This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File:                     4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier:          lxL74dQG5Pl6H8/8/VwWn678PQ0GrgBMyaNnBnf0z0w=
Subject key identifier:   27:49:4C:6B:D1:1E:E5:18:3A:C7:36:60:2F:2E:89:3E:BE:A0:76:B4
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer:       /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial:       019BF499BF7849FADB4CEFFECD99F7390357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number:          054E
Signing time:             Sun 25 Jan 2026 10:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:15 +0000
Files and hashes:         1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: YUwmVlflQhbHNCDMtUMGwXzPpIayhsIQNZqZdkdnGxw=)
                          2: WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa (hash: rPmZbrV7SIsTdeGu/1qJQQ8AkYuLMStM58OYdp4CW6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:bf:78:49:fa:db:4c:ef:fe:cd:99:f7:39:03:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
        Validity
            Not Before: Jan 25 10:01:15 2026 GMT
            Not After : Jan 26 10:01:15 2026 GMT
        Subject: CN=27494c6bd11ee5183ac736602f2e893ebea076b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:50:9d:45:2a:92:63:50:ec:0f:42:54:c7:
                    05:22:f3:24:f4:69:30:db:22:de:8b:20:3b:b2:c4:
                    ce:34:cc:6a:f1:fd:2e:ef:e2:b7:e0:2e:8c:be:90:
                    2a:5b:d8:26:3b:95:46:8b:24:5b:93:c3:22:f5:f7:
                    3c:a8:e8:38:01:36:10:9d:15:95:1f:21:5d:34:e9:
                    ca:43:42:6f:ef:57:a6:6d:f3:5e:71:6e:3a:72:e1:
                    ac:7b:ba:86:fc:01:3b:05:d8:47:25:fa:aa:72:6e:
                    ad:cb:bd:4b:e7:31:7a:e9:6a:c7:14:19:e0:95:c8:
                    95:e1:17:50:28:71:ca:db:41:23:0e:7c:e2:76:c9:
                    d5:ea:e6:7e:10:36:56:06:73:5b:09:41:64:4a:4b:
                    bd:46:6f:74:d2:e3:e5:44:98:b9:e2:c8:6a:80:86:
                    c2:e1:8b:57:68:a8:bb:d8:9a:30:6c:a6:80:e3:42:
                    c8:68:ae:88:77:7a:4e:52:9a:68:d2:10:8f:a3:5a:
                    f6:94:5f:8c:03:19:89:b0:c5:c0:76:a7:e6:60:cb:
                    2e:cf:a9:57:e5:65:3e:13:cf:15:93:00:61:49:91:
                    85:6d:56:46:d8:29:83:72:39:ab:b3:bc:03:8c:89:
                    04:08:da:a3:e8:8f:d5:3a:e5:29:3e:a7:2b:7e:22:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:49:4C:6B:D1:1E:E5:18:3A:C7:36:60:2F:2E:89:3E:BE:A0:76:B4
            X509v3 Authority Key Identifier:
                keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:a2:69:85:82:24:a3:f9:1f:63:58:7a:a3:d8:b4:58:52:
         b4:45:58:01:b9:c5:18:b4:f7:2e:90:39:71:40:14:5c:9b:7f:
         11:62:68:95:8b:96:88:0e:0b:ca:ae:a0:6e:87:7a:c7:5c:bd:
         9d:dc:0e:62:1f:e3:7c:33:4a:46:90:8b:45:66:b5:c8:5d:38:
         c8:d0:43:d6:04:12:86:4f:20:26:ea:e8:01:f4:00:10:e9:d1:
         de:71:33:c1:c9:99:2c:74:96:ff:e0:1a:f6:47:73:c6:9d:9d:
         08:ae:38:c1:d9:46:e5:5a:8a:48:3b:c3:ba:d9:1c:3e:15:cd:
         a7:0d:b0:a6:b4:72:80:8e:57:15:a8:5f:77:4b:ad:02:fe:35:
         79:a0:4d:bd:5e:ea:10:7c:3a:ae:05:27:af:37:ef:f0:9d:1a:
         26:eb:86:0d:d3:01:f5:52:f7:3d:49:5c:17:4c:04:3d:94:57:
         63:38:88:4b:da:9c:92:12:be:f7:12:5c:72:6b:fc:b2:ee:3a:
         c0:59:07:d2:4d:77:e6:c3:ee:b2:16:d2:88:1a:60:b3:c1:22:
         db:1c:98:f9:b5:b1:cf:44:48:a5:29:e6:20:75:bc:30:7a:e3:
         7e:5d:1c:72:45:3c:e0:a8:fd:85:c0:b5:c3:68:c3:16:10:3c:
         05:3b:50:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:43 2026 by rpki-client