2c:d7:
         4b:62:75:a3:f1:0e:5d:6c:c6:c8:41:c4:40:e9:ab:16:54:a1:
         e3:99:5a:8c:59:b0:06:55:34:44:69:d5:88:6f:2a:e7:ea:4e:
         51:8e:46:95:52:04:20:b0:5f:00:72:90:1a:eb:61:e4:40:bd:
         2d:cf:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:25 2026 by rpki-client