This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File:                     EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier:          wAnwKWd/IsnzVZRxdbkEjOJoeqfcy85U7kspw85Qotw=
Subject key identifier:   C7:92:54:55:5A:15:6B:7B:8A:66:40:D4:07:98:B7:43:F0:B2:D0:57
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       019BF6BF52D7AC2A1512423253DEBA55B680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number:          0ED1
Signing time:             Sun 25 Jan 2026 20:01:32 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:32 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:32 +0000
Files and hashes:         1: 00wZvtvNZQs4uAA915GadjEGBvg.roa (hash: 5K/ug2ekLcwiuUDWDLSSG2UzC7SzInoAiv/KlObpbv8=)
                          2: 7AEQejaf4ar8QzePBU1rEkR-Wyo.roa (hash: /mA72LTouIcC5DplrlI38tIsNw+vs1skW2C/I5sSpBw=)
                          3: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: C/5qO+yfkEAuVEq9Sg6ObNDCkELNJ725RRxJgA/xE40=)
                          4: MJP1d4e-dGP316pN4YKGXwBEB6A.roa (hash: 7LX7W8xSif8sjS3tismw58R9gQWQatJHTsKvQpRfAW8=)
                          5: WeB5kEbbCBZpop-fX4ON5gv82l8.roa (hash: lzVL6PB9mdFbq/OglmNYGRSYPmiN/i9hvgSO4OhUNo0=)
                          6: pFreL0ELwqUCEO8jgvaVDhmpTaE.roa (hash: j6gPD8Urcnyljz4W/n0fYekDNBzyuam4N75FRs+GRu4=)
                          7: q448fa7_znU_mFgRxcDcgN4477g.roa (hash: B5NQG+C4rJ08vWE97izdeALjZxDvsgfYoMhiTTd/XKk=)
                          8: rdpjVEDei7xeZFN28ZYbPl20GyI.roa (hash: T3H8QzztcCCMvYzNKiDtuOviwtvx2+/XKBlvRE/lf5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:52:d7:ac:2a:15:12:42:32:53:de:ba:55:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jan 25 20:01:32 2026 GMT
            Not After : Jan 26 20:01:32 2026 GMT
        Subject: CN=c79254555a156b7b8a6640d40798b743f0b2d057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:39:f7:43:b8:05:13:b4:48:84:2c:c3:1c:
                    e3:a3:da:3a:b6:31:47:eb:8c:6e:b1:57:40:f6:f5:
                    73:7c:a9:74:7e:4e:9c:65:6a:b0:b7:ee:3b:12:a9:
                    41:5c:1a:ff:96:8d:3d:fe:7a:0f:ef:7c:20:f1:65:
                    7e:6a:73:67:94:ba:b4:56:f4:4f:6d:10:8a:f5:ff:
                    bc:c4:62:06:d2:aa:92:2d:a1:a9:9c:c1:97:9a:de:
                    f4:66:90:29:57:06:ab:20:69:dd:d7:f7:b0:35:8b:
                    f6:5a:a9:35:09:9a:24:2f:db:7c:1d:13:e7:55:3d:
                    78:5f:35:b1:5a:0d:a8:d2:ae:1a:1b:17:83:f7:e9:
                    4c:94:c9:b1:96:9d:a7:93:cf:ac:5f:7f:9e:91:c5:
                    2b:f7:cb:0f:7e:26:71:37:31:03:f9:b8:e7:04:1e:
                    ca:0e:51:5c:a9:96:ef:76:81:90:53:6c:85:ac:39:
                    9e:b1:57:a3:7e:8f:71:d3:ac:f7:89:a2:f1:72:66:
                    33:2c:c5:aa:0f:8f:2b:50:24:d9:7f:e0:ce:bc:52:
                    a1:25:49:2d:d0:8e:37:9a:b0:24:bc:e9:f4:1a:3c:
                    15:ac:b8:9d:41:a6:b0:68:90:d2:c4:eb:14:d6:1c:
                    0a:3c:48:8b:60:61:51:91:33:3f:17:e9:e5:34:f7:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:92:54:55:5A:15:6B:7B:8A:66:40:D4:07:98:B7:43:F0:B2:D0:57
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:67:2b:ab:0e:02:e7:b2:17:fd:2b:25:69:77:a0:b9:8a:
         07:14:1c:cb:66:15:5e:82:c3:82:3d:b0:0a:cc:d1:41:c0:71:
         e5:4e:ed:6e:4c:eb:9d:43:f3:9b:56:1d:1e:a3:3a:67:02:7c:
         b9:64:e3:78:21:1c:11:b6:d8:3f:bb:02:cb:d9:19:41:af:9f:
         ef:33:b3:f6:77:b0:af:2b:fd:7b:37:80:08:ed:ba:50:89:c1:
         1c:70:53:a7:c0:51:79:30:2b:f6:0e:8f:ae:17:89:7d:ca:12:
         f1:21:53:a3:7a:f9:36:6a:fa:04:8f:e4:87:4d:ec:01:ca:68:
         d3:d0:77:37:cc:a7:66:30:8b:14:c8:3f:b5:6e:e7:a2:4a:3e:
         f3:fd:b1:b6:4e:8c:40:6f:ff:a8:7d:32:f3:10:b8:19:df:d6:
         35:c9:f3:30:d0:53:25:be:f8:80:cc:d3:37:52:0a:bb:f9:6c:
         07:b2:c4:88:1a:2d:c1:e6:d9:87:80:b2:ec:c6:7e:7e:47:eb:
         63:2c:fd:55:6a:56:10:38:d6:37:7b:0a:27:83:36:c2:27:aa:
         54:b1:2e:24:6f:3e:43:ee:08:a8:d3:e4:f1:ac:46:4c:8c:c7:
         a1:d8:6c:02:98:38:bf:55:c5:f9:08:92:f2:32:a4:a8:33:8d:
         6f:d5:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:09 2026 by rpki-client