This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          ralVRpZb7mixaWnefN+0M7NhnNBHSx764Ipx9doD9ic=
Subject key identifier:   78:F4:43:B1:22:E5:5F:7B:A1:FD:26:4E:80:F0:1E:FF:ED:14:3B:32
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       019BF4625B0934EE5ACBFB434FDFB126063D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          0DF1
Signing time:             Sun 25 Jan 2026 09:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:45 +0000
Files and hashes:         1: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: J8XyLBr4QMJ0pvqw1zqB4igdF9d2tRVhRViGBgZSIWw=)
                          2: ymwnzHfZGdMRFGEeM7VXK-BgXAw.roa (hash: zIUfyqH90eqwbG4q9Ekkq/Mb1Io/2HvKy6Zq+oTaP8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:5b:09:34:ee:5a:cb:fb:43:4f:df:b1:26:06:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Jan 25 09:00:45 2026 GMT
            Not After : Jan 26 09:00:45 2026 GMT
        Subject: CN=78f443b122e55f7ba1fd264e80f01effed143b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:79:58:f8:b3:5c:cf:90:1e:82:24:f2:03:
                    dc:51:c8:fe:92:72:0e:06:72:ef:f8:72:63:11:43:
                    7d:da:2f:02:c6:0e:6e:c7:0c:0f:d2:d2:09:83:cc:
                    ea:4c:59:2b:2d:fa:17:6f:e2:b4:8b:27:63:a8:e0:
                    2e:6d:29:e1:c1:6e:cd:68:18:1a:7a:56:f4:df:fc:
                    ee:63:bb:eb:aa:f2:4d:d7:c4:eb:0d:4a:38:f8:d8:
                    db:a6:da:ee:3e:c3:89:50:ee:84:48:77:25:e2:f9:
                    ee:e2:d2:6d:6c:14:dc:3c:3a:93:71:36:fb:b0:b4:
                    97:e3:61:54:3a:5b:a8:f1:22:b3:17:03:3f:0f:d3:
                    c2:ec:2c:f4:d5:19:dd:48:0b:cd:62:ae:8c:32:7e:
                    4a:d5:d4:ee:37:da:b2:5b:3c:61:b8:db:d2:ba:45:
                    14:2a:01:e4:11:2d:3a:88:46:ae:11:01:35:7c:85:
                    68:1a:43:d1:c9:90:71:cd:36:11:44:8a:c8:eb:ae:
                    11:3e:aa:50:8e:7a:a2:97:6a:d1:9f:d6:22:24:2c:
                    0b:e9:14:19:8c:e6:01:07:67:05:57:e7:59:91:ce:
                    bc:ae:ef:c6:91:d1:70:e1:ae:82:a1:28:8a:34:3c:
                    04:89:a4:bc:60:dc:38:d0:c9:6e:f5:23:6d:6b:14:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F4:43:B1:22:E5:5F:7B:A1:FD:26:4E:80:F0:1E:FF:ED:14:3B:32
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:03:a3:9b:07:6f:d3:49:8f:68:4e:71:fd:a2:ac:2e:ff:55:
         f2:59:78:6c:3b:fa:28:81:6a:08:fa:bb:2e:10:84:fc:c0:1a:
         c7:8e:55:8a:ea:e4:e4:2a:c2:e7:4e:c6:be:51:7c:e3:ee:c8:
         09:14:00:2d:28:fe:d3:57:1c:cf:a8:7b:4a:b6:a5:3a:0f:f3:
         cb:47:56:2d:1e:47:97:e9:96:e2:bb:11:eb:e9:e3:83:90:0b:
         1f:16:6e:37:38:0d:c3:f4:45:2d:bd:b8:b2:c9:8e:00:4c:7b:
         48:9d:f1:6b:87:2d:1a:08:37:19:64:94:63:12:52:50:57:85:
         41:cf:64:15:98:fd:00:c9:5e:96:28:ee:b5:86:b3:67:d7:69:
         1a:62:c9:ba:4f:50:d7:95:52:6f:7b:34:5e:1d:71:3a:01:d5:
         af:1f:57:97:f0:f4:dc:26:d8:ba:87:0f:01:d3:51:35:92:e6:
         d4:3b:81:ab:17:8c:93:4c:dc:8f:19:17:b5:94:a3:74:e0:e0:
         14:f6:d8:57:44:f4:0b:9b:a3:a5:ff:c8:f5:50:c0:36:0d:9d:
         86:78:f8:2c:27:c5:ab:0f:91:86:38:b7:6a:57:47:be:0e:39:
         87:51:6f:f5:52:2b:71:05:56:78:be:ac:57:32:ae:44:ac:e9:
         3f:0f:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:21 2026 by rpki-client