This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          BzBIQq2nVbtaMiJdmQ7cCC8fpdvwR6+saJtSMyWwGFw=
Subject key identifier:   E4:E8:54:57:7D:34:02:83:CB:68:74:48:0F:4A:E1:8C:7F:FE:F5:16
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       019BF4D070894609936D66894602B57186BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          0A08
Signing time:             Sun 25 Jan 2026 11:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:59 +0000
Files and hashes:         1: FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa (hash: qrm8Hvv6ZY4XD/rO0TyVVz8/PmIjDcXusRWAzudBFPw=)
                          2: Q-_VAhr_3KM6k7h05hr8GonF39M.roa (hash: sBlSBxemwWOVZDZUFiQlhe/vEkuAulILbiLVu6l2Y+s=)
                          3: _gMstHGZPe_7SzCes23Xk4_prxs.roa (hash: UfaVFa/Va8RG4LCVknZ/sC6sc8zENIigGZfQiIzmNA4=)
                          4: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: MFu+osIUwsrZ28OiSPC7igJecM80MZiq71My3AgY7Nw=)
                          5: swQMeQBE5wb78ss3tCTd5K3tnlI.roa (hash: uIGxjGabnvBWdl9aXtwznXWVFMHKBrwT9BZDyH0VO8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:70:89:46:09:93:6d:66:89:46:02:b5:71:86:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Jan 25 11:00:59 2026 GMT
            Not After : Jan 26 11:00:59 2026 GMT
        Subject: CN=e4e854577d340283cb6874480f4ae18c7ffef516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:09:e5:91:42:45:36:6e:57:57:35:e5:df:
                    07:fe:89:d5:d2:b0:da:e9:24:d7:86:8e:7a:ee:d9:
                    7d:05:aa:b0:2b:d9:45:cb:ea:61:4e:bc:bf:19:26:
                    1b:4d:d4:d1:88:9e:47:6a:c2:20:af:40:6a:dc:28:
                    e1:c5:66:14:6e:fa:86:85:13:d1:b9:f3:84:85:47:
                    28:3e:b0:d8:eb:c3:44:27:69:fc:6a:01:e6:13:60:
                    5b:30:ca:0d:89:ef:77:00:47:8d:2c:37:68:43:5d:
                    82:30:78:60:1f:08:b4:d9:d5:6b:4f:f8:75:70:00:
                    d3:fe:c5:77:20:aa:b3:6c:0d:83:82:3e:d0:b2:7d:
                    d3:b5:bc:aa:c5:b3:fa:ad:ef:49:5c:09:40:44:3f:
                    a4:a7:71:e9:63:aa:45:62:45:fe:43:68:6c:6e:12:
                    88:ba:a8:71:d3:08:3d:f1:c1:fa:91:e3:b1:73:73:
                    85:dc:4c:b5:d3:94:b0:9c:cc:4c:76:ae:f9:92:b2:
                    b1:1b:16:db:52:96:64:3c:e7:b4:f1:a4:03:90:c8:
                    d5:9e:29:37:16:de:8a:5a:1e:43:0e:bb:b3:df:61:
                    3e:d8:94:ec:29:3e:d5:31:48:96:73:72:f3:42:de:
                    28:7c:ca:00:68:9b:28:0a:bf:1c:44:94:8e:46:04:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E8:54:57:7D:34:02:83:CB:68:74:48:0F:4A:E1:8C:7F:FE:F5:16
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:23:32:18:26:59:ce:d4:0a:ff:c9:6a:af:8c:31:43:bb:26:
         ff:ca:b4:0f:61:d7:3a:d4:eb:3e:8f:7b:6d:8e:a8:50:8a:9d:
         53:22:e6:7c:f4:af:5a:b9:1f:cf:11:6a:2e:23:08:ed:ab:e7:
         7d:fe:c1:68:53:d1:e4:85:38:22:66:b2:3e:ad:39:a8:42:ca:
         b0:05:e9:ac:33:70:db:23:3d:11:19:2c:6b:26:07:7e:08:5c:
         b3:4a:53:0e:ca:c3:db:4b:95:e8:d6:d3:83:5f:7a:e6:00:6c:
         53:7d:19:e9:42:42:0c:f9:39:77:4e:d8:c1:ce:d8:7b:7e:6a:
         f9:4f:82:5b:e9:13:48:39:1a:e6:74:5d:68:20:ee:4b:5e:60:
         87:8c:fe:12:7f:a2:8d:08:5e:a7:76:cc:38:6b:a9:b5:ac:2a:
         ac:75:c6:b3:e6:c4:a3:b6:a4:37:83:38:1f:f2:b7:a7:96:3c:
         1b:1d:a2:0f:a6:13:e7:8a:5e:4c:75:10:c7:fc:d6:ab:d1:21:
         2b:de:c6:3d:dc:7f:c7:f1:c7:6e:e3:f3:f3:ff:56:04:71:f7:
         9d:fd:b3:fe:45:42:ac:76:dd:27:a8:f4:14:d4:3a:06:b9:32:
         ad:31:97:3c:63:b8:87:43:45:cb:1b:c6:07:10:ea:66:01:dd:
         a2:d2:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:35:27 2026 by rpki-client