This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File:                     E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier:          4xE/FcqMmm2TnOF9jC0Wt92AkXl2y4LuHz0ngBjEZ7Q=
Subject key identifier:   A0:9B:90:91:E1:15:35:76:AC:E4:4F:2D:35:9D:28:FB:7E:C3:C8:32
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer:       /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial:       019BF83F524E8F33FE274A958DB9CCFA7A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 03:00:57 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:57 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:57 +0000
Files and hashes:         1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: 8wWJbFVeInVQZWBYsn9QmsB5ZEThEJkYbHrpp+1FZ48=)
                          2: MxK4lS7Htpm_IH-kALADE2GeLuc.roa (hash: U74MFGGkriXB1g/dSBw5TFkgPOsV3rgpaQhg7Zx0jH8=)
                          3: ik6Wjgaqct3SJRlBNzDl9R2Qc5o.roa (hash: WLV2A1EfMAOyhSJNkWJ5jsFbrKEgL/UGX1+Lvgg6md8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:52:4e:8f:33:fe:27:4a:95:8d:b9:cc:fa:7a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
        Validity
            Not Before: Jan 26 03:00:57 2026 GMT
            Not After : Jan 27 03:00:57 2026 GMT
        Subject: CN=a09b9091e1153576ace44f2d359d28fb7ec3c832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:97:b5:87:4e:74:58:7b:21:ad:bc:b1:5b:
                    50:c0:91:17:d5:cc:39:4e:87:7f:78:50:40:5b:ee:
                    8f:cb:b5:5d:e0:d6:02:9c:30:be:ec:74:d1:cb:56:
                    69:25:8b:1a:76:f3:13:66:2a:67:8d:19:de:a7:df:
                    0a:86:b8:79:8a:d2:e3:a1:84:b3:b3:4b:4e:06:71:
                    a2:3b:3d:2f:a8:be:10:f0:3f:b9:08:7c:85:c6:6e:
                    18:61:c2:09:69:bb:c3:9b:3a:ba:bb:11:e8:00:06:
                    51:6e:74:28:83:30:58:ff:5c:a5:f9:4b:3c:9d:dd:
                    47:a9:ac:ec:17:72:1b:44:7e:da:5c:54:25:94:b8:
                    14:66:86:30:5a:d2:4f:fd:85:ba:6f:96:6e:c9:81:
                    59:a5:e3:4f:76:89:82:c0:ed:6e:1a:56:24:75:40:
                    e8:7a:7c:b3:69:e0:c7:66:33:2c:f5:d4:a2:c8:52:
                    8c:09:6c:e0:e1:fc:be:7e:5c:a7:a2:dd:de:3c:ca:
                    94:70:bb:51:f2:cb:f1:f4:6d:51:6f:35:87:b3:d9:
                    6f:ae:16:2d:8b:5b:d9:9b:05:f2:a0:ea:6c:f5:28:
                    74:c4:b9:43:5a:7b:b2:b1:d4:fd:71:bd:df:dc:0e:
                    82:4a:a0:39:df:e1:77:d1:ee:26:29:13:81:22:9a:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:90:91:E1:15:35:76:AC:E4:4F:2D:35:9D:28:FB:7E:C3:C8:32
            X509v3 Authority Key Identifier:
                keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:91:0a:7c:ae:fd:ce:cd:e7:54:06:ee:ca:4b:30:5c:52:
         6d:a8:fd:41:4d:19:25:11:d8:d7:1e:e6:87:a1:ca:d8:fe:e2:
         c2:7e:8d:7e:2f:79:03:57:73:28:a4:3a:e5:26:77:76:0f:47:
         c5:b6:37:bb:76:3d:82:83:5f:11:3d:eb:70:18:4a:45:d0:f9:
         52:c5:68:33:53:a5:0a:2a:1d:6b:41:e6:f8:5d:43:d0:cf:5b:
         be:9e:d6:8b:73:d8:80:48:b6:d9:80:9a:5a:18:45:f2:53:9a:
         39:43:6a:25:9f:93:e6:f6:6b:50:7f:ab:fe:ca:a8:9c:d4:ac:
         7c:a0:aa:45:6d:e9:31:95:ab:21:6a:ed:51:9e:aa:ad:33:a5:
         95:b0:95:ce:b0:a6:b0:28:95:17:b9:f6:df:b4:0f:03:a9:3d:
         9b:ca:04:c6:2a:53:48:61:ec:d7:fa:32:6c:71:23:9a:b3:2c:
         3a:61:0c:93:6c:df:7c:58:e7:0b:4d:eb:e0:b4:93:0c:26:17:
         40:a7:ab:fd:63:e1:25:ff:0d:56:72:ec:77:28:53:84:b6:18:
         20:97:e6:44:98:d9:7f:b4:05:df:66:61:7c:b3:2c:c3:17:f8:
         7b:6a:b9:4b:49:f0:c0:dd:2c:72:b3:73:48:5a:ed:43:06:b4:
         67:3d:c7:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4P1JOjzP+J0qVjbnM+no5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWRmNGJlMzEzYWUxYzFiZTY5ODgxZTJlNDQ0N2VmMmJm
MGIxOTYwHhcNMjYwMTI2MDMwMDU3WhcNMjYwMTI3MDMwMDU3WjAzMTEwLwYDVQQD
EyhhMDliOTA5MWUxMTUzNTc2YWNlNDRmMmQzNTlkMjhmYjdlYzNjODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFGXtYdOdFh7Ia28sVtQwJEX1cw5
Tod/eFBAW+6Py7Vd4NYCnDC+7HTRy1ZpJYsadvMTZipnjRnep98Khrh5itLjoYSz
s0tOBnGiOz0vqL4Q8D+5CHyFxm4YYcIJabvDmzq6uxHoAAZRbnQogzBY/1yl+Us8
nd1HqazsF3IbRH7aXFQllLgUZoYwWtJP/YW6b5ZuyYFZpeNPdomCwO1uGlYkdUDo
enyzaeDHZjMs9dSiyFKMCWzg4fy+flynot3ePMqUcLtR8svx9G1RbzWHs9lvrhYt
i1vZmwXyoOps9Sh0xLlDWnuysdT9cb3f3A6CSqA53+F30e4mKROBIpqKywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCbkJHhFTV2rORPLTWdKPt+w8gyMB8GA1UdIwQY
MBaAFBPt9L4xOuHBvmmIHi5ER+8r8LGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEt
YjQxMzM1YjAwNTg3LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEtYjQxMzM1YjAwNTg3
LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN52RCnyu
/c7N51QG7spLMFxSbaj9QU0ZJRHY1x7mh6HK2P7iwn6Nfi95A1dzKKQ65SZ3dg9H
xbY3u3Y9goNfET3rcBhKRdD5UsVoM1OlCioda0Hm+F1D0M9bvp7Wi3PYgEi22YCa
WhhF8lOaOUNqJZ+T5vZrUH+r/sqonNSsfKCqRW3pMZWrIWrtUZ6qrTOllbCVzrCm
sCiVF7n237QPA6k9m8oExipTSGHs1/oybHEjmrMsOmEMk2zffFjnC03r4LSTDCYX
QKer/WPhJf8NVnLsdyhThLYYIJfmRJjZf7QF32ZhfLMswxf4e2q5S0nwwN0scrNz
SFrtQwa0Zz3HcQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:17 2026 by rpki-client