This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
File:                     e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft (raw, json)
Hash identifier:          gY9hlRtodG/W0ZwwZrsO3u8YsQr3KDdvBc/cJF/3kPI=
Subject key identifier:   C4:B3:F7:82:25:EB:28:E5:69:72:65:F6:C0:F6:67:62:6C:BB:91:15
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Certificate issuer:       /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial:       019BF6F60F88B28387D7EE3C36224F800C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
Manifest number:          159A
Signing time:             Sun 25 Jan 2026 21:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:19 +0000
Files and hashes:         1: e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl (hash: Oq0nhaq3qwn8IEK2UyWvX6APU2EpScr6y2W8GmlvQb8=)
                          2: mFHhU2NyVkEbNwlkB3bejxUOOlA.roa (hash: EjtP26UkYPevXuuKHwl2GTUGnR0K4UdWJdQY55pYt8Q=)
                          3: oHEmOWvbStvmXg2LD_oqbDWil3o.roa (hash: 0Raa8F6IlDnkK8IyOP/5NEY/cQcjmmbqoE7t0YULRgs=)
                          4: zVeMOGhhQeFzksT1wb6RxaGm3Bs.roa (hash: RiwqJteMkhWRGoMK/7/uuJWp83uAVoqzTnUHF40fP2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f6:0f:88:b2:83:87:d7:ee:3c:36:22:4f:80:0c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
        Validity
            Not Before: Jan 25 21:01:19 2026 GMT
            Not After : Jan 26 21:01:19 2026 GMT
        Subject: CN=c4b3f78225eb28e5697265f6c0f667626cbb9115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:05:ca:8d:25:fb:bc:c0:9a:61:08:47:5b:
                    c4:59:d7:a3:2d:4b:d2:11:d6:eb:36:f2:5d:ab:c1:
                    bb:ae:9a:e7:95:49:ae:36:6f:95:19:26:e9:33:34:
                    46:3e:ad:fe:ee:92:84:c8:37:01:1e:34:43:90:a3:
                    f3:8a:9f:c9:c5:34:c1:57:b1:46:0d:57:68:93:54:
                    d6:a6:43:a0:da:cd:90:66:6c:0e:15:20:5e:be:71:
                    24:50:fe:25:a6:2f:e7:a8:5a:a1:1c:76:1e:21:fe:
                    fd:ee:59:4b:2a:85:e9:84:7c:f6:8e:02:6d:ec:ac:
                    5f:22:94:46:e4:2b:71:a8:0c:4b:cd:90:6c:8f:5a:
                    fb:d8:df:aa:46:2b:58:cf:b3:f2:ca:8e:8d:d1:90:
                    12:75:53:f5:2d:61:61:d7:eb:7f:63:5f:aa:50:7a:
                    5d:0f:ed:69:95:7a:8c:bb:59:ca:c5:07:67:f7:32:
                    a0:c7:1b:5c:9d:8c:df:2b:f3:21:fa:33:e8:e0:cf:
                    b0:43:ea:95:0d:5c:75:12:7d:94:76:a7:43:a5:e5:
                    50:d9:af:a3:a5:18:7b:6f:2e:8e:df:a4:af:f4:f4:
                    bf:d7:a1:ee:7a:1a:44:87:64:09:42:8b:c7:fd:58:
                    bb:0b:76:60:a6:e7:8f:2b:ac:72:46:e8:28:e4:0f:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:F7:82:25:EB:28:E5:69:72:65:F6:C0:F6:67:62:6C:BB:91:15
            X509v3 Authority Key Identifier:
                keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:66:4d:01:0f:3b:bc:6b:1f:e4:1c:60:69:0f:d0:4b:3d:5a:
         97:12:f4:9a:d9:39:d4:6c:7a:21:15:e6:b7:20:37:be:3b:e1:
         56:ca:ea:67:31:ab:52:7f:dc:5f:80:ba:dc:f2:e3:52:62:68:
         3f:80:dc:9d:3c:f5:3e:7f:f9:06:12:35:d4:d0:ed:ce:09:e3:
         db:00:3e:bf:e8:c1:26:a4:9b:c3:f7:a9:f6:c3:f4:54:b9:6c:
         be:69:6d:cf:36:c2:6a:76:7f:d8:59:42:a6:97:a8:e8:1c:b9:
         4d:55:9d:52:af:bf:07:cc:ea:ff:f3:c6:63:0d:a5:59:87:79:
         a0:e2:72:15:79:95:03:2d:5e:36:76:d6:00:a8:34:24:e5:fa:
         0d:89:1b:b2:11:d5:30:93:8f:1e:6d:a7:a9:1b:be:2f:cb:3e:
         78:5d:e1:b0:3b:06:14:5f:c3:98:48:ae:c4:6a:cc:3c:a2:af:
         14:f9:0e:f0:73:e4:5f:0b:ba:2f:78:49:c3:03:a7:56:85:c8:
         9f:70:35:65:1e:a5:37:9b:bc:95:80:95:86:20:8b:d4:92:5f:
         b2:4d:9d:76:e9:8f:3f:23:a9:3f:d7:9c:96:97:7f:da:f3:fc:
         31:87:13:83:95:7d:06:7c:d9:80:49:26:8b:c5:b2:11:65:4c:
         30:4c:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:49 2026 by rpki-client