This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          yRKAKW0aq1gnQF5drwpgJ3jGd7l84CZducJibeIf5ak=
Subject key identifier:   41:AB:E7:B6:8C:DD:1F:F2:18:91:61:CB:A1:A3:0F:F0:A6:2E:21:3D
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019BB1023D77261DE099B7D81132387D6528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0ABC
Signing time:             Mon 12 Jan 2026 07:01:12 +0000
Manifest this update:     Mon 12 Jan 2026 07:01:12 +0000
Manifest next update:     Tue 13 Jan 2026 07:01:12 +0000
Files and hashes:         1: 2krvIRPRsTOPomVMfCPNZSLLFks.roa (hash: P0BkghxyDkTPiHFvyXDN/scxvrKFV/bbDjO/nIHvYBI=)
                          2: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=)
                          3: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=)
                          4: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=)
                          5: DbUcvr80clIUT4IVIfDV-VI3N3g.roa (hash: APkVSFKtYlODE7JqxCSucRJZgTgEFA/Qhz55cg0GRaQ=)
                          6: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=)
                          7: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=)
                          8: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=)
                          9: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=)
                          10: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=)
                          11: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=)
                          12: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=)
                          13: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: HhR9/xV8LnQSffBf+X37x1v8AX4NWZZKa5mGWFEU16U=)
                          14: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=)
                          15: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=)
                          16: VJjmO9EvIfrYPoqDEUyFjqMHbZ8.roa (hash: hTK/fUlWhD426615kQguC/lNL2uwrsTaqrZgBY7PNd4=)
                          17: Z6Y454y-5irLUB1HnESLpIVfLbQ.roa (hash: tFEKXtRhTAllzQn72vhDbzuqR5U15UaBRpVFyO2xYs0=)
                          18: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=)
                          19: _xskEv4E93buhDkLdrQYmZAO0nE.roa (hash: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw=)
                          20: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=)
                          21: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=)
                          22: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=)
                          23: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=)
                          24: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=)
                          25: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=)
                          26: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=)
                          27: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=)
                          28: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=)
                          29: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=)
                          30: trwy9YK-SnrnYyYORbn93V30iRo.roa (hash: LTdq87i4sWmABMo13psUfyUJvjXH3JCzB1hcKoT/PNU=)
                          31: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b1:02:3d:77:26:1d:e0:99:b7:d8:11:32:38:7d:65:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Jan 12 07:01:12 2026 GMT
            Not After : Jan 13 07:01:12 2026 GMT
        Subject: CN=41abe7b68cdd1ff2189161cba1a30ff0a62e213d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:ca:f2:c1:29:fb:b3:e8:30:84:eb:60:9e:
                    18:4d:03:e3:9a:de:1c:a4:3f:f1:df:4c:d8:4b:64:
                    ed:9d:98:01:c2:d8:b8:7b:4d:1b:b0:88:fe:29:94:
                    46:c6:f2:24:15:d4:6d:99:b7:1b:cb:c8:1a:d9:61:
                    15:d0:98:f8:7a:c2:b1:17:63:fb:de:1c:20:dd:71:
                    9a:01:4d:e6:9f:d4:19:08:8f:92:da:36:80:e8:fa:
                    66:5d:4b:8a:87:b6:46:45:a7:13:1a:da:a7:79:ea:
                    c4:04:64:c3:4a:16:66:62:82:08:32:ce:02:a3:1f:
                    6e:b6:6f:9d:c7:e5:d6:f5:e5:71:dd:d7:f5:88:5c:
                    fe:14:6b:d0:9b:d6:48:48:63:2d:e2:be:66:b7:a3:
                    00:4b:40:af:65:51:59:22:ac:27:f2:19:ba:aa:9a:
                    18:4b:76:e2:a2:c4:32:c2:60:5c:fb:8c:d4:e3:6c:
                    7c:d1:2c:e4:3e:39:20:c9:a9:e9:ba:9d:a2:4d:ce:
                    d0:6d:0c:33:b3:e0:a0:ab:6c:ef:95:48:18:36:be:
                    f1:e3:53:bb:0e:fb:a3:7a:bb:5c:47:43:23:e7:02:
                    e9:57:26:d6:65:76:3e:57:23:e5:a6:97:c4:0c:bd:
                    c5:be:eb:29:22:8d:d4:11:59:ce:8f:f6:18:f3:e9:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AB:E7:B6:8C:DD:1F:F2:18:91:61:CB:A1:A3:0F:F0:A6:2E:21:3D
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:45:a7:fe:6e:76:0c:3c:5f:32:f1:11:1b:4f:f3:fa:33:9e:
         9d:77:2c:a3:c2:53:2e:e3:b3:86:9d:05:cd:58:17:d0:ab:6c:
         21:a4:1e:cf:13:8b:2f:76:82:f4:c3:5b:57:2e:0d:bc:29:bc:
         07:e5:65:29:04:c4:cb:d3:17:ea:f0:52:2f:d2:67:19:10:25:
         4d:61:73:3d:9b:46:7f:ef:a4:8f:47:ea:b5:24:e5:67:0d:f1:
         2f:51:d6:15:98:2d:47:d6:2e:4b:fa:b7:28:f9:90:05:06:9a:
         1f:1e:d2:f2:d8:d8:cb:8a:9e:1c:ad:82:29:d8:1f:a7:cd:d2:
         c2:3b:35:13:7e:d3:29:fc:c9:36:e4:2b:aa:24:63:be:19:4a:
         b6:4c:7d:40:ee:ec:14:cc:da:24:d9:f2:43:a0:7b:75:93:3b:
         64:70:40:ff:91:39:04:ff:e7:b4:8b:d6:c0:b4:f4:5b:e7:e7:
         de:6c:72:27:c1:8f:5e:f0:09:d6:a8:cf:ec:5c:d2:f6:82:93:
         b3:dc:10:89:16:53:db:1e:28:4a:31:f6:e8:0c:30:05:d5:a4:
         9e:cb:3c:e5:a0:dc:31:29:fb:a4:6f:e3:9e:21:df:6f:52:8f:
         71:80:c8:4d:fd:df:f7:8c:86:1e:1a:23:d9:fb:81:55:c4:45:
         c1:b0:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:22:16 2026 by rpki-client