This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File:                     ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier:          mwfW6zsk+SwHojL0JgyE1jgZN2zkE3vueKfwJQWVRls=
Subject key identifier:   BC:EE:8B:6C:F4:9E:2E:75:1A:E7:C0:2D:95:DC:89:2F:31:45:40:8B
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer:       /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial:       019BF5E3C4ED47B64B23FEFE1F0D35D28205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number:          0281
Signing time:             Sun 25 Jan 2026 16:01:43 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:43 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:43 +0000
Files and hashes:         1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: AzCnqJdG/eTc8k58eW/JkcpYhNdcclD5nF9vHZHw7+4=)
                          2: StENb4oXUe_gqEhZ_cRSGTbf9h0.roa (hash: jpZ/aosQxaXXNjBqwfCSJNayGEKyZap7VBjnyDJ/cIU=)
                          3: ustsKef3_kQrz_t0nmHTw0MaqT0.roa (hash: QAz/jM+TUevEvBm3ClnKE5FN9ZTcnHmV+8tjFLI7axU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:c4:ed:47:b6:4b:23:fe:fe:1f:0d:35:d2:82:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
        Validity
            Not Before: Jan 25 16:01:43 2026 GMT
            Not After : Jan 26 16:01:43 2026 GMT
        Subject: CN=bcee8b6cf49e2e751ae7c02d95dc892f3145408b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:59:c7:f5:97:f3:c6:db:71:76:1c:fd:fe:
                    d6:fe:d2:8f:fc:d8:be:c0:72:41:1e:a6:22:7f:f3:
                    24:7e:88:3a:80:a2:e5:17:46:4c:b0:43:f3:91:22:
                    21:46:35:a8:e0:a4:b8:a7:fc:a7:14:19:9c:1a:21:
                    87:7e:d6:ae:09:e4:26:b0:60:77:92:20:53:27:df:
                    e6:ef:82:af:e6:c0:04:1a:8a:a6:33:07:5d:2a:d6:
                    85:6a:9d:0f:33:34:f4:1a:6f:c4:e0:a3:cb:8e:3d:
                    68:eb:95:1b:e2:6d:e2:03:2e:b1:6e:75:a8:bd:c4:
                    18:92:7d:f5:e8:6d:b0:26:a6:7a:90:1e:a9:c1:51:
                    4b:7f:00:13:33:ee:d8:d1:6b:8c:27:6c:da:e5:fc:
                    14:da:3b:e1:4c:bd:ee:7f:11:67:fa:8f:72:5f:42:
                    83:a9:da:af:fa:33:19:0c:d3:a5:be:d5:b5:15:b3:
                    86:a2:2e:55:b2:af:84:e9:69:73:60:06:a6:08:25:
                    8e:15:9e:4d:5f:d1:5f:26:7b:d8:ac:d2:b9:3c:44:
                    6d:76:02:fa:2a:d2:d2:af:09:60:cd:dc:c9:2a:eb:
                    ef:03:43:18:b3:24:d2:1b:b4:d0:2b:1a:bd:f1:6e:
                    68:87:89:ea:2c:eb:cf:be:5c:04:92:18:0e:f8:c1:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EE:8B:6C:F4:9E:2E:75:1A:E7:C0:2D:95:DC:89:2F:31:45:40:8B
            X509v3 Authority Key Identifier:
                keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:19:60:2a:09:93:98:38:1a:02:dd:96:9f:f3:bf:5b:27:
         a8:8d:10:3a:27:44:5f:2a:1f:b1:59:34:36:bb:7d:03:e7:3e:
         72:00:39:bd:33:ae:2c:a8:4f:dc:64:7e:73:50:68:91:83:38:
         e1:aa:0a:ac:d7:af:e8:30:62:f6:e0:c7:46:dd:32:34:6a:cd:
         69:aa:81:67:7b:69:48:5d:2c:f2:85:9c:f6:10:c0:6b:7b:fc:
         8d:18:de:5f:55:aa:0f:31:f4:ab:ca:62:b5:9a:1d:42:59:cf:
         d0:07:25:c7:ca:74:61:d3:d1:54:08:15:5c:1a:a6:81:76:f4:
         72:5e:34:68:55:ac:9f:50:a4:23:9f:64:62:a7:1d:bb:bf:9e:
         f6:c5:63:cd:d6:1e:2a:d4:42:ce:a7:84:37:15:15:61:4d:bd:
         2e:20:d4:4e:62:88:7c:a9:b8:94:a1:59:aa:4a:64:9d:a4:6f:
         44:9a:79:04:16:46:54:00:9d:66:56:8a:63:85:4b:a8:d7:4f:
         8c:e5:b8:9a:35:32:25:89:12:dd:0c:83:bf:05:2a:13:34:64:
         b1:26:a3:2f:59:db:26:9f:73:eb:98:5b:47:ae:b9:60:c8:79:
         2e:02:80:f1:e2:a6:d1:ea:5b:e9:47:84:88:42:43:2f:a2:9a:
         92:11:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:20 2026 by rpki-client