This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          qBh5kqzo//ZDJZ/J110HrmEzoThPjp0DpHY+ra076DQ=
Subject key identifier:   ED:CB:42:9D:7F:89:60:AD:8C:91:82:9F:17:3A:10:03:F1:70:E9:99
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019BF79AAD19CCEE3467F28A29896C2AE2F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          110B
Signing time:             Mon 26 Jan 2026 00:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:07 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: /VSIUNmJi4csZX5lLMyGjkAm2bHObBhAgXbGVD9Tp3E=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:ad:19:cc:ee:34:67:f2:8a:29:89:6c:2a:e2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan 26 00:01:07 2026 GMT
            Not After : Jan 27 00:01:07 2026 GMT
        Subject: CN=edcb429d7f8960ad8c91829f173a1003f170e999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:ed:6e:60:6a:84:e7:c4:80:a4:61:41:e7:
                    65:91:01:aa:dc:72:26:f1:12:78:71:29:11:7f:55:
                    0a:85:17:dd:5d:0b:ac:d9:f9:cf:2c:e3:bc:c6:6d:
                    1b:5f:03:b3:a9:ea:fb:92:c4:f3:ce:36:0f:da:9e:
                    23:ea:18:0d:49:c4:75:ce:db:10:cb:fd:7d:08:a0:
                    33:70:25:11:e1:85:46:e0:8b:e9:aa:a8:28:98:b7:
                    49:f3:4b:ff:78:75:0e:73:d8:81:ab:d1:6d:af:da:
                    a8:04:24:dc:d5:4c:38:4c:78:fe:03:b5:4a:d3:f2:
                    6e:e9:34:7a:ee:d7:03:63:2b:88:a7:dd:1a:c9:f9:
                    e6:92:3b:cf:70:52:00:0b:76:2a:7d:f8:4f:7d:d3:
                    a3:7d:9d:1c:3f:92:85:8d:26:cd:e9:7b:26:71:9b:
                    a7:34:61:4d:f2:a5:21:a5:67:f4:c7:98:d3:56:e5:
                    ff:a0:e6:0e:2b:5e:02:1d:9f:85:42:95:bf:54:72:
                    23:4d:09:c3:b3:8a:a3:80:70:12:d5:85:bd:3b:99:
                    cb:9c:d2:dc:ce:f8:c3:b9:ab:8b:6f:92:2b:52:be:
                    79:e7:a2:fd:f0:56:a5:cc:f3:05:43:b6:26:9f:e6:
                    e5:60:02:d6:f7:f6:1a:34:aa:d6:24:11:ee:f7:e1:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CB:42:9D:7F:89:60:AD:8C:91:82:9F:17:3A:10:03:F1:70:E9:99
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:05:6a:40:7f:f5:62:a1:c8:39:14:27:bb:c0:e3:93:28:8d:
         c0:f1:8a:dc:77:59:8a:3b:04:c0:48:b7:44:6e:f1:cb:1e:9d:
         b4:9d:95:c8:13:bb:8e:00:f5:31:13:f3:37:39:94:80:31:bc:
         d9:bb:1d:7c:67:cc:65:aa:73:4f:a7:c3:aa:fb:60:4b:5e:0c:
         2f:a8:2b:eb:37:18:63:ae:95:ad:99:ae:86:9f:c0:05:a3:b3:
         0b:54:39:b1:22:c3:d8:60:1f:fd:19:d0:f0:2d:7e:48:72:ca:
         40:80:da:f6:b8:20:94:d8:a1:85:96:5b:2d:97:aa:75:90:d9:
         4a:47:f4:c2:e5:aa:a4:08:83:61:fd:c0:57:67:dd:37:da:4f:
         6b:2e:1b:ae:3c:e9:44:82:5e:df:1d:f9:fd:4f:04:de:76:c3:
         2f:84:ad:f1:1b:a0:b1:c8:a2:17:a5:84:6a:c9:13:bd:19:a3:
         b3:34:09:e7:18:9d:cd:6b:7f:02:18:93:43:48:8d:75:0a:cf:
         47:72:7f:49:5a:cb:25:e5:61:4d:26:ef:da:2d:bc:1c:16:e1:
         a5:13:88:57:bc:48:9f:6e:d2:9d:1f:10:b3:d0:27:4f:e3:d5:
         c3:02:c8:de:9a:e9:0c:9c:39:13:a6:f4:e8:b7:9b:5c:cd:d7:
         94:e9:71:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mq0ZzO40Z/KKKYlsKuL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjYwMTI2MDAwMTA3WhcNMjYwMTI3MDAwMTA3WjAzMTEwLwYDVQQD
EyhlZGNiNDI5ZDdmODk2MGFkOGM5MTgyOWYxNzNhMTAwM2YxNzBlOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00btbmBqhOfEgKRhQedlkQGq3HIm
8RJ4cSkRf1UKhRfdXQus2fnPLOO8xm0bXwOzqer7ksTzzjYP2p4j6hgNScR1ztsQ
y/19CKAzcCUR4YVG4IvpqqgomLdJ80v/eHUOc9iBq9Ftr9qoBCTc1Uw4THj+A7VK
0/Ju6TR67tcDYyuIp90ayfnmkjvPcFIAC3YqffhPfdOjfZ0cP5KFjSbN6XsmcZun
NGFN8qUhpWf0x5jTVuX/oOYOK14CHZ+FQpW/VHIjTQnDs4qjgHAS1YW9O5nLnNLc
zvjDuauLb5IrUr5556L98FalzPMFQ7Ymn+blYALW9/YaNKrWJBHu9+HPGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3LQp1/iWCtjJGCnxc6EAPxcOmZMB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgVqQH/1
YqHIORQnu8DjkyiNwPGK3HdZijsEwEi3RG7xyx6dtJ2VyBO7jgD1MRPzNzmUgDG8
2bsdfGfMZapzT6fDqvtgS14ML6gr6zcYY66VrZmuhp/ABaOzC1Q5sSLD2GAf/RnQ
8C1+SHLKQIDa9rgglNihhZZbLZeqdZDZSkf0wuWqpAiDYf3AV2fdN9pPay4brjzp
RIJe3x35/U8E3nbDL4St8RugsciiF6WEaskTvRmjszQJ5xidzWt/AhiTQ0iNdQrP
R3J/SVrLJeVhTSbv2i28HBbhpROIV7xIn27SnR8Qs9AnT+PVwwLI3prpDJw5E6b0
6LebXM3XlOlxtA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:26:54 2026 by rpki-client