This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File:                     E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier:          euycQzejDYu2nRT/kr/sNfExaJ5TH5FfU5wVwSm2flg=
Subject key identifier:   A0:06:70:E6:26:F4:67:C1:AA:74:F9:EA:DB:52:51:E9:1F:11:40:36
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer:       /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial:       019B8FF6AB5CD3936CFC34D41AD33B685E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number:          17B4
Signing time:             Mon 05 Jan 2026 21:01:06 +0000
Manifest this update:     Mon 05 Jan 2026 21:01:06 +0000
Manifest next update:     Tue 06 Jan 2026 21:01:06 +0000
Files and hashes:         1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: X2eAOWPNN0dngOG/YhSkmAyZAJSikpSuaamYZdbvN+0=)
                          2: MxK4lS7Htpm_IH-kALADE2GeLuc.roa (hash: U74MFGGkriXB1g/dSBw5TFkgPOsV3rgpaQhg7Zx0jH8=)
                          3: ik6Wjgaqct3SJRlBNzDl9R2Qc5o.roa (hash: WLV2A1EfMAOyhSJNkWJ5jsFbrKEgL/UGX1+Lvgg6md8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8f:f6:ab:5c:d3:93:6c:fc:34:d4:1a:d3:3b:68:5e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
        Validity
            Not Before: Jan  5 21:01:06 2026 GMT
            Not After : Jan  6 21:01:06 2026 GMT
        Subject: CN=a00670e626f467c1aa74f9eadb5251e91f114036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:34:55:05:76:d2:43:b7:f7:cf:68:f3:a9:
                    76:93:7a:9e:c0:80:61:d2:00:45:6c:c9:b2:90:1d:
                    87:8b:b1:71:41:8d:65:24:53:ae:37:a7:f0:80:c7:
                    bb:23:38:f8:e2:9b:bd:3b:fa:50:1c:ca:18:07:99:
                    b9:b8:92:ee:84:c8:b8:4e:c1:39:3f:6c:80:b8:39:
                    62:9d:fb:65:67:f8:79:92:f6:a0:1e:79:d0:83:1c:
                    48:07:05:94:d1:c8:e5:90:e9:21:6a:dc:42:dc:5c:
                    8e:3c:5d:f2:18:13:c6:51:22:09:7d:25:d9:d7:d1:
                    7b:38:82:89:8d:03:e9:4e:32:d0:2a:b6:b5:fc:be:
                    87:96:84:b3:f2:db:d9:24:a6:34:be:b7:6c:8f:b0:
                    20:b3:87:6a:01:9e:83:37:83:bc:4c:b6:f9:3d:4d:
                    8f:9d:90:ad:64:b6:5a:cb:df:37:c9:5f:6b:f8:0b:
                    91:4c:50:7f:a8:60:92:51:a9:33:74:f6:fe:e3:42:
                    87:8d:60:09:1d:74:68:93:e3:9f:af:aa:36:41:8f:
                    57:dc:ea:9e:65:23:68:ff:6a:ad:26:02:90:05:5a:
                    99:35:5f:40:71:f8:c4:b3:c8:46:3a:94:9f:2d:d4:
                    8c:b5:ca:d1:34:20:0c:6d:83:ca:9f:88:5d:77:5e:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:06:70:E6:26:F4:67:C1:AA:74:F9:EA:DB:52:51:E9:1F:11:40:36
            X509v3 Authority Key Identifier:
                keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4a:6e:ee:f9:76:cd:f1:86:ab:3e:89:8d:16:e4:66:b7:ad:
         f4:d8:00:e6:cb:53:ee:7d:cc:0d:b9:b6:61:f9:c6:69:31:a1:
         a7:40:8a:15:ef:cd:2d:c5:9b:96:a0:cf:97:f6:67:46:71:be:
         db:32:f5:7e:58:0b:c6:d1:00:ae:a0:f4:d5:77:d0:4b:41:b7:
         e6:d2:1f:a7:1d:95:26:3c:92:d2:b1:47:07:aa:58:cb:01:f3:
         48:c5:d4:67:af:a2:c4:e6:69:ad:e6:b0:13:dc:6c:d5:e5:8a:
         75:a0:53:2e:17:0c:cd:99:4c:ac:25:03:cc:71:b9:2f:9a:d3:
         0d:29:a1:86:f1:ef:c6:60:9f:ce:22:a9:6e:66:86:01:ac:09:
         7c:4e:cf:4d:11:9a:87:01:8a:86:d3:88:cc:ce:31:f5:fe:76:
         bd:0d:17:73:db:84:18:b8:7f:ce:bf:3c:75:b6:09:5b:d5:f4:
         40:f7:c6:1e:32:53:89:d4:84:b7:74:b6:88:5d:30:f5:1c:d7:
         64:83:ba:29:4b:ea:b8:44:6e:11:34:06:f2:05:b0:7a:f1:c6:
         ee:ba:da:c4:e1:d3:d3:38:54:aa:fd:0e:f3:56:ac:f1:9b:2c:
         44:99:00:a3:d3:90:40:a9:4b:88:bd:4a:75:c6:bc:23:b7:bc:
         56:4d:31:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuP9qtc05Ns/DTUGtM7aF6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWRmNGJlMzEzYWUxYzFiZTY5ODgxZTJlNDQ0N2VmMmJm
MGIxOTYwHhcNMjYwMTA1MjEwMTA2WhcNMjYwMTA2MjEwMTA2WjAzMTEwLwYDVQQD
EyhhMDA2NzBlNjI2ZjQ2N2MxYWE3NGY5ZWFkYjUyNTFlOTFmMTE0MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X00VQV20kO3989o86l2k3qewIBh
0gBFbMmykB2Hi7FxQY1lJFOuN6fwgMe7Izj44pu9O/pQHMoYB5m5uJLuhMi4TsE5
P2yAuDlinftlZ/h5kvagHnnQgxxIBwWU0cjlkOkhatxC3FyOPF3yGBPGUSIJfSXZ
19F7OIKJjQPpTjLQKra1/L6HloSz8tvZJKY0vrdsj7Ags4dqAZ6DN4O8TLb5PU2P
nZCtZLZay983yV9r+AuRTFB/qGCSUakzdPb+40KHjWAJHXRok+Ofr6o2QY9X3Oqe
ZSNo/2qtJgKQBVqZNV9AcfjEs8hGOpSfLdSMtcrRNCAMbYPKn4hdd15EwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAGcOYm9GfBqnT56ttSUekfEUA2MB8GA1UdIwQY
MBaAFBPt9L4xOuHBvmmIHi5ER+8r8LGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEt
YjQxMzM1YjAwNTg3LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEtYjQxMzM1YjAwNTg3
LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakpu7vl2
zfGGqz6JjRbkZret9NgA5stT7n3MDbm2YfnGaTGhp0CKFe/NLcWblqDPl/ZnRnG+
2zL1flgLxtEArqD01XfQS0G35tIfpx2VJjyS0rFHB6pYywHzSMXUZ6+ixOZpreaw
E9xs1eWKdaBTLhcMzZlMrCUDzHG5L5rTDSmhhvHvxmCfziKpbmaGAawJfE7PTRGa
hwGKhtOIzM4x9f52vQ0Xc9uEGLh/zr88dbYJW9X0QPfGHjJTidSEt3S2iF0w9RzX
ZIO6KUvquERuETQG8gWwevHG7rraxOHT0zhUqv0O81as8ZssRJkAo9OQQKlLiL1K
dca8I7e8Vk0xOQ==
-----END CERTIFICATE-----
Generated at Tue Jan 6 01:47:47 2026 by rpki-client