This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          hfdj5pZPM5EmPvIFa9dc887yg7t7JCZyLpOItY9Whe0=
Subject key identifier:   14:EA:C6:E8:C5:55:C1:B9:3D:15:09:4D:A8:39:91:1B:51:EE:33:AC
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       019C096A12D4EF54FEFAF9B09A734C9076EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          1808
Signing time:             Thu 29 Jan 2026 11:01:12 +0000
Manifest this update:     Thu 29 Jan 2026 11:01:12 +0000
Manifest next update:     Fri 30 Jan 2026 11:01:12 +0000
Files and hashes:         1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=)
                          2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=)
                          3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=)
                          4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: 8uA8LVHGpljXWXyrOlGvFbn6NfnarHBog3jIlwGi63U=)
                          5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=)
                          6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=)
                          7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=)
                          8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=)
                          9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=)
                          10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=)
                          11: XDRix6QDR_Gjs6-Cgo-LajMwjLo.roa (hash: D5tYwaAg7BrfpT0g1cIaNhjKGBys4m2pxD23SmcuiB0=)
                          12: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=)
                          13: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=)
                          14: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=)
                          15: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=)
                          16: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=)
                          17: x_JLnp-gge30umPx_RvTQbE6gPs.roa (hash: Ia9WGZIGIJ1OoZ2Ke+mCm85FUNL3XOpDFSZD7R/PX0c=)
                          18: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:09:6a:12:d4:ef:54:fe:fa:f9:b0:9a:73:4c:90:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jan 29 11:01:12 2026 GMT
            Not After : Jan 30 11:01:12 2026 GMT
        Subject: CN=14eac6e8c555c1b93d15094da839911b51ee33ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:06:71:54:c8:99:c3:26:b0:dc:ee:4a:f7:
                    43:73:ce:5b:2c:8e:e4:36:f6:55:26:ff:88:e2:bf:
                    82:b9:e1:a3:18:0e:e3:ff:5e:ed:d1:7f:92:b2:eb:
                    99:da:1d:7d:77:70:56:52:01:9a:6e:ec:75:63:2f:
                    c7:f5:ca:18:82:8f:1e:4f:eb:21:26:a5:96:12:f3:
                    7e:12:a6:d5:83:79:20:13:dd:54:09:a6:b6:a5:57:
                    90:d5:d4:7a:a6:6a:ba:98:ac:12:fe:d3:a3:1f:db:
                    aa:b4:15:88:5c:76:1e:d0:ac:af:b3:b7:f5:bc:65:
                    e5:05:76:ef:a4:04:b5:04:65:39:eb:3c:4c:5d:18:
                    19:6b:55:a8:3e:0d:e0:c5:d9:17:ba:3c:c6:bd:e9:
                    60:04:e4:b7:cf:74:a0:39:1b:07:fd:c9:b6:06:13:
                    81:6c:53:a5:ed:e3:38:5e:9b:5e:00:1f:55:67:3d:
                    6b:f1:43:03:e2:7f:9f:78:7f:79:16:9e:62:d8:e5:
                    67:3f:60:dc:3e:db:46:78:d6:e2:25:73:38:c5:b5:
                    f5:6e:e9:6c:0f:c7:d0:00:66:26:b3:fb:e4:8f:e4:
                    f2:a2:81:04:34:50:ee:38:b2:b1:ff:4a:7d:97:20:
                    fa:8c:ba:ea:1b:9e:1c:36:ef:f2:8d:c7:c6:91:46:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:C6:E8:C5:55:C1:B9:3D:15:09:4D:A8:39:91:1B:51:EE:33:AC
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:31:ac:f5:84:f0:d2:b0:b5:06:7a:e7:6d:7f:6d:f6:e7:f5:
         9f:2c:e7:12:84:33:35:7c:84:df:50:7e:e4:e2:15:5d:88:7c:
         e3:6e:69:28:fd:fd:59:69:bb:f9:e6:d4:6c:9d:c4:39:5f:a3:
         55:80:34:a3:09:b8:31:8e:f2:24:fd:bb:3f:a3:3e:c6:00:ea:
         3b:fe:58:76:f7:6d:cc:73:94:b5:22:43:d4:0f:3a:65:cb:28:
         39:dd:5c:c4:ba:5a:1f:be:8d:d1:1f:7a:70:33:3f:1f:25:ef:
         72:b7:9c:e1:ad:1f:f9:46:75:35:d7:f3:1c:8d:e7:39:d2:86:
         1c:99:76:f3:a6:df:07:f1:1e:fd:b9:e6:4c:19:bd:75:20:10:
         ab:b5:05:7d:68:42:f9:09:af:1a:1e:56:fd:4b:38:06:50:97:
         55:7a:6c:eb:b9:95:4d:f7:64:e2:f4:a8:ac:b8:be:5b:30:5d:
         f4:17:11:12:fb:05:68:9e:fc:e5:55:9d:68:6c:5b:64:59:a6:
         e5:79:31:eb:e8:73:51:9f:c4:a5:1b:75:33:3b:a4:bc:96:3f:
         a4:ea:f9:ca:c2:6f:0a:eb:ff:d7:13:f1:6c:32:28:29:1b:a9:
         a1:0d:38:6f:18:f9:bf:b5:f4:4d:83:fe:b9:9d:13:d8:47:79:
         a1:03:dc:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwJahLU71T++vmwmnNMkHbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0
NWJhMmEwHhcNMjYwMTI5MTEwMTEyWhcNMjYwMTMwMTEwMTEyWjAzMTEwLwYDVQQD
EygxNGVhYzZlOGM1NTVjMWI5M2QxNTA5NGRhODM5OTExYjUxZWUzM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZkGcVTImcMmsNzuSvdDc85bLI7k
NvZVJv+I4r+CueGjGA7j/17t0X+SsuuZ2h19d3BWUgGabux1Yy/H9coYgo8eT+sh
JqWWEvN+EqbVg3kgE91UCaa2pVeQ1dR6pmq6mKwS/tOjH9uqtBWIXHYe0Kyvs7f1
vGXlBXbvpAS1BGU56zxMXRgZa1WoPg3gxdkXujzGvelgBOS3z3SgORsH/cm2BhOB
bFOl7eM4XpteAB9VZz1r8UMD4n+feH95Fp5i2OVnP2DcPttGeNbiJXM4xbX1buls
D8fQAGYms/vkj+TyooEENFDuOLKx/0p9lyD6jLrqG54cNu/yjcfGkUaGqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTqxujFVcG5PRUJTag5kRtR7jOsMB8GA1UdIwQY
MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It
MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0
LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzGs9YTw
0rC1BnrnbX9t9uf1nyznEoQzNXyE31B+5OIVXYh8425pKP39WWm7+ebUbJ3EOV+j
VYA0owm4MY7yJP27P6M+xgDqO/5YdvdtzHOUtSJD1A86ZcsoOd1cxLpaH76N0R96
cDM/HyXvcrec4a0f+UZ1NdfzHI3nOdKGHJl286bfB/Ee/bnmTBm9dSAQq7UFfWhC
+QmvGh5W/Us4BlCXVXps67mVTfdk4vSorLi+WzBd9BcREvsFaJ785VWdaGxbZFmm
5Xkx6+hzUZ/EpRt1MzukvJY/pOr5ysJvCuv/1xPxbDIoKRupoQ04bxj5v7X0TYP+
uZ0T2Ed5oQPcbA==
-----END CERTIFICATE-----
Generated at Thu Jan 29 17:54:10 2026 by rpki-client