This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          Zi8nrm4dufxU3BqaoZgTo3U0+i7ACNuEBIM1ov2LDkY=
Subject key identifier:   B1:05:02:96:7A:82:C2:54:63:D1:48:40:F2:31:9F:82:8B:96:02:0B
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019BFD65CEFFF5DC196249DEACC28B3C388C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          110E
Signing time:             Tue 27 Jan 2026 03:01:06 +0000
Manifest this update:     Tue 27 Jan 2026 03:01:06 +0000
Manifest next update:     Wed 28 Jan 2026 03:01:06 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: +6q01uARehF3khxlua52em4dy4BoZnaNwEUqV1Wc98M=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:65:ce:ff:f5:dc:19:62:49:de:ac:c2:8b:3c:38:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan 27 03:01:06 2026 GMT
            Not After : Jan 28 03:01:06 2026 GMT
        Subject: CN=b10502967a82c25463d14840f2319f828b96020b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:28:6c:26:97:b6:a4:a4:3d:16:0e:cf:a0:
                    5a:fe:90:79:b3:60:3f:f7:a8:e4:20:71:e0:93:90:
                    1d:e5:7d:c0:8e:c2:7a:56:5b:05:51:77:2b:2d:bd:
                    d5:48:16:58:2a:1d:49:df:56:aa:57:a9:b4:7c:c9:
                    35:15:fa:77:5e:23:30:d9:8e:30:78:0e:4c:c4:f7:
                    f2:ae:07:d0:7c:5f:61:6c:56:72:03:a3:76:08:d1:
                    18:5c:7b:c2:7b:29:0f:9e:02:f2:3b:56:b2:53:e8:
                    7a:cc:58:31:58:85:a2:15:4f:01:fc:57:04:46:a3:
                    6d:f6:ba:0f:b6:49:f2:c7:81:82:ea:b5:88:1b:9b:
                    a3:55:59:f8:54:17:35:24:06:ac:f6:8b:dc:57:2f:
                    45:9d:3f:5b:92:2f:e1:97:89:a7:00:92:d3:b1:bd:
                    cd:fb:37:f0:6d:a4:7f:4c:db:2b:43:5d:5b:fb:f6:
                    b3:64:52:58:57:40:13:70:66:18:07:0d:3f:d2:7f:
                    01:88:23:c9:6b:0a:b1:d7:16:dc:90:63:8a:93:6a:
                    d8:8b:5b:2a:ed:00:7b:c8:e0:06:7f:40:27:57:ff:
                    21:b0:c0:dc:1d:62:08:1d:cc:27:54:a0:13:28:d8:
                    13:ca:65:4e:12:ef:35:9a:7c:b3:e0:40:e1:30:bc:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:05:02:96:7A:82:C2:54:63:D1:48:40:F2:31:9F:82:8B:96:02:0B
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:15:9b:66:80:cf:7f:66:c9:10:e4:71:b1:3d:42:86:15:
         4f:39:62:be:59:8c:ce:fc:1c:84:16:4a:73:21:b2:96:18:01:
         e0:de:98:f5:77:1f:f5:d8:4b:29:13:c4:47:fa:ed:3d:24:7a:
         59:10:d0:62:72:70:49:04:f2:0b:22:2e:8e:c1:63:f9:d0:ee:
         b7:f9:82:39:cc:34:fa:18:7a:10:35:86:2d:27:79:4b:3f:49:
         5f:cc:b7:17:4e:1c:44:d8:1c:75:cb:a2:0b:a9:4a:e6:fe:65:
         c4:fe:d6:45:6f:81:93:33:92:73:54:34:92:31:07:64:73:d3:
         f7:39:3a:f8:ef:1c:be:65:ba:60:a1:55:4e:37:30:69:31:8d:
         f5:96:a0:bf:93:11:2e:b2:32:97:00:70:13:87:7c:b4:cd:8d:
         0a:4f:99:eb:00:b4:72:06:15:7a:0b:10:fb:ea:87:53:29:42:
         79:aa:30:97:5e:cb:3a:d8:15:b3:1a:fc:9b:f0:c7:d0:8e:1e:
         ca:8d:fd:82:c2:84:f7:72:4b:88:68:21:e9:8e:fa:85:4d:9c:
         4a:7a:b7:31:6b:0a:5d:e8:a7:48:95:cd:91:d6:2e:3f:ed:3e:
         cf:cb:88:22:8c:20:49:ed:47:89:21:8c:ba:53:27:44:70:c7:
         6c:7f:c4:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv9Zc7/9dwZYknerMKLPDiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjYwMTI3MDMwMTA2WhcNMjYwMTI4MDMwMTA2WjAzMTEwLwYDVQQD
EyhiMTA1MDI5NjdhODJjMjU0NjNkMTQ4NDBmMjMxOWY4MjhiOTYwMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/AobCaXtqSkPRYOz6Ba/pB5s2A/
96jkIHHgk5Ad5X3AjsJ6VlsFUXcrLb3VSBZYKh1J31aqV6m0fMk1Ffp3XiMw2Y4w
eA5MxPfyrgfQfF9hbFZyA6N2CNEYXHvCeykPngLyO1ayU+h6zFgxWIWiFU8B/FcE
RqNt9roPtknyx4GC6rWIG5ujVVn4VBc1JAas9ovcVy9FnT9bki/hl4mnAJLTsb3N
+zfwbaR/TNsrQ11b+/azZFJYV0ATcGYYBw0/0n8BiCPJawqx1xbckGOKk2rYi1sq
7QB7yOAGf0AnV/8hsMDcHWIIHcwnVKATKNgTymVOEu81mnyz4EDhMLxZKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEFApZ6gsJUY9FIQPIxn4KLlgILMB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc88Vm2aA
z39myRDkcbE9QoYVTzlivlmMzvwchBZKcyGylhgB4N6Y9Xcf9dhLKRPER/rtPSR6
WRDQYnJwSQTyCyIujsFj+dDut/mCOcw0+hh6EDWGLSd5Sz9JX8y3F04cRNgcdcui
C6lK5v5lxP7WRW+BkzOSc1Q0kjEHZHPT9zk6+O8cvmW6YKFVTjcwaTGN9Zagv5MR
LrIylwBwE4d8tM2NCk+Z6wC0cgYVegsQ++qHUylCeaowl17LOtgVsxr8m/DH0I4e
yo39gsKE93JLiGgh6Y76hU2cSnq3MWsKXeinSJXNkdYuP+0+z8uIIowgSe1HiSGM
ulMnRHDHbH/E7Q==
-----END CERTIFICATE-----
Generated at Tue Jan 27 09:40:28 2026 by rpki-client