This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          8Hbn6X+WwGmd0DFmItjb/pDgB1HvvsJeoCzI64c70Zc=
Subject key identifier:   75:8B:C6:F2:D2:DF:CC:B8:FC:3C:A4:F1:C1:6F:EC:4B:C5:65:39:98
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       019C070D4F2A48608F7B1F0FE68CDFA92E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          180B
Signing time:             Thu 29 Jan 2026 00:00:38 +0000
Manifest this update:     Thu 29 Jan 2026 00:00:38 +0000
Manifest next update:     Fri 30 Jan 2026 00:00:38 +0000
Files and hashes:         1: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: tEfFVi0Q7PA/0OmNyxqeqi6+xX9r7qRpa3MjAGGNqO0=)
                          2: 13XDGJYyNR2DoNt3I63wL8U0Jzs.roa (hash: I+JS8FII02pQo9N3kTh18PHz112YKE00khkm+cip7eA=)
                          3: 63yOiYKwU7JqEfSC9NxVJ01fCWk.roa (hash: K4Ob2YWWp3LxgFe3+6MIi9FKOa85HqimBOJiSHujQxY=)
                          4: 6nEB7u7VDBwJvvErhhk_sp8HgHM.roa (hash: SyBKloheaGBrGvFtFMvv0iZL+4Dv+JFkW0KebHTTw6E=)
                          5: 9H1b9QtJvvO5Q7tBMNvVVoE03o8.roa (hash: 8xeDQJquFgw+UoHUSmYV/m/pwUj8nT1iQkun0bxE7+Q=)
                          6: FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa (hash: V5FzneMXIFpEivxgGPkmTl20CGF3hlX/oPutyNatcaM=)
                          7: WS24_ZfdS-p841fXys78kKEcHFE.roa (hash: mdNWTDkBQ1LOAKpfMoKowipt1skh6RMzRxFFxzvaz1g=)
                          8: cohsG3SQlcWk1HwXz_9_V1W-DnM.roa (hash: Z0rTIgtHw2j6D7sRMbadoj6J39N2b5eJp5yHD6/XmPU=)
                          9: dIH6BysLhLi3YbgR32hD9CEC-Rc.roa (hash: EKTQSkYkTx/FLfYfj9JDL2Xp6XAMkpHk8crmyAFs8gY=)
                          10: dfv3LSNj2V7BvnxQDjPYXNhLTeY.roa (hash: +CS62sl2ChgX++5UXeYQ9A8BJy1JzvdoEucP6DULUqI=)
                          11: gjckOvmNiIbZmA-TT11ORA--iTU.roa (hash: TpmN78WgePeN399lIDAzsZi1InWuYIsnhRRV8YOoTWc=)
                          12: vF0VYWecbrRxbZK9c56uBdCo4ik.roa (hash: GSJ2HtyoNkdo5nkx3DTM8Av/uYVGzIaDwGAeMRt+F5E=)
                          13: xmMPaUT6o6zuoGJkONl9ukiVCBw.roa (hash: LEqoxiigz/XFOxjw1QTNnhB5q/85VzWFuwng23PfuYc=)
                          14: xrmNcJYM7IC02cwip42NZ9MYOJI.roa (hash: b6C56Rw+1/MSwcd/+Js8l5OXj80gDxqiFimnPx3BaLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:07:0d:4f:2a:48:60:8f:7b:1f:0f:e6:8c:df:a9:2e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Jan 29 00:00:38 2026 GMT
            Not After : Jan 30 00:00:38 2026 GMT
        Subject: CN=758bc6f2d2dfccb8fc3ca4f1c16fec4bc5653998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:2d:d1:33:69:2e:8e:d5:12:d6:e9:f8:ae:
                    7e:07:f4:45:16:5d:54:2e:8a:df:b8:c1:33:80:16:
                    b5:75:29:0d:e0:30:63:60:31:e2:ac:d9:06:90:a3:
                    58:9d:9b:e3:c6:79:2d:1c:ab:81:8e:2d:d4:d8:96:
                    80:13:47:d2:d4:31:cb:8f:4d:2a:7e:f6:d7:d4:61:
                    54:19:b7:eb:29:26:57:43:1b:5c:55:40:87:92:94:
                    99:e6:76:22:a2:60:5b:13:d2:da:ae:77:84:68:6b:
                    ad:ea:2a:c2:21:ee:c5:0d:02:1e:e6:5e:7c:79:57:
                    e9:21:6b:0c:0d:c6:81:78:91:ef:bb:87:ac:3f:e4:
                    79:de:26:bf:91:c1:31:ac:a3:33:18:ad:1d:3f:ea:
                    d6:ee:72:1d:37:c2:d7:25:cb:01:52:a1:ff:ca:0d:
                    67:b6:07:26:30:f1:1b:7f:7d:cc:10:10:87:17:8e:
                    cd:25:f7:7a:8a:67:05:1f:83:41:4f:12:15:b3:0c:
                    ab:cd:1f:20:61:1c:7e:9d:08:26:d9:4d:38:dd:1b:
                    97:89:bb:04:fd:97:49:d6:d9:db:ad:38:9b:c6:92:
                    97:9a:44:9b:0d:d2:62:29:82:55:e8:08:80:03:e3:
                    0e:f4:9d:92:b1:a3:aa:28:1c:1e:ff:03:b2:1b:32:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:C6:F2:D2:DF:CC:B8:FC:3C:A4:F1:C1:6F:EC:4B:C5:65:39:98
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:14:a3:22:4a:24:f4:3c:f5:4b:2b:1d:40:89:3d:37:f6:
         77:c3:db:1a:8f:87:1e:0a:f9:5d:ce:86:39:fd:a6:fd:e2:b7:
         f5:4c:87:fa:25:17:3d:47:04:74:c5:00:a1:14:a9:cb:50:7c:
         38:d6:1c:5b:3f:08:c5:8e:01:4f:aa:6d:ea:9a:45:68:c0:9e:
         09:fb:af:43:4d:34:67:b2:82:05:20:86:56:cc:91:25:ac:ba:
         ac:3f:72:0e:6d:eb:bc:90:22:37:6b:5c:ba:d3:d5:53:de:ba:
         5d:d7:64:6d:5a:82:77:ef:22:fc:79:15:6c:bf:f2:a0:45:85:
         6a:68:24:de:31:7f:65:c6:da:ae:f4:d2:7a:15:e9:12:a9:c5:
         c0:ae:f3:0f:98:b2:00:19:10:3d:27:60:e2:c3:d0:13:e6:b0:
         6c:f2:94:99:2d:3b:bb:c7:17:bd:90:0f:b6:81:68:4e:93:cb:
         f4:42:65:82:cc:7b:a8:0a:6e:ba:6a:07:eb:61:53:06:e8:3b:
         69:6b:a9:31:73:10:0a:1b:b4:ab:c3:52:10:76:9c:88:7f:ad:
         9c:a2:1a:85:fe:58:37:d9:14:45:bd:3e:38:ce:dc:09:a0:44:
         5f:57:82:00:df:44:fe:9d:6c:49:5a:08:69:d2:f9:de:67:63:
         ab:03:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 07:40:38 2026 by rpki-client