This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File:                     KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier:          oVZJvsW+NNrD1TjCEvv66lmd/kvLEBYUDEseDHlY548=
Subject key identifier:   C5:22:33:C8:16:3D:59:1C:91:82:04:3C:BD:5C:9F:CD:D4:16:C2:A7
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer:       /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial:       019BF4D0EFC000821F4E4D332B1DF2791462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number:          0E7D
Signing time:             Sun 25 Jan 2026 11:01:32 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:32 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:32 +0000
Files and hashes:         1: 6e697LuZ9jS9gA2F89nGR0cFK-I.roa (hash: ci7j6TFk0kfg5Gm37B2a5yzK2NylCLyZsggMovKNNBs=)
                          2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: HRonh4lmLEp+n6OREK3YqMpjqvtWiEj9pgXXgYhxPdg=)
                          3: TMapBMpm5rX0-gIoWzb76bSTSuI.roa (hash: R4mwMpiCVjsTtSxaIqIQla1zIyz7FbLUvXLev4eE1XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:ef:c0:00:82:1f:4e:4d:33:2b:1d:f2:79:14:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
        Validity
            Not Before: Jan 25 11:01:32 2026 GMT
            Not After : Jan 26 11:01:32 2026 GMT
        Subject: CN=c52233c8163d591c9182043cbd5c9fcdd416c2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:12:36:55:43:36:82:e9:86:f3:5e:ed:62:be:
                    07:1e:6d:f9:45:4e:2c:79:05:9d:c0:b2:e6:90:24:
                    55:d8:32:c8:ea:3a:57:ff:5f:f0:ef:e5:67:e5:b2:
                    36:5f:fc:91:c9:8d:23:0e:df:2f:18:d5:b7:b0:54:
                    24:bc:af:0e:20:70:db:0a:14:e1:dc:9f:60:cc:ce:
                    a5:67:68:c4:ae:d5:94:4f:99:81:04:3e:c9:10:be:
                    a9:64:c4:11:51:70:28:23:ba:ff:95:5b:ac:c4:a8:
                    d1:e4:c2:3a:62:6a:f9:09:f5:05:cf:d2:e9:4b:55:
                    ba:4f:70:30:5d:6d:16:78:0e:f0:a9:fa:4e:ed:6d:
                    4b:84:75:77:0e:29:64:ae:0b:f0:66:74:de:4a:90:
                    96:4a:46:e3:9b:d5:95:c2:cd:7f:ac:6a:5b:e1:25:
                    ce:a3:04:24:69:3e:29:81:7a:f7:bf:81:33:9b:24:
                    23:2b:24:ed:75:60:9c:10:01:9e:96:0a:6b:36:d2:
                    a3:92:60:08:e8:37:64:4b:b1:0a:d6:db:e6:fb:1c:
                    82:dd:f7:1a:88:37:64:8f:c6:64:9a:48:e1:ea:b9:
                    22:54:b7:26:08:d3:dd:30:72:5d:cd:48:9d:c0:82:
                    f4:d1:9c:62:9c:53:a7:4b:6c:f8:ae:52:eb:e8:9e:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:22:33:C8:16:3D:59:1C:91:82:04:3C:BD:5C:9F:CD:D4:16:C2:A7
            X509v3 Authority Key Identifier:
                keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:57:d1:27:ab:55:e9:3a:d1:e1:d8:4c:56:dd:20:2e:23:cf:
         73:a3:fd:9c:46:eb:fa:0f:b0:16:f8:6a:aa:df:bb:b3:e2:90:
         e9:b1:3f:9f:fd:51:f5:2b:6a:08:2c:c8:18:37:59:61:c2:53:
         bf:5b:6c:51:95:f9:cf:ef:29:7f:5d:f0:91:25:42:4c:f5:af:
         a8:ac:28:ff:7f:0e:6a:dc:e0:fb:d0:a5:86:53:9d:e4:bf:cf:
         e2:50:ec:9b:99:99:80:f0:3a:72:3c:99:17:fe:95:9b:b9:55:
         dd:de:c9:b7:d2:64:db:1c:5f:bc:e9:fb:f3:ba:28:dd:ca:1f:
         c8:1a:a3:70:4d:03:c6:2f:70:a4:6e:03:86:5e:7a:5b:64:1d:
         b4:2b:5a:5e:74:34:22:80:46:93:e7:49:e6:8c:5b:36:6e:e8:
         ee:09:23:55:55:16:df:13:8a:ee:25:c6:69:83:2c:df:99:79:
         8c:d7:0d:19:32:f9:38:4e:34:45:94:70:1d:5c:4d:bd:16:d2:
         01:e0:aa:9d:6f:49:9c:7d:b7:66:bd:af:f0:28:ea:df:56:84:
         14:31:33:6f:b7:93:24:f4:4f:61:e6:d9:8f:57:31:e7:db:44:
         5d:fe:0d:40:ec:31:20:17:52:53:70:9c:24:4b:ea:37:2d:91:
         10:f1:1f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:16 2026 by rpki-client