This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File:                     7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier:          SjBlgA07jFJz76bFmt52TdxlK5VaPsIGC/Dbp09moWA=
Subject key identifier:   76:7A:E2:54:82:80:19:D3:E8:7C:10:AA:0B:97:2E:A8:BF:D0:A8:B8
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer:       /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial:       019BF9C08704201D22F0315E88882CE7C833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 10:01:42 +0000
Manifest this update:     Mon 26 Jan 2026 10:01:42 +0000
Manifest next update:     Tue 27 Jan 2026 10:01:42 +0000
Files and hashes:         1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: DZlX12sA004NxAKDqvl1wdXvw/KrzxZcjuH+1mASV8Q=)
                          2: YfWgj2my_KeNLyWnne6FgiOk-6s.roa (hash: tWmUa8IGcqX7DqS4EQsx6DEzH9rUFPj7katD2nQ7ngQ=)
                          3: a5xIvW3BW1C9Z86vKuhHNnMUW1I.roa (hash: N1TPiZLS4CBPYcke7d0x1aNn6YXVm1B/Voa46DaLwok=)
                          4: cttWIecNV3-RxwLBOUCi60J1iJY.roa (hash: BkBMDu3YGkPA9g0Vj6imuKd49PHZGK/pP3QhJiDHRZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:c0:87:04:20:1d:22:f0:31:5e:88:88:2c:e7:c8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
        Validity
            Not Before: Jan 26 10:01:42 2026 GMT
            Not After : Jan 27 10:01:42 2026 GMT
        Subject: CN=767ae254828019d3e87c10aa0b972ea8bfd0a8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:38:e6:9a:a0:9e:b1:68:80:d8:e2:b7:1f:
                    c4:df:85:94:6c:07:76:44:0a:68:48:01:f7:44:77:
                    49:52:04:5f:f6:19:24:3e:b9:66:fd:63:95:51:59:
                    4d:6a:60:da:5a:13:1a:a3:08:77:f3:40:c9:28:8b:
                    67:6f:4f:ae:d3:01:97:63:0f:06:ab:98:c8:71:ff:
                    4b:9b:fd:3b:d7:4d:1a:68:49:e5:10:2d:18:75:6c:
                    dd:72:57:6b:1e:54:e4:22:3a:c9:94:42:00:c5:76:
                    9c:e0:0e:8a:1b:6d:1c:ed:25:d6:72:78:22:4f:e2:
                    30:8b:a3:82:3d:82:be:50:f6:b8:ae:93:52:29:3f:
                    10:f5:79:68:62:05:b5:82:d3:b6:52:4b:82:bc:58:
                    da:8f:97:e4:82:5f:30:b8:b9:86:44:e6:16:24:da:
                    b1:bf:9d:1c:8d:b8:bd:c0:f4:5c:78:43:c1:85:99:
                    6a:c1:3b:a9:3c:03:9b:5c:fc:81:d4:be:65:0a:4e:
                    a3:ec:db:71:a3:58:6f:85:c7:78:0f:f2:62:1e:43:
                    4d:04:3e:46:84:fb:83:b5:b1:65:f0:74:b3:fc:72:
                    4d:da:5a:4e:c3:08:94:89:67:27:d0:25:83:1a:06:
                    27:89:a9:a7:d6:64:af:e1:9b:e1:e1:df:c4:36:4b:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7A:E2:54:82:80:19:D3:E8:7C:10:AA:0B:97:2E:A8:BF:D0:A8:B8
            X509v3 Authority Key Identifier:
                keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:5e:1e:ed:bb:f5:fe:8c:6a:82:b3:62:60:67:c9:ce:2d:51:
         17:16:95:4a:87:fe:36:1d:d6:38:55:02:ab:94:a3:d7:a1:4f:
         7e:c8:66:e3:69:5a:85:41:6b:0a:d9:10:07:fa:fa:f8:6f:42:
         9e:32:02:2b:64:88:3a:38:67:cf:57:a1:f8:f9:41:16:42:a9:
         97:6f:78:f0:b6:74:64:49:94:48:97:e2:d9:97:9e:34:84:23:
         b8:d0:eb:54:8b:d7:ea:82:9b:42:43:82:8e:51:ba:a3:cb:6d:
         7c:d2:ea:62:be:cd:0e:0f:c2:57:a6:ab:a1:44:3e:5b:56:3e:
         70:d4:37:31:38:fa:5a:9c:ab:75:f1:6d:0c:08:d4:80:6f:08:
         12:31:1c:b5:09:26:ba:8c:85:e1:13:0d:e5:7a:bb:07:41:f0:
         de:12:6d:f6:98:55:be:2f:1e:aa:8d:ea:14:1a:72:a5:5b:0d:
         7d:ca:33:b2:28:d0:56:34:e9:6c:53:d1:97:06:fa:20:44:98:
         8d:2b:b2:57:7d:fb:98:63:6a:85:42:93:a1:3f:c7:c6:e3:56:
         ca:fa:2b:d4:a2:65:f3:79:46:bd:b6:5c:6c:60:6b:0d:4b:ec:
         b4:53:93:71:b6:f4:db:82:d0:65:b2:56:23:ab:94:08:5b:16:
         d9:6f:2e:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5wIcEIB0i8DFeiIgs58gzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz
MGY4ZDgwHhcNMjYwMTI2MTAwMTQyWhcNMjYwMTI3MTAwMTQyWjAzMTEwLwYDVQQD
Eyg3NjdhZTI1NDgyODAxOWQzZTg3YzEwYWEwYjk3MmVhOGJmZDBhOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nU45pqgnrFogNjitx/E34WUbAd2
RApoSAH3RHdJUgRf9hkkPrlm/WOVUVlNamDaWhMaowh380DJKItnb0+u0wGXYw8G
q5jIcf9Lm/07100aaEnlEC0YdWzdcldrHlTkIjrJlEIAxXac4A6KG20c7SXWcngi
T+Iwi6OCPYK+UPa4rpNSKT8Q9XloYgW1gtO2UkuCvFjaj5fkgl8wuLmGROYWJNqx
v50cjbi9wPRceEPBhZlqwTupPAObXPyB1L5lCk6j7Ntxo1hvhcd4D/JiHkNNBD5G
hPuDtbFl8HSz/HJN2lpOwwiUiWcn0CWDGgYniamn1mSv4Zvh4d/ENktKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ64lSCgBnT6HwQqguXLqi/0Ki4MB8GA1UdIwQY
MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt
ODIxNzA3ZTJjMDAyLzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy
LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzV4e7bv1
/oxqgrNiYGfJzi1RFxaVSof+Nh3WOFUCq5Sj16FPfshm42lahUFrCtkQB/r6+G9C
njICK2SIOjhnz1eh+PlBFkKpl2948LZ0ZEmUSJfi2ZeeNIQjuNDrVIvX6oKbQkOC
jlG6o8ttfNLqYr7NDg/CV6aroUQ+W1Y+cNQ3MTj6WpyrdfFtDAjUgG8IEjEctQkm
uoyF4RMN5Xq7B0Hw3hJt9phVvi8eqo3qFBpypVsNfcozsijQVjTpbFPRlwb6IESY
jSuyV337mGNqhUKToT/HxuNWyvor1KJl83lGvbZcbGBrDUvstFOTcbb024LQZbJW
I6uUCFsW2W8uSg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 15:39:52 2026 by rpki-client