This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          ARd5KRK6dCEAIqf8s6RWav6LYP3srgAmXKqVtE/38i8=
Subject key identifier:   33:1A:49:FA:DC:FB:1C:96:38:D4:A2:B1:07:89:23:2D:BD:45:E9:CC
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       019BF462B319259EA85A2200D04D23D0C175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0C92
Signing time:             Sun 25 Jan 2026 09:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:07 +0000
Files and hashes:         1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: DibCOJWpBRezmFRSb89i6vT0WX4lmOtBucoq91KIwKY=)
                          2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:b3:19:25:9e:a8:5a:22:00:d0:4d:23:d0:c1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Jan 25 09:01:07 2026 GMT
            Not After : Jan 26 09:01:07 2026 GMT
        Subject: CN=331a49fadcfb1c9638d4a2b10789232dbd45e9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:ff:22:e2:15:c8:f9:2e:03:32:b4:37:a6:
                    77:54:ac:de:e4:0e:b8:73:97:bb:21:71:ef:20:7d:
                    ab:a4:26:09:b0:78:67:55:72:5a:a7:30:d0:76:93:
                    41:01:8a:b8:fd:a8:68:2c:43:b0:d5:76:bc:7e:3c:
                    29:11:45:7b:38:f1:d8:4d:e2:45:54:8f:7a:65:6f:
                    e0:9c:54:56:bc:28:ab:9a:23:7e:ab:05:d6:84:c2:
                    31:e2:fb:88:87:3e:14:3f:7c:4e:b1:a5:56:0c:82:
                    bd:a3:47:af:ab:06:c1:76:a2:87:b4:08:41:8c:ec:
                    a2:5c:0f:92:90:f4:ab:6d:e9:7c:32:50:5b:a4:8b:
                    7e:35:47:94:99:48:73:32:bf:bb:ef:4c:1e:ca:4d:
                    a8:4b:17:33:7a:25:aa:4f:ea:d6:b9:c4:15:7d:7f:
                    57:63:44:78:f6:7c:42:6b:aa:bb:ab:14:a5:b8:a6:
                    ed:3d:8a:9d:ad:8d:ef:ae:58:29:60:e2:df:52:20:
                    81:18:d8:45:b8:35:31:d9:68:b9:95:bf:76:a8:a3:
                    ac:95:73:88:c2:bd:37:20:ec:29:61:6f:18:1a:ed:
                    b6:c4:df:73:03:d2:6d:5d:67:5f:08:fa:a3:f7:f1:
                    31:2f:8c:51:92:ae:b4:cf:69:9d:3e:21:81:86:75:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1A:49:FA:DC:FB:1C:96:38:D4:A2:B1:07:89:23:2D:BD:45:E9:CC
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:2e:ae:4b:80:d4:c1:53:92:7b:0a:46:d1:3f:22:5e:0f:
         6e:91:df:53:06:3c:66:05:6c:f9:e5:28:95:43:92:af:7c:da:
         9e:9a:8b:5d:e6:6b:27:aa:3d:4d:9a:4e:f1:73:c1:77:5d:cd:
         2a:d8:f6:61:c3:fd:9d:64:8f:52:b6:e2:32:73:00:70:17:20:
         c6:1d:50:5b:80:14:63:cb:03:b0:24:7b:32:35:4e:98:a4:bb:
         7a:03:1f:03:5a:09:c5:9d:d4:3b:f8:d3:86:81:f7:8f:23:a2:
         bf:94:57:e1:ee:02:cb:26:7f:9f:a1:f5:42:c9:65:9f:87:3d:
         f8:a8:bc:69:7e:8b:00:97:83:d6:61:85:43:88:39:23:c8:44:
         6c:cf:1f:17:ab:f5:54:b0:ac:22:51:b9:f5:10:7c:65:a9:8f:
         ab:1a:44:15:d4:24:a8:55:e3:23:1b:bd:7b:0b:ec:95:0a:4f:
         a3:a7:0e:0e:48:48:09:f7:3c:c6:99:2d:81:14:4b:9e:a6:35:
         d5:69:f2:41:00:42:58:04:39:4a:40:41:2a:bf:c3:0f:c3:47:
         47:f6:c6:d1:31:b8:a6:83:2d:e8:b1:00:2d:1d:47:19:93:c6:
         84:99:1b:de:89:92:40:45:ac:4d:7b:30:56:47:9a:bb:ef:09:
         75:26:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:15:06 2026 by rpki-client