This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File:                     eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier:          K4IZ5aDt7uY/cUKGnFEkhypoomeucxpNpbMQkOch+2M=
Subject key identifier:   EC:02:F1:E6:56:B1:44:38:21:E0:13:08:7B:98:B5:8F:0E:CC:5C:02
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer:       /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial:       019BF7D255A5036732EFFCD38185459AB530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 01:01:55 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:55 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:55 +0000
Files and hashes:         1: 1-aGFsKUMUKiufyso7xlhguhZA5g.roa (hash: /K3j+69Uadz9nL/v4SVVDVFyphov0coGOp9763CoHxk=)
                          2: 28QSm-nWPh3k170EUdx31IY1dMI.roa (hash: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4=)
                          3: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (hash: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs=)
                          4: PFnY4kTboScF7x2R1W4dqWTPCxQ.roa (hash: XbKsqDkCVh90zaTGGDz8GhZpOlFD7W7OIgl1sSXpZIo=)
                          5: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: ohtT2lTvWF6R4JujcRBLrcXG3pTxIolCzcrGCkBnIpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:55:a5:03:67:32:ef:fc:d3:81:85:45:9a:b5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
        Validity
            Not Before: Jan 26 01:01:55 2026 GMT
            Not After : Jan 27 01:01:55 2026 GMT
        Subject: CN=ec02f1e656b1443821e013087b98b58f0ecc5c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:47:12:01:9c:19:77:a3:d3:00:0f:1a:4f:
                    bb:15:7f:9d:bb:25:33:9d:6f:39:56:ff:83:6d:22:
                    86:d6:68:80:8b:e2:7d:78:18:cb:9e:1c:28:fa:1e:
                    bd:21:8e:c7:c4:80:be:a4:38:1c:e2:5b:52:01:e3:
                    fc:50:6d:4a:f6:54:db:4d:0e:32:4f:da:e0:e5:f2:
                    ef:75:4f:c2:02:92:98:bc:34:82:71:07:c6:71:97:
                    3a:14:1e:ba:32:ee:6f:6f:86:4d:e7:44:ea:f6:33:
                    10:4c:10:89:37:1e:6e:b8:b9:d8:c7:ef:76:8c:b0:
                    74:6a:9a:f8:b8:7b:60:0d:90:3a:ec:aa:2e:12:96:
                    2a:f8:09:e2:b2:19:bd:ae:ef:07:dc:7c:2e:ec:64:
                    85:18:2a:59:95:3d:6d:b5:34:6f:30:18:df:72:e9:
                    b7:ab:82:56:52:7c:db:31:49:9b:56:a5:c8:0d:7d:
                    a9:d9:f6:95:92:7f:cd:9c:1d:f6:e5:97:3d:12:65:
                    f5:25:61:8f:78:2f:fb:9e:30:9d:8b:91:31:49:46:
                    23:8a:20:7e:6d:1c:db:ad:2f:69:dc:dc:e9:7f:8f:
                    9b:d8:08:32:4c:52:8b:95:43:19:ff:08:e9:f2:68:
                    2c:88:11:01:e1:29:c8:74:18:01:4a:7e:b0:a6:5c:
                    e5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:02:F1:E6:56:B1:44:38:21:E0:13:08:7B:98:B5:8F:0E:CC:5C:02
            X509v3 Authority Key Identifier:
                keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:58:7b:51:12:08:f1:80:01:2d:48:21:03:3d:e1:00:e4:
         3a:e8:2a:2c:d0:8a:6a:ba:8b:29:8e:f5:a9:7d:3c:57:a9:55:
         43:97:65:fe:fa:bd:e9:fd:48:fa:2a:5b:81:5a:38:9c:17:f6:
         a7:41:94:d3:c9:e9:44:a2:31:25:e5:97:96:45:1a:a3:11:b2:
         9a:cb:60:ee:cb:35:fc:8b:0b:11:9b:3b:16:5e:87:b2:75:c1:
         a7:66:f6:ce:5a:10:34:8c:66:2b:61:2e:44:8a:2a:d9:a0:59:
         7e:49:be:30:71:c9:79:18:7d:9e:5a:fa:d0:9b:d7:e7:90:39:
         81:a3:d2:2c:47:b7:68:00:75:34:6c:13:05:e6:19:e0:e7:03:
         69:d7:f5:0d:c5:20:c6:fe:56:d2:11:23:90:47:cf:1b:97:18:
         4e:0c:b6:d6:5d:b9:2c:72:d4:17:30:ff:3d:d1:e2:53:58:7b:
         05:98:77:40:a4:f1:27:d9:15:5c:35:6c:68:0f:f9:ed:eb:22:
         e1:97:d2:c7:38:5f:5c:9b:ba:66:e5:92:51:70:0a:6b:82:5e:
         cd:3d:43:aa:d0:4c:30:38:74:e6:e2:e1:be:56:5d:ca:e1:15:
         4a:67:42:06:da:14:ed:65:0d:e9:67:3c:43:41:df:56:24:1e:
         3d:9d:1e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:02 2026 by rpki-client