This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File:                     EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier:          VxECYN+2XDNrYjVbraKsqOmxoIOGsZsboZMIBPdZAy4=
Subject key identifier:   92:C1:2B:FC:BF:4B:56:AC:D3:31:C6:63:80:16:AA:E0:5C:A4:5B:3D
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer:       /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial:       019BF4D064E7770505DBDF1F64374A9EFC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 11:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:56 +0000
Files and hashes:         1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: sOWsy5RHjseXD6N6tAP9WYuOZksefFCzHM2L6SxwjW0=)
                          2: cLW-rzfQIYF9Ip7K5f5c4fVxT_0.roa (hash: kTIIud4RXHLbaB+fDQvEDDvRSMMhyUI+tRML2r+ctcI=)
                          3: efptImD_TpkXZ0HvFXCba5sHj3E.roa (hash: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:64:e7:77:05:05:db:df:1f:64:37:4a:9e:fc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
        Validity
            Not Before: Jan 25 11:00:56 2026 GMT
            Not After : Jan 26 11:00:56 2026 GMT
        Subject: CN=92c12bfcbf4b56acd331c6638016aae05ca45b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:10:df:88:fe:a1:58:66:ab:13:13:fb:a3:
                    47:ce:54:1f:b2:d8:d5:68:db:17:69:58:7c:bb:93:
                    63:cd:fb:2a:87:b2:03:d8:d0:2c:04:f5:f7:d5:a4:
                    a0:3b:32:0e:a4:65:f5:c0:7d:73:fe:f8:0a:f2:da:
                    19:7f:23:44:12:68:c0:81:21:03:ba:9d:8c:68:bc:
                    54:2c:4f:87:71:40:65:ba:ba:0c:15:f2:ce:e7:aa:
                    72:63:ea:9c:6f:ee:eb:93:7a:05:32:b8:66:68:e7:
                    d4:e1:aa:ee:40:a9:9e:4c:de:fb:77:55:a1:0e:89:
                    78:58:56:9e:03:f5:f7:28:41:cb:c9:9a:2f:a0:fd:
                    2b:d5:3d:10:da:7d:31:3f:db:c2:22:68:23:87:45:
                    f6:36:fe:8d:e3:b6:61:3c:b6:8f:f0:52:63:31:80:
                    eb:62:27:16:85:8e:a2:c4:1a:9b:b2:1a:e6:01:e5:
                    65:f6:07:7c:db:33:35:d0:68:34:b4:23:6f:4d:9e:
                    e1:69:c0:a6:a1:fa:67:b4:a5:c6:12:41:ba:e6:77:
                    cb:01:0b:bd:5b:be:5e:d3:a9:01:02:2c:7d:d0:ca:
                    e2:ac:ce:ac:2f:39:88:d9:47:c2:64:e3:a1:a2:90:
                    6c:52:8c:7e:37:06:3f:d4:33:0e:b5:44:43:a5:de:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C1:2B:FC:BF:4B:56:AC:D3:31:C6:63:80:16:AA:E0:5C:A4:5B:3D
            X509v3 Authority Key Identifier:
                keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:a2:10:86:42:02:df:60:80:2f:c2:0b:82:62:29:67:09:
         02:1c:a3:ed:a5:99:d4:e8:ed:22:59:be:d1:f5:c6:21:be:78:
         58:4d:cf:76:d9:ab:cd:44:9b:41:64:31:73:b9:b7:06:9f:a0:
         40:91:a8:ca:b5:04:63:be:ff:71:ba:53:67:9d:94:0c:28:09:
         f9:c8:42:70:dd:02:30:ec:af:bd:18:d9:e5:07:53:2e:72:dd:
         fb:b6:66:bc:c6:2d:bd:42:4e:22:2d:15:fa:dc:4f:86:da:44:
         9c:6a:11:2d:52:20:38:34:9a:cf:65:16:fc:e1:cc:14:81:44:
         99:df:c2:dc:08:39:3a:cf:28:f8:89:4d:38:fa:d9:d6:c4:17:
         aa:a7:12:e1:59:73:e7:d9:4c:3a:c6:c6:4b:8a:f9:26:b1:58:
         a3:1b:48:71:c5:1b:5e:4a:55:93:30:dc:a8:79:be:d1:da:54:
         40:b6:78:8f:ed:66:a2:d7:8e:c4:e3:f0:87:48:1a:4d:fa:38:
         15:d0:a7:24:c6:e7:5a:78:f5:7e:12:e9:df:f6:c9:c5:ce:72:
         c3:37:79:32:05:ba:3e:4d:6e:f6:a4:49:5e:80:cc:16:8d:5f:
         ca:9e:e0:15:bd:d1:61:76:d2:ac:4e:4d:31:90:ce:96:95:c0:
         e1:b1:8c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00GTndwUF298fZDdKnvwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5
NjhkMGQwHhcNMjYwMTI1MTEwMDU2WhcNMjYwMTI2MTEwMDU2WjAzMTEwLwYDVQQD
Eyg5MmMxMmJmY2JmNGI1NmFjZDMzMWM2NjM4MDE2YWFlMDVjYTQ1YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw68Q34j+oVhmqxMT+6NHzlQfstjV
aNsXaVh8u5Njzfsqh7ID2NAsBPX31aSgOzIOpGX1wH1z/vgK8toZfyNEEmjAgSED
up2MaLxULE+HcUBluroMFfLO56pyY+qcb+7rk3oFMrhmaOfU4aruQKmeTN77d1Wh
Dol4WFaeA/X3KEHLyZovoP0r1T0Q2n0xP9vCImgjh0X2Nv6N47ZhPLaP8FJjMYDr
YicWhY6ixBqbshrmAeVl9gd82zM10Gg0tCNvTZ7hacCmofpntKXGEkG65nfLAQu9
W75e06kBAix90MrirM6sLzmI2UfCZOOhopBsUox+NwY/1DMOtURDpd7ZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLBK/y/S1as0zHGY4AWquBcpFs9MB8GA1UdIwQY
MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt
MWE2NGNmMjFhNjA0LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0
LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtCiEIZC
At9ggC/CC4JiKWcJAhyj7aWZ1OjtIlm+0fXGIb54WE3PdtmrzUSbQWQxc7m3Bp+g
QJGoyrUEY77/cbpTZ52UDCgJ+chCcN0CMOyvvRjZ5QdTLnLd+7ZmvMYtvUJOIi0V
+txPhtpEnGoRLVIgODSaz2UW/OHMFIFEmd/C3Ag5Os8o+IlNOPrZ1sQXqqcS4Vlz
59lMOsbGS4r5JrFYoxtIccUbXkpVkzDcqHm+0dpUQLZ4j+1moteOxOPwh0gaTfo4
FdCnJMbnWnj1fhLp3/bJxc5ywzd5MgW6Pk1u9qRJXoDMFo1fyp7gFb3RYXbSrE5N
MZDOlpXA4bGMdw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:08 2026 by rpki-client