This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File:                     EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier:          1h7+Yfnc6C5fggUzr7tSAQs+yfuMZPPkygVyhambfss=
Subject key identifier:   59:B1:E8:8C:2A:E6:7F:66:B7:CC:C6:D7:C0:B9:9D:0B:69:A4:C4:B6
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer:       /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial:       019BF687FEBFCCF826B5D27C65FD6E636A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number:          0A9E
Signing time:             Sun 25 Jan 2026 19:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:06 +0000
Files and hashes:         1: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=)
                          2: A8FvgdbHNRHsRdDyYbSZ8Cktx7A.roa (hash: RHm/c9RboC0AG29WQm/fpkqp72AQwurGiN64U8SLSDg=)
                          3: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: zQgBIJ5VdP7qGYcQHsGPrs91ny4nNNErR6Prik39YYk=)
                          4: FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (hash: um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=)
                          5: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (hash: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA=)
                          6: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (hash: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg=)
                          7: JO8lw9pc6rdb9fPDm96v3IXX6ls.roa (hash: Laxa18ToStQU8xtCFVMy0nxd8qXrekn2wbTOcsi/EWg=)
                          8: JpOVwzFJR52Ha18KPp_rX9b-oXc.roa (hash: MGU1qSbfzmECTJdJk9NtOxyGUwWK0QwtQwtLKnD+Nus=)
                          9: KIyqHPfwDNAdOx_NOjp4-P_X4oc.roa (hash: 7ZcCUlsf8/YzuQGzuoy8zSBfxuieaLNl0lOg+fkUsWM=)
                          10: RfwinOHzalLF3nqeVUn7pJqKZzw.roa (hash: fJfHYnqpQ6E1zT38hGEb3xb9EUxe0gvjSVN8q7zxuzU=)
                          11: SB2qbaOdh7ZnvTo3d9-1rReC-O8.roa (hash: K48t7pi0aoEqOYKb47PbaJcr/GnhGXsIRIQ+zbZ9rrg=)
                          12: SJ5lDIB3IGqaDmQaI30m-Ngpckk.roa (hash: utGuqYI8PGSeG8YzzGcnX5WML/j07lId3Gwa7KppOww=)
                          13: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (hash: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg=)
                          14: l2Ed9oBWwrVZTwo8feGoIZNIOg0.roa (hash: I8HT0SN3rG3gxZ/qd14mifoV50o4pzJvgAYyOBQWWy4=)
                          15: nvxQJqPj5xCQW67tgi211cFPXTQ.roa (hash: xfa8KDdjeEdqxYcvOvQdbP9fHGnZD3QGyADGsxwOr6I=)
                          16: rXhlV92N2dDSt5AEBQFXZP4vo18.roa (hash: jl3fY0i3pjZygoyHbd5i+NKaykHgJYGsXxeJwuO3F+0=)
                          17: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:fe:bf:cc:f8:26:b5:d2:7c:65:fd:6e:63:6a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
        Validity
            Not Before: Jan 25 19:01:06 2026 GMT
            Not After : Jan 26 19:01:06 2026 GMT
        Subject: CN=59b1e88c2ae67f66b7ccc6d7c0b99d0b69a4c4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:1d:08:a9:2d:c1:bc:07:fc:29:e8:84:c7:
                    21:65:9e:41:e2:97:fc:b3:0f:2f:08:ac:c0:33:db:
                    47:f2:e5:3b:95:fc:bc:82:bb:bd:0f:92:75:6f:0c:
                    ed:a7:67:7f:d3:ad:15:bb:48:18:c5:f5:74:0c:0a:
                    1c:b3:29:32:fc:00:78:39:1d:f3:a3:dc:aa:f7:6d:
                    f8:94:cf:54:0f:5c:2b:ce:d9:22:21:97:a6:f6:0f:
                    aa:2b:7a:af:c8:e9:fd:6c:04:28:e1:e0:d1:39:5d:
                    41:f5:a3:e8:7c:c9:42:e5:33:bf:8c:cc:32:47:7e:
                    c5:d0:e7:54:f7:68:10:bc:d1:0e:ce:0f:f4:e4:bc:
                    b5:01:a8:70:6c:c0:a8:87:8c:bc:68:9e:e5:46:30:
                    e2:53:b4:12:2c:1f:1d:61:da:fd:2f:f1:d0:b6:ff:
                    ee:cd:54:84:b5:1a:27:50:fe:57:b9:68:27:3c:36:
                    f4:0c:d8:a1:de:a0:ef:e8:c0:30:db:09:31:c9:ef:
                    9b:65:28:f2:a1:88:b6:1e:e4:b4:da:08:3c:b6:62:
                    61:6f:86:4c:bc:a1:bb:83:d3:ff:ae:4d:ed:b1:93:
                    10:86:5f:11:2e:57:59:d4:30:5f:e9:fb:0a:9e:67:
                    75:44:79:59:c2:a5:a2:93:97:d4:dc:af:b1:3d:3a:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B1:E8:8C:2A:E6:7F:66:B7:CC:C6:D7:C0:B9:9D:0B:69:A4:C4:B6
            X509v3 Authority Key Identifier:
                keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:aa:ec:70:5c:c0:51:68:b0:c5:c4:cd:27:5e:93:79:a5:d2:
         9f:9d:cc:71:23:cc:62:d2:50:6d:60:cb:56:b6:51:b9:67:62:
         14:ce:80:06:f8:53:ea:08:9a:d5:46:2f:62:9b:ad:f7:5c:23:
         62:a5:73:cf:58:dd:ef:db:1f:fb:88:01:9b:28:74:ea:f2:d4:
         f0:0d:01:5a:cd:9c:86:5c:d2:6c:6b:30:d8:b4:72:88:1b:f7:
         e9:30:aa:2b:19:24:db:3f:06:93:33:fb:06:20:01:a4:3d:81:
         d8:1e:cf:b4:fa:5e:7a:6d:91:4c:8e:31:87:d3:26:b1:c8:5d:
         3c:5c:b9:af:fa:99:d0:a8:e6:28:32:e4:06:33:9c:25:69:ae:
         de:6e:6a:f5:45:8e:73:d3:bc:60:08:dd:bd:eb:b3:d1:8f:0f:
         fe:0e:08:90:74:e7:c7:83:ed:14:77:7b:b0:17:9a:dc:e0:86:
         58:76:22:20:8f:26:ed:47:88:e1:da:da:a3:90:3b:f5:05:32:
         45:19:82:66:1b:69:fa:3a:4f:c3:e7:c3:e5:44:08:43:14:d5:
         07:1c:cc:40:b2:80:75:e0:f5:d1:9c:bd:2c:97:fc:df:f1:1c:
         50:72:7b:1b:c9:8e:40:56:9d:72:57:ab:1a:61:2d:2a:41:3a:
         58:ff:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:22 2026 by rpki-client