This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File:                     96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier:          jpBOmoM9JeHfSYahpKBnvTjAahrd+iqymc/TuTZS1kc=
Subject key identifier:   E8:61:8A:D4:83:37:A7:00:74:86:48:BF:9D:FA:A1:33:5E:15:9A:48
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer:       /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial:       019B97423E8C0824E9782642EE981904A1FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number:          13B7
Signing time:             Wed 07 Jan 2026 07:00:59 +0000
Manifest this update:     Wed 07 Jan 2026 07:00:59 +0000
Manifest next update:     Thu 08 Jan 2026 07:00:59 +0000
Files and hashes:         1: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: JjbMnNYwB0JcIHMb7z1B7AJ0MrDIiA8zd6MLeykamxo=)
                          2: g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa (hash: ENAgFJa6dqHP3ZHjhcKA/BIcppzlZ/9wq2mVnrsfeV8=)
                          3: lJb5lAFohzfMydj804z3JPUVnyc.roa (hash: PyjYKIx7mQvs4uA+2fO0dKGHiZ5xO9frfNP8obB2rXI=)
                          4: s280gYIfz7LLg7UI8DnH_9zZ-nc.roa (hash: 0XvpQfwjTnUeeYMt2sG5z+LAZnoLxsExJ4JPz1TlC3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:97:42:3e:8c:08:24:e9:78:26:42:ee:98:19:04:a1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
        Validity
            Not Before: Jan  7 07:00:59 2026 GMT
            Not After : Jan  8 07:00:59 2026 GMT
        Subject: CN=e8618ad48337a700748648bf9dfaa1335e159a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:40:88:ae:2d:e8:1a:9a:5b:2c:6d:7a:9c:
                    e7:46:58:d6:7a:b1:3c:9d:1e:04:6a:d9:a6:05:0e:
                    5b:ce:48:8f:36:e9:ca:69:e8:aa:44:23:c2:25:91:
                    9c:0a:f8:ae:a8:8f:42:e5:8a:e0:8c:20:3c:55:59:
                    1b:96:81:43:b4:81:39:51:83:4c:cd:0f:85:a3:c4:
                    8c:9e:9d:09:08:01:7c:e5:ad:54:83:09:6a:ac:4c:
                    b2:53:bc:6c:4e:13:9c:68:1e:d2:07:97:b9:5e:a8:
                    6d:44:cf:f5:b0:54:88:95:2a:81:83:75:5f:9e:70:
                    b6:71:08:a6:53:92:03:ca:12:bd:3a:7b:64:1b:86:
                    70:f7:31:bf:4b:65:c2:73:17:74:fe:53:ef:fd:eb:
                    aa:8f:17:84:4c:0e:7f:85:a1:8f:45:1d:1b:23:c7:
                    f9:33:95:75:4d:18:d9:ca:2b:64:4c:e0:27:83:ac:
                    66:44:aa:c6:76:56:56:1d:f4:b5:23:67:a0:26:94:
                    10:5e:e0:a5:bd:d9:46:f9:e1:11:68:60:dd:a0:83:
                    d7:e3:71:b9:cf:ae:0c:50:61:b5:80:54:6c:59:c3:
                    ac:db:c7:23:26:01:4b:c4:b6:8f:c6:55:10:de:dc:
                    68:29:80:4a:a2:ef:ce:35:91:f6:c0:05:6f:68:8c:
                    af:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:61:8A:D4:83:37:A7:00:74:86:48:BF:9D:FA:A1:33:5E:15:9A:48
            X509v3 Authority Key Identifier:
                keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:01:f5:9b:14:6a:74:df:df:0e:f8:11:fd:01:31:6b:8f:a3:
         0e:7e:8c:df:39:43:d2:2d:9d:4e:26:37:7e:43:9a:ec:ad:53:
         56:ca:20:06:37:cb:9d:c0:9f:65:88:a7:1c:62:c9:9d:25:27:
         b3:9a:8d:06:df:b9:fb:5f:09:2d:15:2d:3a:e4:18:8e:cb:ff:
         e1:47:2b:e5:99:8e:d8:70:d2:60:15:37:63:57:83:41:36:d5:
         31:79:85:3d:ac:12:1e:21:fd:42:04:15:9b:54:07:7b:a8:c9:
         f5:7f:97:76:42:a0:86:6d:72:57:c6:7a:47:41:71:40:75:c5:
         d4:41:00:a0:5d:2b:28:59:5b:03:c5:5d:52:1d:22:b2:19:29:
         eb:16:f5:70:f6:09:85:7e:7e:02:6a:ed:30:9e:b4:ef:d4:33:
         59:d0:d4:49:36:87:be:99:7f:fd:e0:f4:d5:14:9e:b1:9b:9f:
         61:8c:aa:82:9b:5a:37:f3:2a:4c:1d:6c:9a:10:66:0e:e1:7f:
         25:4b:2f:e0:38:08:96:da:8d:1b:ad:08:26:a9:f9:f8:c7:97:
         cd:45:35:fb:31:4c:a1:f0:e0:43:05:e5:4b:74:90:d3:60:5b:
         2f:05:14:0d:1e:26:92:f1:4d:99:15:be:de:0e:ab:de:9c:ce:
         74:9c:12:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:07:35 2026 by rpki-client