This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
File:                     EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft (raw, json)
Hash identifier:          8XQztWoEi6YNBqz5x7JrpporiMheWdXOaWF6RK9YT94=
Subject key identifier:   9C:F6:34:34:69:8F:9E:7D:C1:C3:09:52:89:C5:A3:85:85:10:A7:24
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Certificate issuer:       /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial:       019BF42B9FE422BD82720632EB236434D7A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
Manifest number:          0B46
Signing time:             Sun 25 Jan 2026 08:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 08:00:58 +0000
Files and hashes:         1: C_swQ1amU9xoTLneSqK5rEPwSHY.roa (hash: kd5UBDyTUyD8YdrwighS1kP5DDkufkXNg0jZY2oswQA=)
                          2: EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl (hash: 3v/cQCwC4JVHXDnE+4BBSmflkTokiymE5B2NCB5UMWo=)
                          3: FrHMIqU1nyql5fH458yK8iNimJU.roa (hash: HPL1MkQufVuqDT5rCNUypCZgqKjP0W6MbJyxk8JQnmg=)
                          4: winuxMCIMGCWTsiZdugMqwv5WZg.roa (hash: TKNpHnOSd+fkBMQkgcz+gS3AAX2dTYjFIei9VWwZPxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:9f:e4:22:bd:82:72:06:32:eb:23:64:34:d7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
        Validity
            Not Before: Jan 25 08:00:58 2026 GMT
            Not After : Jan 26 08:00:58 2026 GMT
        Subject: CN=9cf63434698f9e7dc1c3095289c5a3858510a724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:2c:08:c3:b8:3b:e6:33:e3:73:26:60:09:
                    8c:6b:54:c0:66:a6:ce:31:e9:ce:bf:79:8c:63:92:
                    7d:43:39:72:39:b5:31:bb:fe:bc:26:6d:a0:7d:ea:
                    f9:a2:88:a3:c7:bc:79:5b:39:b2:ee:e0:15:2d:92:
                    d0:83:05:d1:e5:cc:af:63:47:04:15:76:62:fe:12:
                    5a:fe:b7:ea:46:3b:cc:1a:4c:03:36:d1:21:ea:4e:
                    96:57:eb:b9:7a:e8:07:51:6b:07:80:72:ec:b7:03:
                    61:dd:d9:72:49:4b:66:94:a6:16:66:0d:db:a2:20:
                    11:eb:11:98:da:88:1d:e6:d2:c9:90:cd:7e:6a:8d:
                    04:e1:5e:7f:86:43:e2:fa:a5:5a:01:48:a1:da:f5:
                    2f:a8:9e:28:72:d8:58:2a:1c:ac:54:a4:6a:41:9a:
                    a0:17:7d:70:84:96:9c:81:ba:26:f7:c9:7a:0a:73:
                    ea:07:2d:d5:85:28:06:36:f6:7a:d4:c5:db:ab:d0:
                    77:b3:45:4b:39:3b:86:39:a9:62:6f:e6:43:a1:74:
                    6b:ca:81:a9:30:72:4d:88:e6:cb:0d:fa:a6:f7:88:
                    e2:24:37:b6:55:35:0c:0d:93:2d:f6:d5:fd:d9:f3:
                    8c:27:09:6f:b1:05:7a:5a:e4:4c:72:dc:3b:c1:c8:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F6:34:34:69:8F:9E:7D:C1:C3:09:52:89:C5:A3:85:85:10:A7:24
            X509v3 Authority Key Identifier:
                keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:f6:37:7e:e5:c8:b3:c7:dd:f2:73:43:dc:a3:5b:50:2c:21:
         51:1b:1b:2f:73:1b:15:9b:26:ff:97:2e:20:8e:fe:4b:92:5d:
         60:26:15:97:15:fb:d4:15:b6:93:23:c7:83:de:56:3a:a2:b7:
         d2:a9:05:e9:7b:7d:2f:ab:d7:84:b1:6b:6e:ac:9c:2d:b9:ab:
         af:c4:c9:f7:6f:21:4a:ba:4a:ee:2b:4d:a7:ee:85:36:7b:bf:
         df:bd:69:a5:80:50:06:24:ab:f4:0c:08:15:c6:62:f7:d2:44:
         c3:0e:dd:5f:aa:c1:9c:b2:71:d9:2d:97:86:f0:d7:cb:00:1a:
         f5:a2:ef:ad:30:24:c8:b1:d2:82:ed:11:22:6c:20:80:ad:ee:
         55:09:91:c6:b8:c6:93:e6:57:00:59:09:16:df:17:d6:c1:7c:
         01:ec:bb:8e:a8:1b:82:99:c1:9f:07:40:7e:77:c6:67:7e:8b:
         d9:e3:a5:da:14:f2:ec:ac:a8:53:44:aa:e9:cc:b6:e8:d3:8e:
         85:81:94:28:7f:71:05:6e:26:98:08:50:9a:1d:87:1f:7a:9a:
         a6:5a:56:4b:11:a8:39:8c:db:b7:53:23:fd:f1:5a:77:bb:1b:
         e6:41:cc:02:2e:94:9a:ae:a0:23:d4:ca:85:58:f0:c9:d0:c2:
         d9:6b:a4:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0K5/kIr2CcgYy6yNkNNepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTUxMjk3NmI5MWEyOTY3ZWJjZTEwZWQ0MDUyZWNlMTJi
MTQxNTUwHhcNMjYwMTI1MDgwMDU4WhcNMjYwMTI2MDgwMDU4WjAzMTEwLwYDVQQD
Eyg5Y2Y2MzQzNDY5OGY5ZTdkYzFjMzA5NTI4OWM1YTM4NTg1MTBhNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB0sCMO4O+Yz43MmYAmMa1TAZqbO
MenOv3mMY5J9QzlyObUxu/68Jm2gfer5ooijx7x5Wzmy7uAVLZLQgwXR5cyvY0cE
FXZi/hJa/rfqRjvMGkwDNtEh6k6WV+u5eugHUWsHgHLstwNh3dlySUtmlKYWZg3b
oiAR6xGY2ogd5tLJkM1+ao0E4V5/hkPi+qVaAUih2vUvqJ4octhYKhysVKRqQZqg
F31whJacgbom98l6CnPqBy3VhSgGNvZ61MXbq9B3s0VLOTuGOalib+ZDoXRryoGp
MHJNiObLDfqm94jiJDe2VTUMDZMt9tX92fOMJwlvsQV6WuRMctw7wchRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz2NDRpj559wcMJUonFo4WFEKckMB8GA1UdIwQY
MBaAFBHlEpdrkaKWfrzhDtQFLs4SsUFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xN2EzYzAtZTk3YS00MzA2LWJjZTQt
N2ZmMzJiNmZmZDFlLzEvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xN2EzYzAtZTk3YS00MzA2LWJjZTQtN2ZmMzJiNmZmZDFl
LzEvRWVVU2wydVJvcFotdk9FTzFBVXV6aEt4UVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4vY3fuXI
s8fd8nND3KNbUCwhURsbL3MbFZsm/5cuII7+S5JdYCYVlxX71BW2kyPHg95WOqK3
0qkF6Xt9L6vXhLFrbqycLbmrr8TJ928hSrpK7itNp+6FNnu/371ppYBQBiSr9AwI
FcZi99JEww7dX6rBnLJx2S2XhvDXywAa9aLvrTAkyLHSgu0RImwggK3uVQmRxrjG
k+ZXAFkJFt8X1sF8Aey7jqgbgpnBnwdAfnfGZ36L2eOl2hTy7KyoU0Sq6cy26NOO
hYGUKH9xBW4mmAhQmh2HH3qaplpWSxGoOYzbt1Mj/fFad7sb5kHMAi6Umq6gI9TK
hVjwydDC2WukuQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:13 2026 by rpki-client