This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
File:                     7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json)
Hash identifier:          xt+0Rcxmh1zdFgstgHuRV+/6iNZr/jD2We2m+60Ohx4=
Subject key identifier:   F5:3D:95:36:52:C6:2D:B6:82:1C:C6:E3:D8:49:AA:59:E7:2E:94:8A
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       019BFA649BC5BCF7F9CABF23B4018C2680D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
Manifest number:          17FF
Signing time:             Mon 26 Jan 2026 13:00:56 +0000
Manifest this update:     Mon 26 Jan 2026 13:00:56 +0000
Manifest next update:     Tue 27 Jan 2026 13:00:56 +0000
Files and hashes:         1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=)
                          2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=)
                          3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: UmyHbsxRyd8jYJOn0zPBRHHnejYsWdJtEXHbA0n3eGo=)
                          4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=)
                          5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=)
                          6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=)
                          7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=)
                          8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=)
                          9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=)
                          10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=)
                          11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:64:9b:c5:bc:f7:f9:ca:bf:23:b4:01:8c:26:80:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan 26 13:00:56 2026 GMT
            Not After : Jan 27 13:00:56 2026 GMT
        Subject: CN=f53d953652c62db6821cc6e3d849aa59e72e948a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b5:09:3b:db:db:d1:00:5b:46:86:93:d8:a8:
                    66:23:a3:17:18:56:ec:02:b2:f9:ef:aa:6f:4b:a4:
                    04:a2:79:ef:e8:68:f6:f5:ca:16:3b:a9:02:d3:93:
                    39:03:7e:22:44:a9:1a:f0:3f:d0:df:08:2e:24:1f:
                    fe:94:6d:b9:22:74:2a:3d:c6:17:b5:97:86:7e:f3:
                    02:28:b7:fa:5d:10:72:ad:d6:07:e7:02:5f:d3:2d:
                    f7:8c:6e:0e:e4:65:6f:d8:33:27:78:5a:70:49:93:
                    1a:8c:38:56:11:6b:97:46:40:41:79:93:9b:b2:51:
                    db:df:f7:a9:fa:75:19:80:35:2a:04:ad:eb:10:f5:
                    c6:b4:c3:7c:b4:e3:43:75:48:d0:84:8e:b4:bf:54:
                    b2:e0:2c:4d:a0:44:7a:4e:40:a2:74:8a:ec:22:7b:
                    9f:b9:62:fe:dc:9f:3f:34:03:0e:35:87:db:91:12:
                    8f:d0:40:44:44:fb:a6:54:fe:ee:f9:a1:84:77:7d:
                    08:41:c6:f6:00:40:b9:8b:ff:4c:a5:86:c9:43:cd:
                    ac:d1:90:22:eb:a1:78:9d:c1:8d:b2:5f:8f:22:05:
                    92:86:18:26:55:a3:7d:62:83:87:0c:67:0f:e2:ed:
                    7a:e4:f0:7a:67:34:9f:ea:55:82:1d:77:ac:65:ee:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3D:95:36:52:C6:2D:B6:82:1C:C6:E3:D8:49:AA:59:E7:2E:94:8A
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:21:64:e2:df:4d:e1:90:d1:2a:fb:d1:a4:aa:62:97:fa:55:
         c0:67:97:1d:68:07:f8:8d:c4:de:5f:06:06:0e:bb:11:ad:da:
         ad:a3:10:46:17:00:c3:df:22:c3:c7:bb:02:ff:b0:d5:58:72:
         03:9a:f8:e4:73:52:3b:cb:01:61:6b:0a:30:87:28:b7:28:fb:
         56:49:22:ad:bb:db:4b:88:3f:7f:ad:76:d2:e1:1b:7c:e2:98:
         c2:07:6f:22:5b:8e:a3:dc:67:78:8c:2b:63:64:9f:90:cd:d1:
         7b:e3:aa:03:78:f9:a5:5f:ca:59:8c:12:94:af:5b:28:b1:80:
         7b:8b:13:b0:3b:b9:81:f4:03:08:d6:ca:1a:42:86:6d:09:f6:
         4a:22:3e:e4:69:9d:40:30:fc:de:77:e2:9d:93:98:46:aa:fd:
         4e:36:29:b1:42:35:d7:dc:85:06:64:b8:48:3c:2f:9b:52:7a:
         fd:73:ed:a1:4b:5e:89:71:e5:26:35:30:2b:99:59:65:a1:b3:
         a9:03:51:e7:50:5e:98:5c:f0:27:da:e7:e2:f9:e4:b2:3f:e6:
         93:9f:40:d4:db:e3:a8:9e:7a:2a:18:4b:5a:eb:0b:3f:70:b3:
         bc:e5:12:d1:12:a5:2d:34:ff:4e:d6:fd:69:ed:dc:06:11:2b:
         6e:48:a8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:27:41 2026 by rpki-client