This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          ifcRbwm7abjXsXDgjJ1jD7BReoNl329cnREOKQXUdls=
Subject key identifier:   0C:40:C4:9A:76:F7:E5:11:B4:9F:32:23:D6:2D:8C:4B:15:4F:1E:65
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       019BF5E345330FC4D8366F6C5D2F9C7395AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 16:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:10 +0000
Files and hashes:         1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
                          2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: d9BAXX76xiWmmNVgAM2/FHjW+LNLRxOz0pskTtl6ebc=)
                          3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:45:33:0f:c4:d8:36:6f:6c:5d:2f:9c:73:95:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Jan 25 16:01:10 2026 GMT
            Not After : Jan 26 16:01:10 2026 GMT
        Subject: CN=0c40c49a76f7e511b49f3223d62d8c4b154f1e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:f3:68:f6:9a:1a:e8:dc:df:7b:2c:34:40:
                    38:b0:86:87:41:35:ed:87:a3:ec:99:2d:3a:12:9b:
                    29:50:aa:ec:b7:e5:2d:24:25:1f:68:d7:1a:81:db:
                    3b:4c:45:8a:41:d7:db:ed:d3:7a:af:b1:96:fc:67:
                    fc:65:b0:f3:1d:58:cd:2b:cc:50:31:c2:13:74:9b:
                    02:ec:b4:fb:55:15:7e:39:13:24:6a:23:e8:ad:6a:
                    25:95:cd:40:e1:29:f6:c3:a4:65:db:1c:d7:33:83:
                    ad:ec:c2:a2:0c:37:57:c2:13:cf:82:81:5f:11:25:
                    8a:ef:31:10:1a:b6:14:58:39:45:86:f8:9a:cf:ea:
                    5d:b5:a1:81:01:5d:37:6c:d6:2d:cf:0a:25:7f:86:
                    17:18:cd:10:a1:8c:ea:6c:30:7b:46:91:88:ed:e8:
                    06:ca:07:4c:63:fc:ce:d8:58:e0:ac:9b:1d:46:41:
                    87:6d:0c:70:27:ee:67:d3:6f:2f:db:32:57:e9:1d:
                    f1:ab:dd:28:65:98:1d:da:97:62:72:f5:d0:85:1c:
                    67:6e:9c:ca:13:fc:a0:ae:a4:db:2f:d5:13:3e:ca:
                    4c:94:95:d2:ec:02:7d:d8:3d:43:37:cc:34:4d:6e:
                    ec:bb:cd:75:ec:aa:b6:ea:9b:43:55:c3:ac:73:dc:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:C4:9A:76:F7:E5:11:B4:9F:32:23:D6:2D:8C:4B:15:4F:1E:65
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cb:ce:0e:60:6f:01:a8:61:d4:8a:86:f4:63:c9:d8:c8:7c:
         f0:57:e3:81:ee:aa:09:e4:b8:87:70:32:2c:d8:d2:cd:d4:01:
         48:0f:31:70:7e:a8:3e:58:69:3e:89:b7:4b:da:75:72:e2:30:
         38:30:0c:1b:94:23:f9:c2:51:bb:ff:0d:57:0c:be:5f:f6:96:
         00:3e:75:61:56:1b:76:67:d8:45:de:fc:bc:16:cf:ef:b6:75:
         be:77:f1:84:6b:5c:dc:96:40:ee:84:24:71:36:8b:d7:18:e1:
         c9:a0:5d:a5:16:ef:0d:88:b4:06:03:64:fd:aa:4d:29:4d:c6:
         de:bf:91:ec:6a:84:fb:7d:a1:6b:d7:31:70:96:1e:3e:2c:f0:
         4a:ed:97:ae:4d:84:e0:b5:72:8f:5b:12:b9:bb:d5:30:82:ce:
         5a:78:78:19:27:09:64:4a:5f:17:e7:34:2f:9a:cb:f0:02:e8:
         d5:8d:49:d4:f3:b0:fb:ef:b9:9f:ce:c2:ee:4c:1a:92:db:79:
         4d:91:83:2f:df:18:01:c8:ee:01:4d:6a:e0:47:c7:be:5b:39:
         0a:0b:32:60:dc:8f:de:bf:b4:05:2c:cc:53:9e:e1:f9:7f:06:
         7d:4c:e2:f5:b0:a9:0b:fe:40:d5:34:57:f2:bd:b0:d8:37:68:
         5c:c6:cd:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv140UzD8TYNm9sXS+cc5WtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzY0YTUyYzg1ZTA3ZTMzNzQ5NzQzZDIzYTVhMjRkMDk2
ZGYxNDcwHhcNMjYwMTI1MTYwMTEwWhcNMjYwMTI2MTYwMTEwWjAzMTEwLwYDVQQD
EygwYzQwYzQ5YTc2ZjdlNTExYjQ5ZjMyMjNkNjJkOGM0YjE1NGYxZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyITzaPaaGujc33ssNEA4sIaHQTXt
h6PsmS06EpspUKrst+UtJCUfaNcagds7TEWKQdfb7dN6r7GW/Gf8ZbDzHVjNK8xQ
McITdJsC7LT7VRV+ORMkaiPorWollc1A4Sn2w6Rl2xzXM4Ot7MKiDDdXwhPPgoFf
ESWK7zEQGrYUWDlFhviaz+pdtaGBAV03bNYtzwolf4YXGM0QoYzqbDB7RpGI7egG
ygdMY/zO2FjgrJsdRkGHbQxwJ+5n028v2zJX6R3xq90oZZgd2pdicvXQhRxnbpzK
E/ygrqTbL9UTPspMlJXS7AJ92D1DN8w0TW7su8117Kq26ptDVcOsc9z1rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxAxJp29+URtJ8yI9YtjEsVTx5lMB8GA1UdIwQY
MBaAFBN2SlLIXgfjN0l0PSOlok0JbfFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNaS1VzaGVCLU0zU1hROUk2V2lUUWx0OFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lNGU1MzEtNmJlZS00MTg5LWJhN2Mt
MjAzZTQ1NjE2MzA2LzEvRTNaS1VzaGVCLU0zU1hROUk2V2lUUWx0OFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9lNGU1MzEtNmJlZS00MTg5LWJhN2MtMjAzZTQ1NjE2MzA2
LzEvRTNaS1VzaGVCLU0zU1hROUk2V2lUUWx0OFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcvODmBv
Aahh1IqG9GPJ2Mh88Ffjge6qCeS4h3AyLNjSzdQBSA8xcH6oPlhpPom3S9p1cuIw
ODAMG5Qj+cJRu/8NVwy+X/aWAD51YVYbdmfYRd78vBbP77Z1vnfxhGtc3JZA7oQk
cTaL1xjhyaBdpRbvDYi0BgNk/apNKU3G3r+R7GqE+32ha9cxcJYePizwSu2Xrk2E
4LVyj1sSubvVMILOWnh4GScJZEpfF+c0L5rL8ALo1Y1J1POw+++5n87C7kwaktt5
TZGDL98YAcjuAU1q4EfHvls5CgsyYNyP3r+0BSzMU57h+X8GfUzi9bCpC/5A1TRX
8r2w2DdoXMbNRg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:47 2026 by rpki-client