This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File:                     eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier:          CSfy8p6aTRZDUEW65XHYemlzf0rAb+j/6jPBKuXritg=
Subject key identifier:   94:83:CE:C6:78:43:8B:E6:D2:C3:74:C0:DA:8E:BC:61:9C:76:7E:2C
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer:       /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial:       019BF3500F2FBAF7F5D7C7AB48923CAFACEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number:          07EB
Signing time:             Sun 25 Jan 2026 04:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:08 +0000
Files and hashes:         1: AAxqzE_DaNwqJtSiSRt01LrD11E.roa (hash: AsdkBWjUsMF1PMPWszixSJb73omz0Nujo4Z01ynXMW8=)
                          2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
                          3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: px3w8TWL5x5Tr06bsJyFCOTUA2Ae6xrUQ2iCSsCipdE=)
                          4: haFLcC9NWw9ub46milFGifb1wm8.roa (hash: MLM9+m/KRPi8dl+vkuj88InrFcUl/TiXCjaTZOweCP8=)
                          5: nVrsmiE4mZkUHdQosAPmUQgfiN8.roa (hash: HnvmyHFabWozXyzydQ+3XrK2DXsd/lYo1fc4nVOwXr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:0f:2f:ba:f7:f5:d7:c7:ab:48:92:3c:af:ac:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
        Validity
            Not Before: Jan 25 04:01:08 2026 GMT
            Not After : Jan 26 04:01:08 2026 GMT
        Subject: CN=9483cec678438be6d2c374c0da8ebc619c767e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:26:b6:3c:ff:b7:be:7a:79:50:bf:5c:76:
                    03:a0:de:33:a4:5b:1b:f2:f5:08:5b:43:60:c2:70:
                    95:16:08:74:9d:1d:0f:59:77:0e:70:8a:41:c3:60:
                    e3:dc:2d:b8:1f:85:aa:57:1f:dc:d0:0f:c5:87:05:
                    00:51:df:50:b4:86:38:05:37:34:ae:05:3e:c8:03:
                    c7:7c:63:3e:8f:da:1d:cb:7d:7e:c6:31:99:2c:dd:
                    e8:ea:55:e2:29:18:6c:0e:f2:8c:ec:50:06:3f:10:
                    3b:18:eb:a6:48:79:db:bb:82:8f:5f:76:70:2d:b9:
                    7d:ba:4f:87:86:bb:a7:ed:55:8a:3a:73:16:9f:3a:
                    d7:5b:10:8f:57:5c:a3:18:49:86:57:9e:f0:83:51:
                    43:87:8a:63:ac:3d:9a:3f:d5:08:51:02:8b:05:2a:
                    2a:8e:e5:c3:f3:ed:50:e0:77:33:f1:01:94:c1:ed:
                    3a:b4:c9:85:37:fc:c2:06:7e:54:3b:e1:76:51:0a:
                    c6:e9:bc:95:60:e7:e9:15:4b:23:e0:a8:9d:67:9d:
                    02:40:ba:ae:1f:10:8c:09:1d:c3:34:25:1d:3c:ed:
                    30:35:dc:66:30:89:a8:08:93:2f:aa:6a:c0:4e:35:
                    b0:2c:fb:3a:34:db:39:8e:f5:91:1f:47:e2:82:47:
                    fc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:CE:C6:78:43:8B:E6:D2:C3:74:C0:DA:8E:BC:61:9C:76:7E:2C
            X509v3 Authority Key Identifier:
                keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:24:0e:7c:b3:c2:2c:aa:ec:b0:27:4e:38:f7:d7:19:6f:3e:
         7a:6e:6d:52:6a:88:58:2b:46:16:82:31:40:2d:9f:34:ca:5b:
         d9:3f:5f:70:94:79:ab:4a:1c:ef:82:3c:ae:d6:5d:f0:97:6b:
         15:9e:8f:f2:1f:ec:3f:8d:b5:cd:ed:73:bc:04:23:b5:17:18:
         bd:76:7b:7e:3c:69:23:08:1a:38:8a:ca:a2:34:a1:88:53:ef:
         99:6f:dd:a4:f8:aa:6d:39:44:f8:98:4c:92:ec:da:91:ce:87:
         23:52:23:8c:65:43:7e:21:f6:c6:da:13:0c:6b:b0:8f:8a:51:
         5b:8a:04:54:50:a0:9a:4f:df:a3:15:15:82:59:3c:7a:0d:a6:
         8a:db:ec:72:02:dd:35:35:1d:40:d4:23:5c:9f:4c:64:5d:a8:
         04:ef:49:99:ec:2b:92:af:70:97:b6:4c:40:a1:5f:9b:9f:37:
         d2:f9:39:eb:8b:5d:96:45:e2:cd:99:0e:be:3a:a0:f0:53:c8:
         88:d4:19:ae:17:cf:5a:60:91:64:d5:97:e7:fd:a9:2b:16:f0:
         f7:66:47:d1:0c:57:b0:6f:06:3b:46:1d:af:93:15:01:e1:31:
         7a:54:20:9f:7f:69:37:73:1b:bc:ba:c0:44:d5:2e:af:94:3a:
         2a:1e:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:53 2026 by rpki-client