This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
File:                     EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft (raw, json)
Hash identifier:          r5pcdOuIySNQ+wt8T0N/SqlX9rWjoPTGQMaB74TLEUQ=
Subject key identifier:   5E:E1:8F:94:0B:BC:31:4A:E4:49:DA:83:74:D9:9D:AD:38:F1:3B:87
Authority key identifier: 11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86
Certificate issuer:       /CN=110274b45d8fed463ed1e766ed71770ffd899186
Certificate serial:       019BF8ADEFC8BB9B542F0527FEDC66413069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
Manifest number:          013C
Signing time:             Mon 26 Jan 2026 05:01:47 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:47 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:47 +0000
Files and hashes:         1: EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl (hash: UfOSLuVM7dqeMum1RJtYw7aw1b6HMY4K1fS1R1IB3fk=)
                          2: LWh1HaeL5ortaVH3kik7DExqh78.roa (hash: qIpCeksyx0E8+hCHbqahdqByF+0cRttYVhOA2hnKbtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:ef:c8:bb:9b:54:2f:05:27:fe:dc:66:41:30:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110274b45d8fed463ed1e766ed71770ffd899186
        Validity
            Not Before: Jan 26 05:01:47 2026 GMT
            Not After : Jan 27 05:01:47 2026 GMT
        Subject: CN=5ee18f940bbc314ae449da8374d99dad38f13b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:9e:85:f6:52:f9:1d:d7:0b:2b:88:f8:ff:
                    e8:e2:c5:16:c1:e0:bd:0e:33:06:bf:77:e4:f3:28:
                    d8:41:c2:8a:87:bd:01:1b:89:fb:44:3f:f6:bd:f5:
                    e2:1c:6c:68:b1:a5:37:3a:a6:1b:f3:9f:08:f8:3e:
                    0c:b3:fa:f2:58:c7:53:6b:df:c7:5a:48:55:3d:a6:
                    21:ad:c4:06:fe:28:cb:25:71:f4:6b:b7:db:3b:da:
                    c1:01:53:97:1a:f9:8c:11:6c:a9:98:97:c8:4c:7d:
                    73:2d:8b:71:89:02:80:fe:9c:db:f8:29:b0:5e:20:
                    70:4e:3d:7d:06:ad:4d:a7:3e:53:61:95:bb:2b:2d:
                    3d:1e:f9:65:c7:5a:d1:1e:a3:11:32:d1:db:0e:b4:
                    75:13:14:c5:54:76:50:38:ad:56:cc:c2:e2:0a:42:
                    1a:14:7c:0b:33:7a:57:36:31:0b:4a:0c:fe:a9:ef:
                    fd:7d:b4:1f:f7:ac:2e:20:ba:6c:a6:71:12:f7:16:
                    32:8d:73:b1:c0:10:f9:13:ce:95:d9:23:a7:b5:cb:
                    0e:b9:6e:e3:57:fc:c1:88:d5:64:b2:7e:e1:27:9d:
                    79:26:0e:6d:28:77:4c:c4:c8:37:f2:94:6c:23:be:
                    28:da:42:ae:ad:31:cf:22:2a:04:fc:c6:67:79:34:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:8F:94:0B:BC:31:4A:E4:49:DA:83:74:D9:9D:AD:38:F1:3B:87
            X509v3 Authority Key Identifier:
                keyid:11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:b9:7b:ca:99:fc:b2:77:1b:5d:3d:fb:31:b7:b6:1f:86:
         e5:30:0b:95:59:5f:6e:4b:7e:c7:7d:02:94:09:82:3d:28:e0:
         ee:7d:cd:6d:fe:b8:f5:62:1e:5e:69:5a:0c:8b:c9:0e:b4:91:
         71:08:cc:1e:d3:39:06:91:10:71:c2:81:18:56:5c:f8:e4:86:
         79:7b:ad:9d:c2:0c:71:a0:3f:4c:76:1f:11:7b:5e:6f:74:03:
         4d:10:83:da:26:13:c1:43:d6:ce:35:3d:3e:6e:86:e7:8e:87:
         dd:11:04:a2:67:ba:16:8e:64:a0:76:49:2c:30:b9:b4:fb:eb:
         b0:40:9e:4f:97:da:5e:91:27:d1:b1:4f:74:06:e0:ca:60:9c:
         2f:d0:81:98:46:b7:15:35:5c:2c:8d:5a:cc:10:d4:34:ad:22:
         92:61:96:54:f3:14:b5:5e:e1:c6:18:03:a8:f0:c2:70:6d:34:
         3e:43:66:86:6d:1e:ec:f8:04:dc:71:13:54:31:fc:d6:f8:c0:
         45:d2:c5:e1:ec:4e:0e:55:7a:0d:01:d3:bb:80:2d:82:48:6f:
         2a:74:fe:bf:46:d7:52:3c:cd:01:8f:d9:b1:3f:a2:f8:8e:60:
         40:3e:48:8e:95:0c:51:16:df:dd:d6:68:fc:a7:0d:b2:7c:fb:
         e9:5f:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:57:39 2026 by rpki-client