This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          1E+Us0DC9rPaPXwMsY2m9sB05NQiuNQrh2qsIMkK6wU=
Subject key identifier:   61:B7:AA:54:AE:47:6D:8E:F6:BD:ED:F5:D5:39:C3:E1:EB:FB:B5:3D
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019BF23D3AE904BDE87E1B40DB51778B010D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          18C3
Signing time:             Sat 24 Jan 2026 23:00:57 +0000
Manifest this update:     Sat 24 Jan 2026 23:00:57 +0000
Manifest next update:     Sun 25 Jan 2026 23:00:57 +0000
Files and hashes:         1: 65mxCqITRTZ10GZib6XMp4_VmhI.roa (hash: V6/OKIP4GXYKzfU5o44/EOXsxOMr3OLdYHlmvY2Mw6E=)
                          2: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: eT3ePuWr3Pt03JKpQlL1uDJZp+QLSrnkfJPhemrUBsM=)
                          3: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          4: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          5: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          6: YuD6mYeegaW9d29Ci66BL3l4jWw.roa (hash: cYyPCH7nR9uMcm/IXKU1fKBDvQZmREUlYnB22XhXA1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:3d:3a:e9:04:bd:e8:7e:1b:40:db:51:77:8b:01:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Jan 24 23:00:57 2026 GMT
            Not After : Jan 25 23:00:57 2026 GMT
        Subject: CN=61b7aa54ae476d8ef6bdedf5d539c3e1ebfbb53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:ad:b3:8a:d2:c8:73:a8:fe:1a:08:b3:40:
                    59:17:a7:e6:0c:17:85:5a:6a:e9:9e:db:ae:87:7f:
                    77:c3:36:48:09:d9:ff:75:8a:d2:df:12:d2:c2:73:
                    01:b3:e9:9b:45:df:b7:84:3a:b0:35:c3:16:4b:c5:
                    cc:e3:16:6d:a1:40:01:52:65:35:95:27:db:43:e7:
                    50:db:ba:b4:da:26:b1:87:eb:6f:02:2b:47:16:fd:
                    70:60:18:d1:d8:b7:dc:c4:e2:a3:88:75:75:d6:98:
                    90:62:d1:68:59:a5:19:c3:73:6e:c4:62:86:da:f6:
                    31:02:91:d3:50:b2:7b:0c:65:8b:05:c3:fe:42:fc:
                    56:22:3a:7c:c9:5d:fc:87:13:7e:1b:38:6d:e0:0c:
                    2c:34:87:41:55:65:5b:d1:a6:f5:4d:1a:0c:c5:6c:
                    21:d8:81:40:55:63:20:6e:6e:0f:7a:44:20:a1:1f:
                    52:43:16:75:26:d6:a8:6c:87:3c:12:00:ff:c1:7e:
                    e1:1b:2a:ec:f6:0b:7e:ab:4d:79:a0:be:2b:3e:ea:
                    10:28:cd:88:31:5f:85:a8:88:64:77:57:04:46:ac:
                    26:20:2a:0b:52:49:75:c0:f6:fb:a4:67:21:78:4e:
                    80:02:2c:cc:56:38:f2:ca:db:fe:c8:23:2b:34:92:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B7:AA:54:AE:47:6D:8E:F6:BD:ED:F5:D5:39:C3:E1:EB:FB:B5:3D
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ae:62:cc:67:e8:8f:72:64:6b:8f:94:06:4b:f0:69:be:68:
         df:d0:79:0b:ce:fa:9e:43:60:c2:09:4d:8a:d3:a1:dd:86:cb:
         42:eb:d8:6e:82:1e:25:f3:78:99:f4:67:8e:6b:25:12:5a:4b:
         35:af:ec:5d:29:f9:a5:31:4b:f7:4b:52:6e:4d:42:28:c1:ba:
         87:14:59:a8:39:7d:96:c7:89:df:6e:f0:24:d8:fc:9b:1b:1b:
         42:94:54:a1:41:06:0b:b5:d7:ed:c6:fe:55:f6:c2:8e:fa:6c:
         de:a8:a9:44:86:13:34:58:af:a8:70:ea:22:6f:91:7f:95:8a:
         95:10:a8:b7:33:a3:24:c7:9d:fb:4e:75:a8:5c:9e:71:f4:7c:
         bf:49:3f:0f:1b:a1:89:b3:11:cc:45:7d:f4:8d:ab:9a:2b:6d:
         4e:29:e5:16:1c:67:5e:fc:71:fa:a0:49:cd:c8:45:8e:3b:38:
         09:19:90:ea:fc:93:fe:91:93:61:e8:36:c9:ea:f9:11:99:2f:
         b3:f5:17:df:d2:ac:26:b4:23:48:65:85:18:da:a4:a5:66:88:
         b4:da:dd:91:e2:3c:bb:b6:7c:26:a4:32:30:e8:28:dd:90:86:
         20:fa:1d:84:ac:8b:43:10:05:bc:0b:7d:98:ba:01:f5:ed:74:
         10:4e:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:22 2026 by rpki-client