This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File:                     eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier:          Vrp+zZsGpJxZoPTSHwG3nS+bfL9vAwH/A4CvYwfU9r0=
Subject key identifier:   AB:A8:CC:8A:FD:F2:CF:48:E4:EE:E8:F5:4B:1F:97:2F:2D:EB:03:3C
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer:       /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial:       019BF619C97DBC33FC0F2F884CB68F32A6B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number:          0231
Signing time:             Sun 25 Jan 2026 17:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:43 +0000
Files and hashes:         1: 1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa (hash: pmrWF+lDh+ECpFtkS0mznQOkoYJ7QI62/Hl2UZgNaYA=)
                          2: e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa (hash: uCVQMuNimm2kRxYums+7bm1dwpOCnLao+2OKBBHNm54=)
                          3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: xpKfZjthjYxCkcaEFQCI0IYjGiNQyfQSE5DU0hCO1+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:c9:7d:bc:33:fc:0f:2f:88:4c:b6:8f:32:a6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
        Validity
            Not Before: Jan 25 17:00:43 2026 GMT
            Not After : Jan 26 17:00:43 2026 GMT
        Subject: CN=aba8cc8afdf2cf48e4eee8f54b1f972f2deb033c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:04:a6:7c:c4:c6:17:ad:3e:a8:35:75:7b:
                    20:43:76:13:0d:db:78:74:82:cb:58:c8:55:91:f0:
                    d8:b1:27:1a:22:d0:20:23:9b:70:1b:3f:63:af:b3:
                    bb:84:2c:fc:1a:4f:26:ca:60:fe:e7:a3:f9:cd:99:
                    64:c1:d2:57:a9:bc:e4:56:06:80:ec:02:ee:19:6d:
                    f4:5e:53:68:d9:3a:1e:c1:52:3d:0a:4b:bb:ba:f9:
                    6e:eb:95:9a:e0:15:c4:06:3d:b4:88:0e:28:7c:57:
                    29:ef:b6:69:da:8c:a2:db:ec:0e:cf:10:f4:85:53:
                    4a:90:7b:51:df:60:08:a9:b6:1f:21:64:ba:10:7b:
                    58:8d:2f:60:d7:5f:78:d2:15:6b:8b:4c:07:e7:10:
                    63:93:11:06:c9:e8:b0:5c:50:e1:bd:ce:51:b0:ec:
                    36:5a:2e:e9:a3:3e:b9:95:ea:78:ea:77:a1:41:d7:
                    b6:35:c2:ea:9d:4d:89:aa:39:79:c5:c9:71:fd:1f:
                    62:db:04:5e:84:3f:a4:8d:65:b8:39:63:26:08:0b:
                    af:1f:9c:a8:9f:4e:cd:67:87:6f:a7:86:f3:6b:ea:
                    44:6e:85:e8:c3:4a:b9:e1:21:91:91:a3:4c:7d:83:
                    eb:fd:eb:cb:fa:53:35:8e:d7:ff:59:e2:b1:89:7b:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A8:CC:8A:FD:F2:CF:48:E4:EE:E8:F5:4B:1F:97:2F:2D:EB:03:3C
            X509v3 Authority Key Identifier:
                keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:96:f9:55:bf:a9:57:c2:d0:22:54:d2:3b:3c:7e:13:c6:
         b2:d3:b9:c6:51:6b:7b:10:56:8d:d3:00:eb:c2:48:2d:57:0b:
         91:3c:a3:2c:f5:a3:cd:17:2e:df:d3:26:68:ac:87:e9:bb:ce:
         4f:43:5a:62:7a:19:4b:79:06:49:65:ef:be:53:36:e2:b2:eb:
         d1:dd:21:9f:d3:df:30:0e:33:36:a4:ab:8f:61:a7:9b:a7:5b:
         ef:15:e6:9d:5b:55:98:dd:da:90:af:04:21:2a:e6:36:43:3d:
         a9:b8:3b:68:bf:c3:96:96:e6:30:02:81:46:9c:70:e5:a0:9a:
         b0:03:5b:30:a5:6b:0c:50:cd:58:4b:2b:c8:0e:46:b6:bb:bc:
         4e:cd:ec:5c:c2:a0:9b:82:e0:6d:9e:41:50:00:23:5e:61:f9:
         15:ea:b1:20:8d:e2:77:95:41:4b:11:9c:64:f6:10:36:72:3a:
         72:ee:ad:e5:c1:ae:b8:17:46:e9:a8:3e:18:c4:60:5b:7f:8b:
         f6:db:68:cd:02:30:b7:3b:61:2a:e3:85:8d:37:a2:89:73:28:
         fa:6f:e2:ea:91:ac:34:45:30:d8:f1:3e:d1:d3:ed:a1:e7:da:
         fb:69:46:6a:3c:45:5d:ae:cf:43:69:10:c4:9a:d4:1f:0f:7c:
         cd:82:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:27 2026 by rpki-client