This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
File:                     EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json)
Hash identifier:          FarM9zrg26xKQ5scnhLrq46EyFkg/aRpV+kmCs/1EMo=
Subject key identifier:   E3:C9:4A:75:26:53:69:24:0D:24:47:C6:C8:4A:F5:96:F4:E3:C0:72
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Certificate issuer:       /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial:       019BF6BE82EF21DC80B1F705D10DC4F02DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
Manifest number:          07A5
Signing time:             Sun 25 Jan 2026 20:00:38 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:38 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:38 +0000
Files and hashes:         1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: WCJ5rK15q8ysLTktvMDt/MaoWMF/H56chHrrZw8HIAM=)
                          2: RAfVG18yCt4jh5FG1I0sWJIfckM.roa (hash: Wp606GEzY+EhNjoXu6RVUaxY49i31QSSjn97TR3qURg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:82:ef:21:dc:80:b1:f7:05:d1:0d:c4:f0:2d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
        Validity
            Not Before: Jan 25 20:00:38 2026 GMT
            Not After : Jan 26 20:00:38 2026 GMT
        Subject: CN=e3c94a75265369240d2447c6c84af596f4e3c072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:a4:e8:91:a5:6a:81:36:b3:e5:66:90:d1:
                    37:96:a8:a4:a9:f5:f5:e0:53:09:aa:c4:fd:12:a0:
                    f8:94:49:13:d6:ba:8b:84:75:39:7c:11:c8:76:94:
                    df:85:fc:08:3b:26:6e:4d:69:de:fc:0b:e5:f6:fe:
                    1a:66:bf:1c:db:d6:48:e1:61:49:a9:ad:c0:02:77:
                    03:f0:28:da:01:6e:0b:07:2c:42:06:e5:3d:aa:86:
                    5d:96:f7:f2:5d:60:9a:13:89:77:0d:59:37:2a:15:
                    ca:e6:a6:50:9d:fc:88:db:31:d8:91:40:3d:92:86:
                    8e:a2:2c:c8:41:02:15:ba:74:7c:29:0f:52:7b:48:
                    8a:69:54:14:77:f3:30:92:a1:e2:9a:fd:e8:ca:e5:
                    cb:72:a8:f8:4c:09:c1:78:1b:79:c3:a7:e7:2c:ea:
                    35:7a:6c:f7:25:7c:b4:c9:8b:bf:2d:a2:ee:63:df:
                    31:c1:1a:14:a0:31:05:03:a7:7b:11:5b:37:f4:39:
                    aa:4d:ae:50:88:7c:cb:59:f3:07:3c:98:03:3b:60:
                    20:11:f2:db:67:be:b8:c2:e4:9b:94:a4:86:82:f8:
                    4a:46:e0:f5:08:3b:56:0f:45:7a:cc:b5:1c:43:b0:
                    e0:cc:36:5a:de:1f:42:8f:c3:45:ca:83:1c:f0:eb:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C9:4A:75:26:53:69:24:0D:24:47:C6:C8:4A:F5:96:F4:E3:C0:72
            X509v3 Authority Key Identifier:
                keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:40:85:d9:b1:e3:62:e5:f2:4e:5c:68:21:9f:4d:69:4c:1c:
         ef:52:df:9b:b3:e2:b2:53:5d:a4:08:62:1b:4a:25:f3:9d:27:
         33:ec:f2:21:71:0f:ad:fc:22:77:9d:b6:1a:c8:f1:9e:b7:9e:
         ba:8b:39:c3:7e:06:51:9c:af:97:ce:67:5c:ac:b5:fc:23:31:
         93:16:a2:cc:5b:fe:7d:f5:a5:cf:d8:87:94:b0:4a:6f:16:ca:
         a6:32:ab:60:45:19:8e:1a:56:79:be:c9:a8:d6:ef:eb:ae:54:
         e5:cc:0d:16:5a:ab:43:ce:fb:46:c2:59:09:fb:2b:03:6b:f4:
         ec:c2:5f:b6:df:e3:7c:43:e2:00:1e:b6:30:09:e5:9d:36:1f:
         75:3a:77:43:04:59:be:0b:5f:91:a0:b7:ee:ec:b7:3d:ed:e8:
         bf:d5:56:43:4b:75:73:68:72:04:a8:56:6a:8b:cd:90:49:0e:
         fb:83:00:28:ff:dd:d9:c2:b6:2e:d9:af:1c:37:45:87:32:58:
         a2:99:30:58:6f:71:72:fb:64:4a:2e:bb:cb:66:f7:a7:11:2d:
         ae:f7:76:7d:1f:98:bb:a9:7c:66:c7:3e:34:8f:46:b0:8d:99:
         6d:90:ed:8c:6c:56:24:7a:1a:35:7f:c4:ef:8f:11:6d:24:af:
         00:45:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:14 2026 by rpki-client