This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
File:                     1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft (raw, json)
Hash identifier:          xBZkUOuKgNFDYmebzyzYEAtlvO7N+28xbKE/932tCZ0=
Subject key identifier:   33:72:B2:16:78:39:74:FF:01:91:02:8E:FE:F6:34:B6:E0:C7:12:15
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Certificate issuer:       /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial:       019BB0CBDA5F17EFD34026F1830BDA28D6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
Manifest number:          150D
Signing time:             Mon 12 Jan 2026 06:01:48 +0000
Manifest this update:     Mon 12 Jan 2026 06:01:48 +0000
Manifest next update:     Tue 13 Jan 2026 06:01:48 +0000
Files and hashes:         1: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl (hash: aZ2x9TWQw1bbUb5GmIjXev6weeZE8nOYDUkBRK+iIRE=)
                          2: 9-lOR-hr6xX4Iqb6TkWpzgWJVtM.roa (hash: QFUCnItf2DXd0w61i2uA3KR8HGTe8KP/hpaTD9qLq9I=)
                          3: FUSrBx5nHnlTGB6ewg5v8yqgXPU.roa (hash: 2MUjqPWuE0Az4HiuRSuLiJ3ZQ8HNjqYEJSlT6u/vtLo=)
                          4: GwCzD9FFv6UW4pNA3eaQKR9j9mI.roa (hash: TA9caw06vX3cAwsvnlfzFIGIz9Jk4HhI13HJqaNn7p8=)
                          5: J_ldszbL0k3PQMB-yvrWgDzEcus.roa (hash: Tgjn0inAyBtfHKiRwOLkG5q/UL6Pd6XY6ZxkS49r860=)
                          6: M1haVXqPOvnr0M8YD8F0YeZUvPQ.roa (hash: 1273tbmqWVfCsPa/v1kUBewWpBdKXZmtQ2j4FIBXvLk=)
                          7: qTpf6S-Df4WnD3GxtEZFBJ7i82c.roa (hash: OuzXwAbmKAynIDu/QFRmd7J+ekh/mEkHcmMZ5BTrW/E=)
                          8: s5Aba34aWqyN0NdTLOhM3Uae9Ks.roa (hash: 9SQoDZzqv1EeYPtHTjtGPqXq8iWnUavkQUs9luuG8XE=)
                          9: u_51fQD42al7LsisB7PSRjRKNWI.roa (hash: ZKYYBG5jADPnWWb+8Mf3B2+le8UTdbTbVrJsQVvAL6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b0:cb:da:5f:17:ef:d3:40:26:f1:83:0b:da:28:d6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
        Validity
            Not Before: Jan 12 06:01:48 2026 GMT
            Not After : Jan 13 06:01:48 2026 GMT
        Subject: CN=3372b216783974ff0191028efef634b6e0c71215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:3a:d1:64:14:a9:e9:88:e2:28:8f:14:a8:
                    76:ca:27:f1:f2:cb:e5:b2:ec:12:2e:f2:16:bb:6e:
                    9f:c5:6f:0a:b3:79:0d:52:a8:ad:08:ba:1d:36:0d:
                    e4:b4:0f:16:4f:cf:c4:0d:99:cc:43:28:72:09:3d:
                    5b:e7:0c:be:26:b5:cc:fb:a9:a0:98:70:e7:4a:38:
                    f4:27:34:96:ba:97:0c:b1:b3:0e:a8:5b:94:94:d5:
                    22:16:9a:65:06:21:ee:ab:7c:ff:89:48:b4:ce:26:
                    25:0a:1f:11:ed:f1:9a:9e:d3:15:50:2b:5d:f4:c4:
                    4d:61:b3:64:60:7b:a1:eb:a5:82:1e:1e:09:48:f5:
                    2f:cd:9c:ec:c7:4f:ca:ad:4d:88:fd:b0:b6:a3:f6:
                    14:8c:8c:56:c7:5c:b4:91:2e:16:47:80:cb:fb:56:
                    c3:cc:b6:e0:86:f6:c2:40:6a:e8:06:a4:3b:f4:fc:
                    c7:48:07:ae:ad:ae:26:e1:e6:3e:8e:17:c5:21:e9:
                    fc:29:5a:ea:fa:c8:dd:95:50:10:90:6e:97:e1:21:
                    6f:b4:02:9d:ec:e3:26:3f:63:8a:10:8a:d6:49:56:
                    17:d4:5a:01:71:a5:24:d4:e2:d8:00:38:73:4a:a8:
                    fe:e4:b5:f6:c7:55:f0:c5:9f:75:65:13:e7:21:7f:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:72:B2:16:78:39:74:FF:01:91:02:8E:FE:F6:34:B6:E0:C7:12:15
            X509v3 Authority Key Identifier:
                keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:50:1d:05:33:bc:b2:bf:aa:a4:ce:2b:8b:f2:6d:a8:06:8f:
         fc:04:01:22:88:1c:d2:df:c2:b0:d6:5b:18:22:a9:fa:00:a3:
         40:7e:e8:75:d8:f5:66:98:93:00:98:9a:c7:26:b5:d5:3b:07:
         1b:0d:c2:a1:e5:42:95:a4:26:93:2a:81:d8:3e:c5:3e:29:0f:
         36:ad:2c:a3:69:8a:8a:96:6b:c0:c8:b8:57:4b:ac:dc:91:81:
         78:c9:13:f3:2b:87:fc:cd:a6:e2:d1:57:2a:f3:81:9e:0d:83:
         f5:07:bd:4a:c2:ea:0d:98:2b:03:c1:bd:0a:e4:4d:e1:56:3c:
         78:cd:96:2e:d7:c6:06:02:6e:17:3a:1e:45:c7:5b:7f:8d:05:
         87:18:de:ba:43:e3:83:14:c1:10:7f:15:e1:cd:64:0d:b3:55:
         f0:75:c2:f4:66:89:63:b3:e1:9f:cf:ee:49:0e:11:39:52:f7:
         06:31:8a:55:be:b2:85:dd:56:fe:7a:f1:f9:4a:91:88:5c:1b:
         11:22:d2:da:01:0b:30:4a:9a:d1:88:36:c5:a1:d0:d0:df:07:
         1f:ad:44:54:32:e1:01:b1:a8:a2:a4:f2:6a:26:c7:24:62:f4:
         57:d7:e6:a4:34:88:87:59:ad:45:9c:3f:81:71:17:8c:ed:60:
         ba:d1:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:33:37 2026 by rpki-client