This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          e8t29bNBIAhv/DkkkLUSG5DpgiYBuiXaWpFuInxdQ7k=
Subject key identifier:   12:1F:7D:54:8B:BC:95:F1:16:FC:BF:E4:11:78:49:B9:87:72:68:3A
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       019BF619B6B47E3DA34BE6A686E06E30A8C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          0F7B
Signing time:             Sun 25 Jan 2026 17:00:38 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:38 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:38 +0000
Files and hashes:         1: Cd254sJdJwuu6H9I9E0srrpdoBA.roa (hash: pL8Cyr7W2nS2mcEsGc+8rfoSe9scnFA9gs7/69wjtfU=)
                          2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: HCDehF1p76XYXy3L79DPeQYIDlF0B0Sf8zrcTqHhtXo=)
                          3: NKEvDzhxDBmLfFoED7YoUdXjLow.roa (hash: 29vPP7S5TvS0wSCUMz6/EH7GaUe47diCIdiBQvatduI=)
                          4: d0PfZiDQAfUb8dfx15UglgBUuoc.roa (hash: HZDXDvgZeDrPookCn9v4kcGEbz0yWS2FqsD6q/CriPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:b6:b4:7e:3d:a3:4b:e6:a6:86:e0:6e:30:a8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Jan 25 17:00:38 2026 GMT
            Not After : Jan 26 17:00:38 2026 GMT
        Subject: CN=121f7d548bbc95f116fcbfe4117849b98772683a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:63:a4:ec:d8:f8:25:bd:fd:aa:5c:8e:27:
                    1d:8a:cc:5e:f5:f9:77:18:13:68:57:80:5e:9c:ee:
                    5f:8f:2e:ae:8d:13:f7:a3:c2:e8:dc:fd:47:f0:a4:
                    90:3f:ad:72:36:06:4f:87:6e:8e:f2:2f:c9:4d:b1:
                    c0:f0:89:3b:12:41:7a:ab:f6:a1:ea:32:ee:16:8c:
                    77:dd:45:58:f8:6a:65:54:d8:30:70:ed:3f:3a:f9:
                    17:ce:25:3c:66:e1:4b:81:fa:90:c9:58:12:ab:13:
                    1a:8c:6c:82:4a:8b:f8:67:4c:ff:42:dd:76:98:5e:
                    21:0e:41:69:ef:ab:67:94:b9:1b:8b:3f:ab:08:8d:
                    87:0e:45:73:f8:e0:35:01:94:09:05:a1:a5:af:de:
                    f4:42:a5:69:bb:19:1d:fd:d1:e2:f9:04:7e:78:77:
                    4b:2a:50:55:09:b5:a0:05:41:42:d2:50:fc:5a:0b:
                    31:a8:5c:0c:f5:f1:26:ad:b4:f1:50:ed:b3:4c:82:
                    ac:78:a5:7d:cc:86:8b:ed:41:1e:84:84:4d:b0:92:
                    e1:cb:01:9a:44:2c:fd:51:f7:23:e0:aa:7b:f5:55:
                    1b:49:52:94:32:6c:67:04:04:7a:6c:cb:73:f0:e7:
                    76:62:f1:eb:fd:52:4d:e7:f3:c1:2e:5f:47:5a:18:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1F:7D:54:8B:BC:95:F1:16:FC:BF:E4:11:78:49:B9:87:72:68:3A
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:10:7d:8a:66:ba:66:89:01:0d:75:4a:16:5d:0c:61:9d:95:
         10:5b:4e:8f:2e:a9:2e:f5:cc:7f:e5:21:db:30:c3:83:53:39:
         76:80:5e:cf:22:da:a9:83:e6:17:8d:db:6c:77:06:8f:d1:b1:
         6b:e0:f8:93:22:2f:6e:ec:75:02:4c:80:9a:e7:be:bb:46:88:
         83:25:ef:f2:c9:d2:9c:c3:bd:8e:d4:0d:13:05:ab:16:ba:6e:
         9f:18:0d:f3:22:11:49:85:a6:69:7c:a3:c3:bf:91:0f:86:80:
         b6:74:7b:ab:10:3f:ca:ac:45:0d:31:72:8f:69:01:61:d1:f3:
         68:03:20:87:17:38:13:a9:fa:bb:2f:11:4f:57:c9:91:e7:f5:
         25:e8:dd:cd:5a:ac:9a:3d:d4:fc:a2:95:73:77:94:99:cc:d3:
         b1:2e:d0:bb:e8:60:06:a8:af:ac:0f:6e:e8:3a:80:5b:d6:b7:
         d8:ba:75:bb:67:ba:78:ec:a1:cc:9c:1a:d2:b3:60:af:04:72:
         41:77:ca:64:71:5c:82:d3:b3:99:90:65:4f:52:b1:fc:0e:56:
         8a:02:bc:9d:67:24:e0:0a:a2:61:31:33:c9:35:5f:0e:10:2c:
         e7:ed:29:b3:9e:dc:4a:cd:9c:40:43:f4:0b:c9:5b:d0:d9:d5:
         14:b8:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:20 2026 by rpki-client