This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          AWD/QJ3AVpTJ8/cTIrlGY75IeMSRiknTdVwWN7Tb+5o=
Subject key identifier:   CA:1F:BD:FC:1A:E8:FD:4E:1C:81:1F:41:58:FD:1D:07:EC:38:E2:A1
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       019B9EFBBA96C76317125867B5FF69D9B37D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          11F8
Signing time:             Thu 08 Jan 2026 19:00:55 +0000
Manifest this update:     Thu 08 Jan 2026 19:00:55 +0000
Manifest next update:     Fri 09 Jan 2026 19:00:55 +0000
Files and hashes:         1: MpwIY7Ebi8bx833CV_5moln-CB0.roa (hash: IcPeEwSEZRPBHIQ02cGM6FjSpHotFVeRsIkfWF3fy2s=)
                          2: dwAqRvLPaFJvT81jjmY8z6OAffc.roa (hash: U+GbR8Ko/UO/PdAN8+pRGxNFE5XM37ujAKQFqPLbxQ4=)
                          3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: x0p+6jzN6f0p+uxSwWh5X1UKDral5+ZzsqsGEaZSS10=)
                          4: mstzb26BC_IbEF1cblkahySAWUo.roa (hash: ovsvskCBj0pzy7ZuC+YBMlAXo2c5eeshaQejsMGZzOU=)
                          5: y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa (hash: hK90cOpXZcr7Ami6NbNqe49Tz8xd4CBkB2ANlYx8mv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9e:fb:ba:96:c7:63:17:12:58:67:b5:ff:69:d9:b3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: Jan  8 19:00:55 2026 GMT
            Not After : Jan  9 19:00:55 2026 GMT
        Subject: CN=ca1fbdfc1ae8fd4e1c811f4158fd1d07ec38e2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:ff:28:48:71:1c:bc:b8:b0:99:7d:9c:2b:
                    aa:ed:28:2f:2d:53:c8:73:69:7b:c3:9a:73:f9:a7:
                    3d:70:01:bb:50:bc:b0:bb:e3:73:78:97:f1:22:3b:
                    d4:60:12:ed:7b:3e:a5:48:4a:ee:c8:c9:45:26:71:
                    fb:b0:96:23:9f:04:91:e2:90:0c:8e:e0:dd:7e:b5:
                    6f:eb:b8:54:ae:e8:17:f7:99:fb:85:15:12:e9:c9:
                    a7:b3:60:04:4f:5d:5e:70:c3:16:5e:d8:8e:e1:4a:
                    ab:d2:ae:be:ac:66:67:82:f7:80:62:0c:7b:a5:f6:
                    2b:2e:40:0e:a7:3a:fe:e9:03:c6:c1:1a:6f:10:c3:
                    e1:d2:cd:94:53:28:f7:fc:86:5d:56:48:63:cc:85:
                    89:ff:0f:33:4c:01:fd:49:53:5d:8c:0a:75:e3:45:
                    18:97:cc:f4:1c:c7:43:c4:0b:20:fb:43:68:fc:47:
                    b1:19:fa:22:7e:3a:98:e7:12:ef:28:b8:b6:76:70:
                    64:8c:0c:77:dd:82:48:8d:87:aa:9c:99:3a:6a:c1:
                    c2:ef:8a:05:69:62:3a:b3:c3:cb:e4:7a:e8:5a:da:
                    22:35:66:03:e7:03:82:05:57:63:37:a6:3d:a6:f6:
                    35:01:09:3b:31:ec:9c:71:b5:7c:1c:4c:6b:71:61:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1F:BD:FC:1A:E8:FD:4E:1C:81:1F:41:58:FD:1D:07:EC:38:E2:A1
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fa:aa:8d:bd:fd:98:31:27:cc:62:47:d2:43:ef:0c:b2:a1:
         6d:f1:e9:01:d1:72:86:fa:59:7c:63:a3:7a:95:3f:86:b6:e0:
         1b:f6:8b:e4:86:a0:24:0d:34:0f:a1:ba:a5:47:83:7b:0d:06:
         ef:14:1f:b4:ee:53:fa:eb:e1:7d:e0:85:55:2a:39:aa:a1:e8:
         fc:61:e9:b7:db:e4:27:c6:ed:00:96:f4:42:fc:d4:7c:1a:7c:
         10:14:ec:47:19:2e:f9:c9:cc:ba:3c:f7:67:4e:8d:28:4f:b4:
         79:0e:c5:5a:09:eb:bc:fb:1a:42:77:00:bf:2a:1a:e8:83:1d:
         0c:a7:21:93:70:5c:1c:5f:48:19:37:3b:c6:ef:83:42:6f:94:
         13:d9:1e:79:de:70:2a:b2:75:58:e6:ad:c5:82:5e:54:c6:08:
         3f:25:75:63:db:82:71:97:d4:c5:a0:59:53:9c:2d:4b:ca:64:
         b6:d5:69:49:07:9f:f2:b1:83:7a:02:77:b3:94:3b:a2:90:9d:
         43:ba:fd:ff:ad:c3:83:bb:8f:74:9b:9c:a7:14:bd:0c:de:0d:
         a0:fb:98:9e:07:c7:2e:07:70:43:cc:e4:65:f4:27:bf:5d:98:
         8a:ec:c7:e1:60:76:7e:f9:78:ea:2c:1b:2d:c7:05:dc:9f:a2:
         af:74:4c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZue+7qWx2MXElhntf9p2bN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj
ZDQ5ZTUwHhcNMjYwMTA4MTkwMDU1WhcNMjYwMTA5MTkwMDU1WjAzMTEwLwYDVQQD
EyhjYTFmYmRmYzFhZThmZDRlMWM4MTFmNDE1OGZkMWQwN2VjMzhlMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ3/KEhxHLy4sJl9nCuq7SgvLVPI
c2l7w5pz+ac9cAG7ULywu+NzeJfxIjvUYBLtez6lSEruyMlFJnH7sJYjnwSR4pAM
juDdfrVv67hUrugX95n7hRUS6cmns2AET11ecMMWXtiO4Uqr0q6+rGZngveAYgx7
pfYrLkAOpzr+6QPGwRpvEMPh0s2UUyj3/IZdVkhjzIWJ/w8zTAH9SVNdjAp140UY
l8z0HMdDxAsg+0No/EexGfoifjqY5xLvKLi2dnBkjAx33YJIjYeqnJk6asHC74oF
aWI6s8PL5HroWtoiNWYD5wOCBVdjN6Y9pvY1AQk7MeyccbV8HExrcWESnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMofvfwa6P1OHIEfQVj9HQfsOOKhMB8GA1UdIwQY
MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt
YTQyZWM4Nzc2ZmJiLzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi
LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/qqjb39
mDEnzGJH0kPvDLKhbfHpAdFyhvpZfGOjepU/hrbgG/aL5IagJA00D6G6pUeDew0G
7xQftO5T+uvhfeCFVSo5qqHo/GHpt9vkJ8btAJb0QvzUfBp8EBTsRxku+cnMujz3
Z06NKE+0eQ7FWgnrvPsaQncAvyoa6IMdDKchk3BcHF9IGTc7xu+DQm+UE9keed5w
KrJ1WOatxYJeVMYIPyV1Y9uCcZfUxaBZU5wtS8pkttVpSQef8rGDegJ3s5Q7opCd
Q7r9/63Dg7uPdJucpxS9DN4NoPuYngfHLgdwQ8zkZfQnv12YiuzH4WB2fvl46iwb
LccF3J+ir3RMTQ==
-----END CERTIFICATE-----
Generated at Fri Jan 9 00:53:42 2026 by rpki-client