This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
File:                     EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json)
Hash identifier:          dUk947omgsrOt9EBcyxPBuQiYsptGhPKgEqBdzhTh4U=
Subject key identifier:   C8:A5:3C:05:BB:86:AB:78:02:DF:BB:15:76:85:6F:23:86:E2:AE:77
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Certificate issuer:       /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial:       019BD7D9484BF2538922773285CF610F1D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
Manifest number:          17FB
Signing time:             Mon 19 Jan 2026 20:01:39 +0000
Manifest this update:     Mon 19 Jan 2026 20:01:39 +0000
Manifest next update:     Tue 20 Jan 2026 20:01:39 +0000
Files and hashes:         1: 6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa (hash: m39tlNEbvl+KvzNcowhejD0YaetaJPWZmQdZ2mQ/k74=)
                          2: 9mLGCobs8b6fmlZ1T_zH5qZCHLA.roa (hash: xIWAnWYQk4WbKTNaRD60lnYQAHj9+bf9KBsYFY72scI=)
                          3: EQZgk_3J5Fyc0bcuLI3Yx--EMu8.roa (hash: aY4YMscFsgJkzrPMKTCHKvSIl1+/sZmyY9rhoC43z2o=)
                          4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: 7f4jhXdqiO2rxxj1x//ge+l/hjXLiRyU4eIg0ImJwmQ=)
                          5: NOfTkKQFl3ruOsCGzSg45VC6KLA.roa (hash: WoHHZtSZ2RRzNCMrx4Mo4OnnRJ/xg4jH+vJaSGSMeKQ=)
                          6: OYOS-7oCt8qB-IolnQtbLO6mNJs.roa (hash: chuIv7V7D8ZTIYroROKzsMh/sfUH1MBxL7TmjhgmwAY=)
                          7: U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa (hash: 8pB3kCXDYDvqkBMxSrDg6IY/CrYSzIC1l2BK7MAfP6k=)
                          8: gbXhR2uRK-RKCAkCyIxBQwTU87w.roa (hash: XhuCXdBrzSTullx7dBLgYNOs79sf2A0V1FhHe7MzJH8=)
                          9: hvYamUzrt8l5XxKg3jQF1nquOy8.roa (hash: xNuK7FrZEwKLbPgJUKdky1f1LSPyUxxPzAOoMN9Fs90=)
                          10: i6gcioIk1jIxZGNq2Keg8xOkBWg.roa (hash: EYNfjU+Znmdq/oFfOoZVDk/plRE4M9DNa/cL2woqZVo=)
                          11: kZ63SuCSKudhTtGH6_pJGkWdSXM.roa (hash: OQrqf7NPIuBzSyIJdM7aU9Y2d/U+DEvBIbGAvAZyp2o=)
                          12: nQVtLPwM7Gp6ZCLT9srWcE_wr_U.roa (hash: cKQn/pyHXQYWuoLIUTT0+l/rc5/mbfiSHrwT1Q5Iikw=)
                          13: t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa (hash: 3g70luAd5CMmu8cTIqcXY5Mx4qPSObAMdcIqmAZokIg=)
                          14: vCblwnfnVDcB7QAInr9wO3fWjIk.roa (hash: d2afxpid86oKujS9MPLVfD/AYLN6Tg4NNXIDg5DemP0=)
                          15: wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa (hash: VGQsQDGB5RifV/TxzkNx5BkHOcVUKguaU5IZPPqP/2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:d9:48:4b:f2:53:89:22:77:32:85:cf:61:0f:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
        Validity
            Not Before: Jan 19 20:01:39 2026 GMT
            Not After : Jan 20 20:01:39 2026 GMT
        Subject: CN=c8a53c05bb86ab7802dfbb1576856f2386e2ae77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:93:5e:a7:1b:53:36:47:d6:61:9f:2d:1e:
                    e9:97:14:90:ed:04:83:85:13:03:3d:66:e6:cb:61:
                    75:46:fe:83:94:b6:9e:4f:44:b2:00:8b:7b:38:55:
                    44:fe:f0:5d:b8:a0:51:3b:33:2b:31:a4:ba:6c:de:
                    2b:53:ea:ee:28:85:30:96:4a:70:8c:59:cf:69:01:
                    53:6b:27:a0:b6:9d:2a:8b:39:68:01:54:26:7c:55:
                    17:e5:5c:75:d2:dc:aa:be:c9:1b:61:c9:1d:d0:f4:
                    84:9b:fa:fb:45:86:d5:96:5f:8d:2b:be:d4:d9:bc:
                    93:f8:55:cd:f1:ae:92:6c:3f:5e:d7:54:9d:97:39:
                    e7:9a:77:87:d8:66:39:40:9e:09:89:d2:34:48:98:
                    a7:64:47:12:67:0e:5b:d0:81:76:ba:27:8f:a9:74:
                    87:f7:b3:1c:03:c5:01:4a:6e:81:50:87:4a:1f:fc:
                    88:ff:dd:4d:30:e7:28:63:7b:eb:3b:52:11:71:e3:
                    30:94:94:dd:f3:b9:87:0d:aa:e0:d7:01:7c:50:82:
                    6b:65:5a:6b:26:ec:1d:af:f6:f3:ec:2c:f3:68:60:
                    64:d6:d5:ee:f1:97:69:a9:3d:90:a1:e0:57:18:9d:
                    ee:46:37:16:25:12:40:e3:58:96:6a:d8:be:8f:cb:
                    00:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A5:3C:05:BB:86:AB:78:02:DF:BB:15:76:85:6F:23:86:E2:AE:77
            X509v3 Authority Key Identifier:
                keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:48:85:af:63:0c:d3:57:a0:ef:e6:87:02:59:71:15:93:6f:
         4a:2c:39:bb:5b:b9:0b:ca:ea:80:30:4b:d7:27:ec:8c:1b:a7:
         81:05:aa:4a:92:0f:49:97:e3:e7:29:84:78:f2:45:04:b0:be:
         ee:5e:b2:be:ad:c0:53:ed:e5:53:bf:07:b8:46:f4:ae:50:3e:
         65:bb:59:c1:1c:5f:3a:53:37:2f:8e:4d:2b:3b:8b:e4:75:2a:
         75:fc:c0:f5:c9:88:d4:13:25:71:e6:d5:cb:91:38:9e:12:b4:
         2b:00:65:c3:da:e5:e5:3c:fc:c2:c3:6b:98:41:65:a8:5f:e0:
         46:e0:5f:1b:d4:13:84:5c:af:5c:b6:00:f3:c0:d9:98:e6:a3:
         c1:78:7e:a2:e5:8f:f6:a6:f4:31:80:8c:39:00:27:c1:1e:91:
         fb:d8:c1:28:e3:de:77:15:45:c3:cb:6b:34:9f:22:44:8b:c9:
         f3:9c:6f:c4:75:23:de:7f:2c:e6:98:53:09:bd:0d:b1:ea:c9:
         89:be:f1:a3:64:57:b0:dc:ff:6a:8c:d7:c1:ae:4d:6d:a9:ce:
         32:3f:2f:ad:d1:e3:88:34:be:32:e9:84:0f:23:86:fa:e0:dc:
         16:32:84:8e:9f:e2:e6:6d:c3:87:ad:e6:d2:6e:30:09:03:bc:
         d4:f6:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:00:16 2026 by rpki-client