This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          9KC05c67msVlum6zOsheKBw/RiedJm/gIoZRFk87EzU=
Subject key identifier:   73:EA:1F:BB:97:34:9B:31:F4:17:50:14:60:E1:FB:26:C4:C2:B1:F3
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019BDE7F9B78BB4221E2A08BD31A244F9771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          074D
Signing time:             Wed 21 Jan 2026 03:01:03 +0000
Manifest this update:     Wed 21 Jan 2026 03:01:03 +0000
Manifest next update:     Thu 22 Jan 2026 03:01:03 +0000
Files and hashes:         1: 1DQSzPrvQ3OeFghlHTnuhy2FnaM.roa (hash: Vmf1qe1ZeyDSqw1yyd0cnWQjwEuyFWxzKfF8ftVIQuo=)
                          2: 2x0cxx1yYzUrlMoLyh8t1vo0qDw.roa (hash: alzzm6xLDInbHwoysdg8AoFEYrkHfMDDElcExthLhbc=)
                          3: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          4: 6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa (hash: bgN/Wif1RDjqgtzhUIXOtx86/S164vOmljhvPEsaCa4=)
                          5: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          6: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          7: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          8: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: wY7FQZVUJC0ynaOQVo/H8Y8JHTdUevLZTXFJS6bj80o=)
                          9: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          10: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          11: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          12: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          13: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          14: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          15: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          16: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          17: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          18: jZrRxArAkWsgIRXLzqXFJ2uzg1M.roa (hash: oQRjlCXEvb91V7QDXOTq59uWKq0mZjS4woUXREc+3oY=)
                          19: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          20: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          21: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          22: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:7f:9b:78:bb:42:21:e2:a0:8b:d3:1a:24:4f:97:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jan 21 03:01:03 2026 GMT
            Not After : Jan 22 03:01:03 2026 GMT
        Subject: CN=73ea1fbb97349b31f417501460e1fb26c4c2b1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:90:e1:48:5a:a4:5c:36:f2:b1:c2:94:c3:
                    90:b8:98:a5:e8:03:eb:e5:95:a0:ab:9a:9a:f8:52:
                    90:cb:25:cc:2e:bb:d4:b5:5e:04:77:a4:a0:a5:b1:
                    fb:dd:b3:78:c4:c2:df:96:3f:36:71:97:81:d7:fe:
                    f3:d5:02:6e:a4:8e:04:20:bc:dd:35:81:33:18:de:
                    87:de:c2:04:04:14:99:95:8a:59:0a:9b:0e:7a:0d:
                    fa:95:f6:3b:a0:8f:f3:13:93:33:69:17:74:ab:a9:
                    18:79:e0:89:9d:67:48:7d:9f:f1:35:91:ae:17:05:
                    3b:c3:0c:04:37:40:53:6f:f8:64:01:72:a3:9a:69:
                    03:0a:fe:8d:00:66:47:37:2d:c7:ae:3b:a7:f2:94:
                    d2:b8:58:7c:90:d3:60:e9:8c:1d:9a:69:29:dc:e1:
                    f7:65:50:94:dc:7a:4a:98:3a:8f:c6:b8:30:ef:9f:
                    39:dd:48:84:ec:72:cc:f2:62:5c:c5:cc:9e:42:e5:
                    ba:92:76:c2:e5:42:c0:00:36:73:2d:97:7c:57:33:
                    45:35:14:31:d3:f9:56:9c:63:01:c4:85:e3:f5:5d:
                    d4:8a:23:a4:31:1f:a3:83:db:75:a6:e4:00:ff:08:
                    4a:c7:e5:a5:28:93:5c:1e:cc:70:62:27:33:32:61:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:1F:BB:97:34:9B:31:F4:17:50:14:60:E1:FB:26:C4:C2:B1:F3
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:18:d0:6b:be:1f:45:d0:c6:f1:4f:e6:a7:11:0d:ac:3a:c5:
         99:81:7d:f2:b1:7c:2d:e5:25:50:de:08:59:2a:cc:5f:cc:76:
         3e:02:0b:3f:3b:cc:f3:1a:9f:90:4a:b5:3e:c9:98:d5:72:75:
         e3:13:8f:3b:63:75:e1:a8:42:46:6b:af:3b:27:62:0e:7b:ec:
         da:6d:3f:92:db:f0:5c:d8:9d:7a:57:55:02:3c:83:8e:38:7b:
         fe:db:87:c3:71:5a:65:65:42:e9:90:76:37:6b:da:4a:ab:3d:
         2e:60:ea:dc:1d:71:2b:88:43:b2:f6:ad:7a:8a:82:c3:99:4b:
         c9:ec:2d:8c:e1:3b:aa:39:75:5e:ec:32:57:3b:d5:8c:f9:e4:
         79:2d:68:fb:8d:68:2a:0f:35:d3:1a:6f:7e:2b:c2:00:2c:2e:
         12:99:f6:b4:52:26:3b:e0:db:90:c0:13:ed:11:71:a1:2e:9c:
         30:17:d8:c3:7d:01:4e:31:6c:e8:d8:3e:b0:3f:fa:9e:d9:82:
         b3:fe:33:69:fc:8f:15:e5:bb:df:51:0c:24:3b:cd:0d:f5:76:
         c1:a6:2d:1b:5d:bf:b6:e2:5a:1e:a6:1a:d5:f2:f8:45:cc:22:
         43:d7:72:9c:84:48:51:90:c5:45:72:40:32:26:42:16:7a:16:
         0d:c0:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:44:44 2026 by rpki-client