This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          I+TRPobtbLzwBex4PqXDTxic4Jw5srXLOSTNr8fcaNw=
Subject key identifier:   4C:FA:1C:02:2B:42:0D:07:B6:43:DB:E1:F2:FD:18:5D:17:98:37:45
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019BEA16528B1F16FF31836104A7FC8C5DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          1104
Signing time:             Fri 23 Jan 2026 09:01:29 +0000
Manifest this update:     Fri 23 Jan 2026 09:01:29 +0000
Manifest next update:     Sat 24 Jan 2026 09:01:29 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 5IufQecdUhd9Ppg9NrX1IAiIjHBMPjfVexW0X9LWzBE=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ea:16:52:8b:1f:16:ff:31:83:61:04:a7:fc:8c:5d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan 23 09:01:29 2026 GMT
            Not After : Jan 24 09:01:29 2026 GMT
        Subject: CN=4cfa1c022b420d07b643dbe1f2fd185d17983745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a2:ab:e6:98:96:91:df:22:4a:51:5d:c2:30:
                    c3:2e:b5:a7:0b:4f:e3:78:b1:c0:d9:2c:ce:78:c4:
                    53:0e:0a:69:fd:6a:d2:ec:73:00:f5:f6:6f:47:d2:
                    69:7e:23:3e:ab:f2:38:b9:ac:c0:64:d1:45:96:30:
                    ed:c7:78:f4:29:85:b5:4d:fe:55:5a:2c:bf:d4:45:
                    ef:11:c2:99:15:06:81:93:cf:8f:ee:c5:58:9b:0c:
                    75:ef:bc:35:b4:78:9e:29:e2:04:ad:b3:f1:e6:cc:
                    4a:db:71:6e:5a:3f:e3:03:4a:8a:87:29:16:9f:ac:
                    d9:97:5a:76:25:de:05:94:3d:db:30:97:1f:6d:90:
                    20:df:53:aa:f7:64:df:27:1b:6f:63:eb:59:3b:cd:
                    af:50:c3:a6:a6:cd:23:83:65:c5:35:e2:62:f8:82:
                    99:8f:84:c6:72:9d:79:8e:fe:78:54:fd:f9:50:f7:
                    57:c9:23:82:c2:63:e7:53:e1:85:9a:9d:eb:10:9c:
                    e2:fc:5e:60:03:4d:44:71:42:b4:d9:7f:ba:24:17:
                    e1:cb:56:a3:57:78:2b:e5:07:dd:70:e5:da:19:df:
                    ea:98:cd:2e:f4:c5:28:02:92:d6:6e:e7:95:fc:69:
                    b2:f0:24:38:d0:5a:5b:ad:81:23:20:da:a6:f3:6a:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FA:1C:02:2B:42:0D:07:B6:43:DB:E1:F2:FD:18:5D:17:98:37:45
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:88:0e:ca:86:30:23:9a:0c:0f:0d:95:81:0a:46:5a:ac:
         f6:19:4a:29:43:5a:c3:e6:6e:cd:0c:02:fc:92:e0:ed:2a:3b:
         67:59:1e:e2:07:d8:3f:4b:5a:cf:f2:ab:a0:a3:14:a7:89:00:
         70:ad:cf:35:42:07:e3:d1:43:bb:a2:68:1c:4b:d8:a0:7b:ee:
         f2:15:a4:c8:2a:53:26:21:9e:48:fb:ad:bb:95:75:8f:d6:99:
         17:d4:ee:5c:f8:19:8d:58:62:a4:65:94:1a:ca:69:f9:3d:a3:
         5e:e4:96:d7:84:b4:cc:72:04:ed:2e:f7:b9:82:7f:b4:43:fb:
         f4:5f:2e:40:52:9e:cd:5a:73:72:15:96:af:2a:c5:29:6c:90:
         38:f4:9a:81:5e:89:49:08:80:ac:31:f4:41:c5:57:d4:29:dd:
         f5:bf:16:49:ff:90:10:ce:76:e0:f0:8c:88:50:0a:f0:32:aa:
         5a:87:57:16:73:3e:26:d1:bd:7c:1b:21:84:b6:9b:ac:aa:bb:
         5a:ca:01:f8:ea:10:aa:4f:12:1e:3a:31:1a:f0:71:96:51:c2:
         c7:a0:5a:a8:c5:2a:7d:1c:e6:4a:a8:13:fd:d1:5a:44:eb:38:
         c1:6c:2e:c7:9f:d8:49:f9:c7:5f:d7:e4:da:47:f4:b3:da:31:
         75:77:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:06:37 2026 by rpki-client