This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          H+OH5GMDeUgWjkJBCeJ4p6/3RFAc7+ycNS7HrcQfSHc=
Subject key identifier:   4C:F4:B5:F1:8D:4A:0D:A1:AF:67:F7:BB:14:FD:A7:4E:B4:AB:71:01
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019BBDAAC2478ACA66E1F73DAFBCC9167522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          10ED
Signing time:             Wed 14 Jan 2026 18:00:43 +0000
Manifest this update:     Wed 14 Jan 2026 18:00:43 +0000
Manifest next update:     Thu 15 Jan 2026 18:00:43 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: vVHyLTTbzx3rfboLQ3PI1EGPKStrakjc7M1zpI7jU1Q=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Jan 2026 14:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:bd:aa:c2:47:8a:ca:66:e1:f7:3d:af:bc:c9:16:75:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan 14 18:00:43 2026 GMT
            Not After : Jan 15 18:00:43 2026 GMT
        Subject: CN=4cf4b5f18d4a0da1af67f7bb14fda74eb4ab7101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:6e:58:66:2c:85:e3:60:73:05:78:e4:aa:
                    d7:69:c3:a3:d7:74:c1:39:41:58:f2:8c:d6:a0:c7:
                    7a:af:a9:b8:e5:05:b2:fa:ec:96:42:df:27:f2:da:
                    c2:26:27:aa:c2:67:da:4a:1d:da:4b:b8:0e:a3:20:
                    86:38:52:ac:cf:0d:6d:67:d6:e3:b6:5c:8c:5b:a2:
                    16:b4:6c:07:f7:a4:af:06:dc:97:1d:ba:cb:a4:76:
                    37:34:bd:fa:d5:34:58:4e:54:59:a2:a5:33:82:76:
                    19:4f:f0:e2:7a:fa:c2:b8:31:5d:d1:0a:0c:c8:81:
                    da:3b:c4:09:56:d6:29:11:0b:f5:1e:4a:1c:2b:7c:
                    50:2c:7c:d9:64:2a:f6:a6:97:78:69:f1:55:61:ee:
                    a6:a1:05:c1:9d:8d:b1:fc:1b:cc:75:f5:14:c7:1a:
                    28:5a:1b:17:36:f7:96:dd:92:ab:38:4d:67:33:1f:
                    9f:57:3e:aa:9c:0c:27:5f:8a:91:8b:19:42:75:25:
                    c1:b4:6a:45:5b:45:02:81:46:36:68:c4:e5:4f:b0:
                    1e:68:39:d6:2b:69:3d:d2:9a:34:fc:2b:80:ca:b0:
                    f0:97:3f:bb:e0:fd:4e:4a:1c:1e:72:a9:c5:94:63:
                    9e:69:e6:66:ee:f7:81:4d:0b:67:ed:a0:4d:ca:49:
                    81:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F4:B5:F1:8D:4A:0D:A1:AF:67:F7:BB:14:FD:A7:4E:B4:AB:71:01
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:32:a4:88:b8:81:27:31:2e:64:83:69:9a:bc:05:18:ed:54:
         4c:f8:e5:d0:e5:95:61:f6:eb:68:7e:35:12:15:db:05:6e:5a:
         c0:75:0b:fc:5d:0a:b0:b0:fb:03:7c:40:53:b9:a6:2a:51:61:
         65:03:ad:17:16:65:ea:1d:67:2f:f1:38:e2:7c:a3:09:52:c3:
         07:e1:09:19:b4:04:73:d5:9f:21:ee:43:37:cc:ed:a3:03:5d:
         ad:c0:e8:39:fc:0b:d5:e9:96:e9:51:25:b6:66:da:30:7b:be:
         71:82:0a:58:82:e7:88:0e:36:4f:8b:dd:4e:20:3f:03:30:bc:
         88:ee:97:84:05:a7:e0:56:96:7c:82:ca:25:25:35:81:29:39:
         ed:35:fa:a5:c8:2b:48:79:ae:9a:c8:14:2b:f7:f3:e9:ee:0f:
         85:18:e8:0a:06:fe:b7:de:f5:18:6a:17:77:3c:ab:3d:d2:f2:
         f0:26:84:df:9b:32:7a:1e:6b:fc:78:93:05:3b:54:ea:f5:3d:
         0a:38:15:a7:7f:33:65:7f:38:54:cc:af:14:0a:87:04:6b:c7:
         cb:25:0f:fb:9a:65:3d:da:d8:d0:74:f6:46:72:86:45:39:77:
         cf:16:e7:45:38:29:9d:19:89:21:94:57:27:e5:4b:dc:29:b6:
         84:f0:42:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 20:41:14 2026 by rpki-client