This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
File:                     4OU7sw0HUg-FeuZW962BPyLv0VI.mft (raw, json)
Hash identifier:          xL5AEYxxBgUV8e1pHup8949A8WlNJ1nf4gpSBbkBlTI=
Subject key identifier:   E5:D9:34:77:8D:C5:10:7F:0B:7A:B6:EE:03:02:F5:E9:AD:7F:D9:B2
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Certificate issuer:       /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial:       019BF619C175BF4DB541E107728080B37CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
Manifest number:          7C
Signing time:             Sun 25 Jan 2026 17:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:41 +0000
Files and hashes:         1: 4OU7sw0HUg-FeuZW962BPyLv0VI.crl (hash: oV+Klg+SfbX+rR7SdqPEY98WZVzW+jDOP5y953OPNco=)
                          2: VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (hash: dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=)
                          3: xl7hpqZJ1vTXp8SVYJa8rN-KYfc.roa (hash: LniWd40MUm27qbAUJ/AFuq8QyhRMHVdc7tCz6NRyg3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:c1:75:bf:4d:b5:41:e1:07:72:80:80:b3:7c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
        Validity
            Not Before: Jan 25 17:00:41 2026 GMT
            Not After : Jan 26 17:00:41 2026 GMT
        Subject: CN=e5d934778dc5107f0b7ab6ee0302f5e9ad7fd9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:44:d2:b6:eb:fb:3c:a2:fa:8a:fb:76:6a:
                    29:f6:19:94:4d:28:04:96:7b:c7:25:24:f6:cc:bc:
                    72:f9:77:72:f2:4c:42:37:b0:81:2b:a3:10:19:d9:
                    ae:4d:f5:12:3c:f4:2b:aa:d3:e8:d4:48:f2:28:81:
                    5f:96:c3:f1:0e:51:2d:cb:e0:5c:24:54:23:ac:cb:
                    84:71:2b:d7:10:85:05:40:cb:e0:bf:27:69:b3:10:
                    db:ae:59:d8:63:2e:eb:c5:a1:90:ca:a3:09:57:01:
                    a4:21:fe:d9:6f:9c:5c:06:ff:70:05:59:8f:c8:ca:
                    b3:94:51:fb:96:60:b0:2a:f1:3d:03:4d:5a:83:41:
                    5e:31:18:07:16:70:43:88:a0:ac:f4:55:28:e9:72:
                    1b:8f:cf:69:d4:c3:52:cf:f8:db:c6:70:97:2a:92:
                    33:45:ca:ef:d3:4a:d5:03:4a:c2:43:20:4d:38:18:
                    8a:46:d4:dd:a9:17:0f:a6:fa:1c:c7:28:e3:96:98:
                    9b:25:21:d3:bc:26:41:e3:66:b4:03:ef:38:a5:b2:
                    19:48:15:3e:65:6a:3f:df:1e:cb:cc:8a:a4:7f:15:
                    6b:ce:48:f6:99:ba:bf:71:17:95:9d:f1:e5:a5:09:
                    54:20:59:17:65:5e:7e:b2:11:36:14:3a:97:ae:18:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D9:34:77:8D:C5:10:7F:0B:7A:B6:EE:03:02:F5:E9:AD:7F:D9:B2
            X509v3 Authority Key Identifier:
                keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:88:9f:05:30:4b:50:e0:5b:02:c1:64:69:ba:cc:59:d8:ad:
         b6:af:21:ee:20:ec:29:c1:82:e5:fc:f6:38:8d:78:36:f8:78:
         6d:38:b5:02:dc:4b:d7:16:f2:cc:db:5f:53:6b:41:df:93:1a:
         2c:26:86:ca:2c:17:08:84:d7:6f:fd:7b:38:12:8c:5a:76:54:
         da:36:b7:ac:71:e5:dc:ce:36:fe:e2:67:d6:ca:20:8b:70:fe:
         00:61:b3:2d:5f:60:c9:1b:f0:cd:ab:53:e1:3b:ac:1c:ad:e1:
         f5:ce:b1:72:07:dd:07:98:17:15:3d:d8:6d:ca:3a:0d:a0:ea:
         2e:ca:6f:94:ec:64:ce:a8:a3:c4:77:dc:0c:4f:9f:bb:df:97:
         3e:39:b8:9b:b3:1e:8d:58:45:56:95:6e:ba:2c:ae:f7:c1:32:
         96:11:45:db:9a:f4:e3:e6:64:94:83:73:6e:a1:9c:b8:ac:10:
         60:7b:96:98:74:67:66:43:e5:45:61:bc:65:78:c3:04:ec:47:
         36:f8:70:27:b3:b6:5c:14:15:44:b9:ec:1c:6a:2a:67:78:da:
         b4:8a:f1:27:eb:f6:c2:8c:7c:35:8b:21:57:98:70:9a:42:53:
         ee:a0:d8:21:1e:21:f3:f4:f2:73:f4:23:91:b4:91:15:e5:67:
         c3:7f:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:44 2026 by rpki-client