This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          ebc8a1/fftmcXbHoqVGdG8GU8Gh+H+CT7hEqXSZyjN8=
Subject key identifier:   07:20:EE:92:3D:F0:13:30:74:B2:56:31:A4:2C:70:D0:19:1B:0F:F7
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       019BF875FD042B2A3BE471BB8631EBACC119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0B6D
Signing time:             Mon 26 Jan 2026 04:00:40 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:40 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:40 +0000
Files and hashes:         1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: ypWXdyilxb0CCxWIfoDN/kMYmEmYBaCFPjKKoVNwcbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:75:fd:04:2b:2a:3b:e4:71:bb:86:31:eb:ac:c1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Jan 26 04:00:40 2026 GMT
            Not After : Jan 27 04:00:40 2026 GMT
        Subject: CN=0720ee923df0133074b25631a42c70d0191b0ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:dd:fa:ff:e9:52:c3:9f:50:31:2d:67:51:
                    48:d2:ef:b0:c0:f1:1f:b2:4b:76:47:0d:f9:41:05:
                    6a:fb:53:c4:b9:86:3a:91:05:33:73:45:c7:d6:ba:
                    1a:7d:2e:6b:e5:a8:fb:a8:d7:79:f9:29:31:07:b4:
                    a9:23:44:b1:86:83:38:7d:66:49:cc:bb:1a:e5:a6:
                    de:6b:0e:ec:d9:43:1a:9b:f8:a9:fe:48:bf:df:87:
                    8b:23:0d:e5:20:cc:14:1c:38:af:2c:47:46:d0:92:
                    65:ea:02:78:b7:ec:fa:a0:ba:29:32:af:7d:79:11:
                    b0:d1:d8:3d:aa:a9:fc:34:f7:06:ad:54:c8:b9:cb:
                    c7:88:fc:db:eb:6e:6d:53:3a:ec:86:0d:84:3b:b2:
                    9e:c2:8e:de:b4:92:fe:3e:00:fe:8f:27:2c:c3:aa:
                    2d:18:95:95:17:dc:bf:fa:84:60:98:94:f6:30:bd:
                    33:34:f0:8b:9b:a3:41:c5:3d:4a:6d:7e:12:d8:1b:
                    1e:2d:2d:b3:29:8d:f3:c7:86:33:21:b9:21:fa:4b:
                    3f:e9:0f:43:94:31:52:97:db:e6:4b:5e:6c:05:21:
                    f5:7a:62:be:d2:25:80:3c:dc:8e:a8:b2:4f:bb:24:
                    93:66:1a:63:a2:e9:37:c8:ac:13:b2:a6:b4:04:51:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:20:EE:92:3D:F0:13:30:74:B2:56:31:A4:2C:70:D0:19:1B:0F:F7
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:73:96:12:0f:7c:b6:33:59:11:49:e0:e1:f9:ed:04:b7:64:
         e5:4e:c6:3f:39:59:dc:0a:d4:56:72:c6:bd:01:d5:f3:d3:b8:
         31:24:0d:8a:b5:b6:ee:a9:b8:be:24:49:b6:d4:9d:06:24:6a:
         a6:82:03:e3:d0:55:d0:1d:a4:f3:88:ef:3b:93:89:6d:23:f4:
         2a:60:c6:30:8d:1e:de:12:ff:1d:14:8c:22:9b:ac:3a:a8:43:
         68:8d:e9:d3:35:a1:3c:78:53:7f:ff:e3:dc:95:46:0f:b9:54:
         26:33:cf:7a:14:16:41:85:4a:a0:be:15:82:dc:e8:84:68:d4:
         67:5a:0e:64:22:05:db:fa:a7:79:f6:57:5a:f7:39:24:73:2e:
         7f:f9:dd:b0:67:4c:97:90:8b:e1:31:3c:41:4e:e3:57:c9:54:
         7e:b0:73:ba:45:76:70:df:d3:40:51:38:b9:0d:bf:3d:38:93:
         d0:84:af:78:a3:7d:e2:96:80:06:5a:65:d9:ad:5a:a1:ed:ef:
         f3:df:b6:6a:0f:e1:c2:61:9f:6b:e1:f2:74:4c:91:32:9c:b0:
         b1:47:ea:08:2d:1b:12:77:83:d1:b1:72:1e:92:06:c7:1b:11:
         62:f7:fe:b0:67:fa:d0:7c:c4:a7:0a:3e:73:7a:e2:b5:47:6f:
         cf:86:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:59 2026 by rpki-client