This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          7dU74jW77dLUNUTV3vjPEYQdG0cQyXDGFovzb+sMNxQ=
Subject key identifier:   08:CD:CB:B6:7D:57:7A:E2:77:87:48:7F:46:E1:C2:8C:3D:FE:C9:FD
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       019BF79A35C16AF171D2BFB47C876B5B53BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 00:00:37 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:37 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:37 +0000
Files and hashes:         1: CwDjP9tnkLMqRQJExwbW5a8tb2c.roa (hash: Cvhm4+Ug1T3hSPp5fKBEvpgdxdZDIyd8JjxFJnRL+xc=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: MoFKQuahFwr9ExDVHQV+/OgDFIM0kg/cA3cwNP/Z7nM=)
                          3: dYc4QHw_MlBGkai83ebw6UpAabw.roa (hash: PhHK3yJG/efNPRvamiA5Euk3gsAbVkNsvmnaGEDrJ+4=)
                          4: lV7YMWxQNgA7TeXSrVvxVEzp5zI.roa (hash: gNnh1Gc1ZxAnhLjUx2sE8mDgR6U7dHMmlaCZ5/JRTJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:35:c1:6a:f1:71:d2:bf:b4:7c:87:6b:5b:53:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: Jan 26 00:00:37 2026 GMT
            Not After : Jan 27 00:00:37 2026 GMT
        Subject: CN=08cdcbb67d577ae27787487f46e1c28c3dfec9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:44:36:ce:34:c6:be:10:02:06:fc:f5:a6:
                    b3:8d:26:b9:c3:b2:dc:08:06:cb:81:44:d7:74:56:
                    06:b1:81:a3:7b:cb:a4:3d:19:95:82:a2:1a:ea:43:
                    80:6b:8c:95:c6:39:2e:64:e8:69:62:b7:a9:2e:a9:
                    53:b1:24:9e:db:7d:24:f7:a0:22:c8:59:4c:83:73:
                    82:46:df:64:3b:1b:13:7a:aa:20:c1:d8:15:f1:af:
                    04:89:28:29:e5:70:d4:bb:84:97:4b:e9:6c:33:38:
                    fa:7d:e0:5f:de:aa:8b:c1:d0:93:ee:15:2d:56:8f:
                    64:f9:f4:89:70:34:76:6b:6e:7d:0f:b9:20:ba:d1:
                    ef:59:c1:76:2e:31:65:fa:61:21:c4:bb:97:23:be:
                    8b:7f:2b:ba:2e:3d:9c:77:b6:86:75:47:03:f3:30:
                    a4:35:b7:c2:86:42:e9:06:f9:14:ef:2d:bc:b9:81:
                    d9:11:44:c5:f6:d4:82:25:e2:d4:5f:dc:90:aa:5c:
                    20:fe:b8:3e:b5:8e:5c:5a:db:1f:57:3a:fa:66:70:
                    28:ad:25:ca:19:ad:9d:90:e8:8f:eb:6b:19:c5:7e:
                    95:0f:5f:29:37:b1:0b:69:60:f6:1d:04:ad:60:aa:
                    c6:4e:58:b3:80:0e:6e:be:ab:3a:de:ab:a3:7e:45:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:CB:B6:7D:57:7A:E2:77:87:48:7F:46:E1:C2:8C:3D:FE:C9:FD
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d9:b5:23:a1:b4:e3:bf:1e:4c:36:e3:c5:73:97:df:3d:cc:
         53:e8:b0:ca:1a:15:cf:aa:1b:f8:66:87:d4:ed:07:96:5c:a8:
         67:bb:7b:a7:dd:f9:d3:c9:68:0d:d3:b2:ce:0c:d1:c6:1f:41:
         b5:98:2b:44:4a:34:c5:81:21:13:3b:ee:e5:4d:5f:30:ce:be:
         02:4f:0e:84:a0:0c:f0:bc:45:bd:46:ce:32:5d:43:c4:1c:68:
         24:81:ec:9a:ab:36:78:d2:c4:e9:1f:49:eb:42:83:16:0a:43:
         cc:27:08:e6:df:6b:d7:69:5d:0c:94:9e:96:b1:61:56:f1:27:
         32:5a:ed:93:c6:c1:4e:d1:34:3c:e9:93:67:62:0f:68:99:5e:
         aa:d8:b1:30:18:c9:33:e6:c8:65:98:c3:dd:0f:cb:cd:96:89:
         2b:11:f6:f6:6b:79:e9:50:c1:b2:2b:c1:48:f8:6c:28:7b:d8:
         aa:c9:30:ac:d1:0d:2b:dc:d7:14:ed:60:58:ab:f9:35:b3:9c:
         7a:89:15:29:72:ce:0c:4f:8d:9a:96:cd:f2:b4:f1:1c:c1:db:
         c4:1b:f5:20:3b:fd:0f:be:92:a3:19:83:4f:05:3c:9d:f9:a8:
         27:2c:3d:81:9d:03:13:d0:62:a0:e4:5d:f3:c4:1b:56:02:56:
         eb:53:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:02:37 2026 by rpki-client