This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File:                     epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier:          pHkO/nLCdu0nR2HqSEs+9ki+Z8Mci7kuXiJQbuyMCDc=
Subject key identifier:   2D:44:96:70:88:16:3B:6E:17:C9:80:81:1A:CB:C8:79:44:A3:9D:BF
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       019BF3F4C92F3F825D78C19AB039515278C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number:          145F
Signing time:             Sun 25 Jan 2026 07:01:04 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:04 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:04 +0000
Files and hashes:         1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
                          2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: K0iz4cEuqu8zBO8EDVK+kqLAkojeSSpBPXfXtsHmUno=)
                          3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:c9:2f:3f:82:5d:78:c1:9a:b0:39:51:52:78:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Jan 25 07:01:04 2026 GMT
            Not After : Jan 26 07:01:04 2026 GMT
        Subject: CN=2d44967088163b6e17c980811acbc87944a39dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:9e:43:30:d0:23:5c:55:f3:5c:db:16:87:
                    e3:3a:b6:ba:41:a5:8b:de:c5:69:55:06:a4:15:57:
                    2a:58:93:6d:da:e3:0c:5e:e5:85:eb:2f:f0:60:c9:
                    68:be:0e:b1:c9:59:2b:80:7e:62:69:86:c7:ed:02:
                    ce:9e:2d:09:93:b2:ae:d7:86:1a:45:df:86:48:c9:
                    b8:1c:f9:48:0b:ea:e1:79:ce:cb:1f:fe:46:3a:2e:
                    f3:f8:2c:bd:47:87:87:f4:23:a1:3c:37:a1:f1:47:
                    1c:32:1d:91:5f:4b:dd:92:28:db:40:9d:17:61:36:
                    81:0a:77:31:e0:6e:4e:0c:65:4f:7a:ea:c6:1b:93:
                    0c:bb:a1:8f:5f:2f:7c:15:54:44:c4:79:4f:c1:48:
                    ab:01:3a:84:1a:db:fa:c3:e1:05:43:37:c8:1e:76:
                    6f:85:33:99:69:8e:ca:a2:1a:28:0e:07:e4:36:0f:
                    f3:94:11:f2:a1:17:46:1a:06:45:73:f3:15:91:6b:
                    cd:27:b0:55:40:39:d0:45:67:8b:a5:16:eb:b2:f5:
                    33:c2:da:c3:89:32:42:74:44:fd:d5:bf:02:04:f7:
                    cc:30:93:eb:4b:22:f0:ca:c6:57:dd:b1:1d:0e:12:
                    b5:ad:f8:6e:a4:cc:44:d0:ea:e3:92:b1:68:e0:ec:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:44:96:70:88:16:3B:6E:17:C9:80:81:1A:CB:C8:79:44:A3:9D:BF
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6e:e4:4b:81:f0:1f:14:a3:86:d4:6d:30:e1:43:97:f2:bc:
         f5:63:ee:c5:0c:52:ae:6a:b3:75:b5:4b:3a:97:c2:3a:ac:8a:
         48:bc:9d:5b:2c:51:bd:05:26:29:1a:6d:f0:82:6b:ef:e3:13:
         d0:14:c9:a4:33:95:16:dc:f9:9e:f5:cc:7d:69:66:12:0a:72:
         ed:3c:bc:1e:1b:af:76:c5:23:53:5f:76:0d:e2:89:9a:1b:20:
         41:45:f2:2c:aa:28:a7:79:5e:e1:e1:59:a3:6d:2c:5f:a1:22:
         b9:cd:a5:e9:29:8d:81:6c:f1:6d:ee:d1:be:e8:97:ac:b7:39:
         da:43:32:34:4a:dc:d2:1e:b3:c5:d1:5c:1b:93:e6:7b:d3:70:
         19:58:49:b9:9a:1f:33:4e:dd:4a:20:28:c3:1d:65:25:24:3c:
         24:d3:ec:45:58:65:67:12:b6:d2:77:9e:7e:86:a1:02:56:96:
         52:56:78:a5:79:f5:c2:1c:8b:db:56:25:86:6f:ba:47:14:a6:
         86:32:5d:cc:a9:67:8e:04:aa:08:b5:63:e7:41:6d:6e:ef:d9:
         57:df:f7:1d:76:2b:ed:af:25:85:db:c9:ab:81:4c:44:68:03:
         e2:80:a4:e4:e5:05:ac:33:28:e8:f9:91:27:ab:38:25:90:65:
         76:e5:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:34 2026 by rpki-client