This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
File:                     eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft (raw, json)
Hash identifier:          xFg6Bq6UGzAXYh99KY6e8G72rH7LTl85GAoEho/RctI=
Subject key identifier:   F1:F0:B5:D7:C4:7D:E1:A2:21:51:2D:EC:C6:15:D6:91:39:70:71:50
Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Certificate issuer:       /CN=78decead419807747c92ace69448113ff0928b85
Certificate serial:       019BF5ABDC4C21B3A49625FE4FFD20017F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
Manifest number:          0279
Signing time:             Sun 25 Jan 2026 15:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:39 +0000
Files and hashes:         1: 4Iq17c_GHtel1CbLjFxgwB0Dn1M.roa (hash: ynXE8G+gS/lsZOLIqXkN1x5b0cy4lp5fSomJfLM7n9s=)
                          2: EzLM6o264fzi2aUeuo8X1-IxasQ.roa (hash: egEkzBQdw69GxTodEUiKdxFXNinDxPmtmsSk0Laf0Kg=)
                          3: JlJF5EbQzwplegsjgak95qFufvc.roa (hash: SWOatFVOoit3m90PErmrJxk2vw5+frRT4NdsxOBZwLo=)
                          4: eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl (hash: RK2ENs+8zDGaQhX66bx6MOOf81VHmzQ6UpBvCl3s2UQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:dc:4c:21:b3:a4:96:25:fe:4f:fd:20:01:7f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78decead419807747c92ace69448113ff0928b85
        Validity
            Not Before: Jan 25 15:00:39 2026 GMT
            Not After : Jan 26 15:00:39 2026 GMT
        Subject: CN=f1f0b5d7c47de1a221512decc615d69139707150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:07:3b:2e:1f:8f:f3:54:56:fa:c1:d7:ab:
                    bc:09:07:ec:8a:96:ad:cd:7f:e0:e6:ca:c1:dc:12:
                    2c:e5:55:97:76:d6:d2:24:a6:6a:16:5e:ac:de:c4:
                    bd:31:4d:ed:d9:aa:87:b3:1a:d0:50:37:75:b7:36:
                    e0:b9:b2:c3:5e:be:0a:b1:83:0f:6b:eb:f9:e2:e0:
                    7f:76:94:0b:c7:17:02:c0:45:47:6f:7a:96:81:06:
                    31:be:9e:f2:9a:e6:9f:fb:09:b9:d1:1d:d0:73:61:
                    67:c5:27:21:84:df:9a:92:0b:bd:ed:dc:27:e8:5e:
                    f9:1e:a3:d5:56:db:8a:45:c3:e2:99:ab:b2:70:57:
                    a4:0f:81:7a:dd:19:a7:f7:94:df:f2:d2:de:b5:c0:
                    3f:2b:c0:6f:77:f9:0e:78:6a:51:fa:04:a8:3c:59:
                    70:4c:e7:eb:7b:91:cc:24:38:2d:bb:ce:d9:35:0a:
                    8a:bf:56:0a:e7:b2:71:4a:a7:a9:de:0a:9c:ff:38:
                    a3:cb:cb:a0:12:42:bb:f4:64:99:ec:d9:84:21:c6:
                    c1:cf:59:e4:97:31:22:47:54:3a:62:02:9e:f6:c0:
                    b1:e8:c9:db:7d:a6:53:d4:2a:86:1f:a7:c4:3a:80:
                    81:1b:bc:06:10:60:8f:3f:9a:ca:91:5b:76:3c:04:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F0:B5:D7:C4:7D:E1:A2:21:51:2D:EC:C6:15:D6:91:39:70:71:50
            X509v3 Authority Key Identifier:
                keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0b:4c:70:0c:79:66:9c:9f:7b:89:0a:5b:84:f0:48:5e:29:
         ee:84:84:72:02:2d:75:fe:ed:4c:5d:c9:21:2e:6c:f1:a9:3f:
         a5:4b:e1:dd:b9:6f:07:4b:57:75:07:20:1a:56:7f:fa:8f:d1:
         ac:ce:ca:21:d6:5a:93:d3:7f:ab:2f:83:b5:9f:b9:ef:33:58:
         aa:63:53:d8:33:59:ad:d2:9e:5d:66:01:ba:9c:02:69:d4:08:
         02:4a:23:4b:59:f7:9a:51:75:25:92:b9:ee:19:40:35:db:63:
         d1:32:9e:b1:5c:55:47:17:c8:eb:29:02:16:0f:41:63:ed:b3:
         e3:29:f9:d5:ac:61:4e:25:af:e4:fa:6a:a0:8e:8f:b6:5d:95:
         63:61:4e:1a:9b:dc:e3:07:57:4a:4f:66:3f:44:5e:33:db:aa:
         ef:35:2a:39:6e:12:15:bc:dd:92:83:21:5b:f0:d7:e8:7a:82:
         c5:96:33:aa:e7:81:34:be:75:e0:7f:59:d0:b5:c7:57:c3:e5:
         86:bb:6e:79:b2:dd:34:2a:36:af:ad:c2:e4:c2:6b:67:86:11:
         59:db:7d:d1:1c:35:11:26:70:bb:39:41:93:af:ab:94:4d:46:
         56:85:49:7d:20:01:d0:76:6b:0a:06:8f:9c:0b:96:11:ff:3c:
         14:d9:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:54:45 2026 by rpki-client