This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File:                     eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier:          FDcpAmRqFjxnUQu5MOPEBpVw8S4PmWeJOHrJbcWsOhw=
Subject key identifier:   07:2A:65:9C:13:09:95:3E:02:26:07:28:D5:DB:D9:1F:44:01:A4:FF
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       019BF5ABC8800F12BF5A8FAD429A38CAD092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number:          180B
Signing time:             Sun 25 Jan 2026 15:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:34 +0000
Files and hashes:         1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=)
                          2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=)
                          3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=)
                          4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=)
                          5: XXBr-NV_UBdeQOESL0MDEfOIuUU.roa (hash: 1whadIJ1PPRxboPYW1yjoa4EAJk/hWMiRh1Vn0aea08=)
                          6: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: Lw6fRfi7DVtDS8Mu4VrXUkhgz8MfFR8lPxlKN1edL5s=)
                          7: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=)
                          8: jdHAh8dIUgpQg337GZWW2viOSt0.roa (hash: oZp4CqAHg6OEucMfh+5xTh4Oyy7BiO0RI5f4AHMQhd8=)
                          9: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=)
                          10: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=)
                          11: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=)
                          12: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:c8:80:0f:12:bf:5a:8f:ad:42:9a:38:ca:d0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jan 25 15:00:34 2026 GMT
            Not After : Jan 26 15:00:34 2026 GMT
        Subject: CN=072a659c1309953e02260728d5dbd91f4401a4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:5a:14:33:8a:56:06:cc:20:19:04:36:c3:
                    35:cb:09:d0:8f:72:9f:8b:aa:8b:47:ec:11:9d:33:
                    d7:4d:bb:1e:fa:b7:23:df:3c:1e:77:7e:af:2d:ee:
                    17:bd:57:a1:74:b4:8f:67:b0:fd:df:74:17:cf:da:
                    bb:2a:da:6e:98:84:bc:5b:6c:8d:d0:59:33:c9:27:
                    be:04:f9:8a:2e:90:fd:61:6d:49:a3:3a:de:69:83:
                    56:52:87:d7:ff:4f:3b:ed:2f:70:d1:5a:3d:61:23:
                    09:7c:20:9b:6d:af:f9:05:9a:02:59:a9:7e:74:e9:
                    ab:a2:19:c6:80:9d:8a:70:01:30:70:29:50:29:a0:
                    2c:f1:5f:aa:f1:27:74:14:9a:00:53:fb:59:8d:9b:
                    68:7a:b1:b3:40:7b:8e:95:1f:b8:e4:4b:7a:a0:a1:
                    1d:80:da:25:ea:7c:08:75:a7:9a:d8:9c:ca:da:fa:
                    07:5e:9b:5b:1e:b0:ab:a0:8b:59:b0:d9:75:a5:64:
                    9c:05:5e:1a:56:43:9c:a9:5b:c7:ff:6d:55:94:e6:
                    e1:2b:00:83:b5:e8:4d:54:dd:5d:f3:99:4b:80:96:
                    5b:b8:bc:69:dc:46:e7:3c:eb:72:bb:6e:1f:17:bd:
                    69:2e:42:fa:11:d5:be:00:68:78:e1:eb:b8:49:95:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:65:9C:13:09:95:3E:02:26:07:28:D5:DB:D9:1F:44:01:A4:FF
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:db:3e:05:60:24:65:b6:4a:ca:16:3d:74:1f:ba:c1:55:3c:
         c1:86:4d:9c:99:af:a2:bc:ac:16:5f:8b:ca:7a:15:5d:51:51:
         b6:68:68:3e:5d:9d:88:ba:9c:26:34:2a:d2:99:88:55:3d:09:
         b4:31:55:05:9a:2a:0c:1d:55:b0:29:7b:fc:21:b0:94:89:95:
         43:44:b1:a3:e5:15:87:29:ee:60:63:2d:fe:63:30:a8:ee:3d:
         54:ee:ef:80:ce:71:5f:c8:97:cd:d2:69:5f:4c:d8:65:43:c8:
         5a:37:24:c2:a9:68:af:83:ab:bb:25:ea:70:a2:ec:0d:d6:d7:
         a9:56:ed:84:4e:80:70:33:c9:f8:bb:6b:94:f5:53:4b:c0:88:
         d4:88:32:8f:65:ae:05:8d:26:ed:77:48:7f:72:3d:89:cb:b6:
         b9:4d:c5:1e:5e:fb:a0:8c:33:1a:eb:f5:9b:91:30:05:c3:f4:
         2a:f8:a6:5b:37:19:18:12:6d:fc:fb:05:2b:69:f8:67:16:30:
         62:da:81:ce:57:84:ef:f1:b4:f0:4f:be:e2:c7:3e:f2:13:79:
         95:01:a7:32:b7:e1:b0:9d:76:a5:c4:57:9e:00:fb:a5:40:7d:
         68:13:c5:bd:a7:3c:e4:56:4e:54:2c:cc:8e:bb:01:05:8e:11:
         fd:dd:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:07 2026 by rpki-client