This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File:                     7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier:          N2dTpdUb5qi8w3Mfw/DyjFoaeGRIKVOksBAIrdhuedM=
Subject key identifier:   26:59:0F:B5:37:9E:CC:2F:A9:5E:8A:2C:9B:0F:6E:B9:56:09:29:FF
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019BD2E98ECEC639A8CF01A2B8A0CD1502F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number:          10F8
Signing time:             Sun 18 Jan 2026 21:01:20 +0000
Manifest this update:     Sun 18 Jan 2026 21:01:20 +0000
Manifest next update:     Mon 19 Jan 2026 21:01:20 +0000
Files and hashes:         1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
                          2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
                          3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
                          4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
                          5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: OLiX8EEREUlLU+/SOshSbjYN2jt4JBKh0LC+tL8s4Yo=)
                          6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
                          7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
                          8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
                          9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
                          10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
                          11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
                          12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
                          13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
                          14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
                          15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
                          16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
                          17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
                          18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
                          19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d2:e9:8e:ce:c6:39:a8:cf:01:a2:b8:a0:cd:15:02:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan 18 21:01:20 2026 GMT
            Not After : Jan 19 21:01:20 2026 GMT
        Subject: CN=26590fb5379ecc2fa95e8a2c9b0f6eb9560929ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:77:ca:ae:18:f8:f7:fa:80:81:4a:01:c0:
                    ee:a8:85:64:54:cd:de:00:b5:f2:41:ad:87:55:13:
                    93:28:ed:37:76:64:30:67:28:0e:24:ed:41:81:71:
                    e2:cb:e5:54:91:64:e4:02:ef:0c:7b:0f:26:87:6d:
                    68:3f:5c:ad:6c:52:89:ae:e6:9c:1e:c4:45:64:2f:
                    ea:4a:36:98:04:97:ec:91:dc:1e:f3:0f:4d:f2:dd:
                    67:57:c4:c6:ac:62:9e:bf:08:51:a8:9a:3a:78:a8:
                    5d:7b:57:01:fd:da:bb:d2:de:78:25:84:57:04:e9:
                    83:97:46:f8:54:d0:0d:64:5c:12:22:2a:5e:25:d8:
                    4d:bf:3c:ec:19:91:16:36:90:ef:ad:2f:71:09:89:
                    1f:28:a7:0c:b0:7e:96:c5:90:2c:a7:83:b0:e5:f5:
                    50:ea:f4:b3:f1:71:28:8e:24:51:0b:58:59:40:bd:
                    d3:3f:fb:64:22:03:8f:33:56:c4:92:54:4d:50:ae:
                    03:9f:6b:d5:fe:f6:05:87:50:8f:16:d5:eb:e1:86:
                    a1:17:38:bd:b0:bd:ce:c1:36:f4:79:a9:7c:61:76:
                    4c:45:07:93:07:17:94:1b:98:b2:3e:c4:07:8e:61:
                    bf:20:d6:8a:d6:4b:c9:27:95:03:62:60:b0:56:80:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:59:0F:B5:37:9E:CC:2F:A9:5E:8A:2C:9B:0F:6E:B9:56:09:29:FF
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:82:90:57:c8:7f:0d:d3:3a:dd:f5:d8:e6:d7:77:6d:37:6b:
         7e:81:7c:62:ae:65:30:1b:c9:59:20:d8:71:13:9e:a2:8d:cc:
         e2:43:fd:5c:ae:28:e4:89:cb:18:73:b6:25:fb:03:cb:3d:cc:
         6f:f1:c1:54:66:43:3f:8e:a0:98:85:fa:df:fd:7b:a7:60:b0:
         b0:ca:db:76:28:cb:3b:de:c5:34:00:f9:96:76:85:a6:5d:ce:
         76:cb:a9:78:54:59:cd:c9:d9:42:7d:04:d3:5d:3b:38:9e:38:
         8d:4a:49:cf:ad:19:c2:53:b3:c4:d0:c9:a1:be:c6:6d:6c:37:
         be:75:52:c8:7e:8f:48:f5:28:c4:8d:bb:ba:22:fd:a2:2e:aa:
         24:52:3e:8e:5b:a1:30:cc:c7:a4:8f:0f:ae:4f:06:be:b8:97:
         2e:14:93:82:4d:a5:47:8f:15:6f:d8:cc:ca:a2:bb:7f:dd:02:
         32:5d:95:0a:3f:ad:e4:be:4f:da:86:53:81:14:f2:5b:c1:00:
         e4:64:d5:01:b0:a3:ae:80:81:33:65:1d:00:8c:f7:87:cd:f8:
         69:60:a4:76:d0:53:aa:34:bf:31:13:47:fd:df:b0:80:9e:8a:
         74:1d:e4:d3:d8:cb:85:f1:e0:fc:24:45:52:5c:f7:b2:c1:7b:
         df:45:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 23:05:29 2026 by rpki-client