This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File:                     Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier:          HKNvjnbj6gKpieFCI5FMyLVJmbyeqcYOSuPHeYRbE/U=
Subject key identifier:   46:D4:6E:2B:60:37:98:1A:03:50:37:60:DA:3F:D5:DF:EE:42:85:AB
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer:       /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial:       019BAE01B1350FB5F89ADEBA02541C9BAACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number:          1756
Signing time:             Sun 11 Jan 2026 17:01:44 +0000
Manifest this update:     Sun 11 Jan 2026 17:01:44 +0000
Manifest next update:     Mon 12 Jan 2026 17:01:44 +0000
Files and hashes:         1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
                          2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: R+vh+7FlLNE1OPrcN5L0c1ZUikgQ0F6ZDQ7+7kAu3DM=)
                          3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 17:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ae:01:b1:35:0f:b5:f8:9a:de:ba:02:54:1c:9b:aa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
        Validity
            Not Before: Jan 11 17:01:44 2026 GMT
            Not After : Jan 12 17:01:44 2026 GMT
        Subject: CN=46d46e2b6037981a03503760da3fd5dfee4285ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:7d:88:38:7a:27:3d:9d:95:c1:a0:45:ed:
                    c9:2b:db:9f:2f:59:90:0a:2c:0f:1b:e3:3c:6b:c2:
                    b9:59:a8:66:1b:0c:d4:f9:ac:65:87:42:f3:f9:7c:
                    4a:72:01:a2:14:eb:0e:13:5d:14:2f:65:40:11:33:
                    b4:ef:5f:b9:a5:af:0f:90:34:f7:8d:03:d4:47:cf:
                    1e:f4:ec:d5:4c:e4:40:52:07:34:8d:64:30:bf:33:
                    f7:af:0a:49:13:d2:01:a1:75:f9:46:ee:29:01:e4:
                    f5:df:06:bf:87:79:90:a1:f1:8c:4b:3e:b9:11:e7:
                    13:ff:34:30:12:c7:bf:0b:c9:bb:32:29:2d:fa:51:
                    be:da:94:ec:82:18:89:93:51:67:5f:07:c1:64:4a:
                    d5:75:18:b5:d6:0f:9f:a8:d8:ec:28:49:b6:3b:1f:
                    ab:ac:0d:a7:63:78:58:0f:da:0c:d4:d8:e9:f6:04:
                    e6:98:82:a1:67:32:1a:2d:14:a0:a9:f9:91:af:7b:
                    59:2c:e0:54:82:c4:d9:26:bc:c2:86:76:28:df:8a:
                    6d:12:7f:b7:c2:9d:bc:fb:a4:a7:74:7c:1e:40:72:
                    4d:4d:55:d3:4c:d5:17:3a:c8:e8:83:97:96:98:ed:
                    60:51:22:bb:24:b9:53:69:8a:41:bb:4b:b4:52:92:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D4:6E:2B:60:37:98:1A:03:50:37:60:DA:3F:D5:DF:EE:42:85:AB
            X509v3 Authority Key Identifier:
                keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:05:b6:38:f8:bb:35:0e:d1:07:0b:9f:aa:10:45:22:f2:
         47:40:33:f5:b3:fb:83:57:e7:e3:9c:5a:ae:14:25:b8:15:e5:
         58:eb:ba:e0:35:c9:a9:28:07:f5:0f:6f:9d:9e:ae:45:01:23:
         d1:74:12:b8:a5:1a:7c:d3:4e:11:38:b3:be:da:dd:69:82:7c:
         65:16:a8:40:ff:a8:b0:7c:c1:71:23:72:82:5c:74:85:39:46:
         aa:f8:34:d0:a4:04:90:6c:01:8d:45:41:cf:0d:4f:e1:0e:a1:
         be:26:85:73:70:ce:a1:a3:15:65:d7:5c:01:27:f1:46:25:f3:
         c5:45:b8:fd:8f:dd:93:3d:0e:9b:bd:07:6f:09:c9:46:98:30:
         1f:b8:3e:13:50:e1:e1:e9:c6:1a:2d:21:6d:4c:a5:2d:74:30:
         bf:9e:e7:48:3d:9b:f0:4a:99:e2:1b:fd:eb:50:ee:7c:e5:c1:
         1a:5d:24:97:6d:1b:65:56:4a:d2:02:b9:2c:67:88:95:9a:ce:
         db:8c:46:bc:7b:44:17:32:af:31:05:42:b8:df:72:08:c3:94:
         88:bc:97:e2:68:00:30:0c:89:e6:82:a9:d3:01:c1:d0:de:69:
         c7:ba:17:b7:3d:e3:b1:e5:fc:d8:e8:81:70:43:4b:4a:1f:6a:
         2e:36:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:18:16 2026 by rpki-client