This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
File:                     F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json)
Hash identifier:          oshMiFl4ClY52iJN7+wsQ1QcrKXWUGDbd5eou+H3soU=
Subject key identifier:   4F:72:89:88:65:14:86:84:41:32:05:8B:FD:B1:C9:67:52:A3:E6:E7
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Certificate issuer:       /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial:       019C0067648217526225E723DCC634C689A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
Manifest number:          115E
Signing time:             Tue 27 Jan 2026 17:01:41 +0000
Manifest this update:     Tue 27 Jan 2026 17:01:41 +0000
Manifest next update:     Wed 28 Jan 2026 17:01:41 +0000
Files and hashes:         1: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=)
                          2: Ejhr2SjU79WexoLM933hU-lAuY4.roa (hash: sbdmAESMfnDvo8YrN5dMxTuEo2EnQnZWK09ir3Dff9I=)
                          3: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: I1x6QrcSvBUm1SLsR0R+bW1gT9Vl3w9NEpsLueeP9D0=)
                          4: FwZ4tGhhHlBJa6AFs4JQkCTMt9M.roa (hash: EJSal4YNN4/mCpurDCccYfSV7aUYpug2xK9blq7WxtU=)
                          5: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=)
                          6: XtK9VzDXyv3sdwcTkwc5-Qya0DM.roa (hash: teUAHbuYhJZuEkE7pLbgFZIEibZ6lPWc/nTcJhJoJaQ=)
                          7: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=)
                          8: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=)
                          9: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=)
                          10: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=)
                          11: qcmbgoQaCmbceJ4xZI3Tt6jb-E8.roa (hash: OD8AG1ILYuTSDHzZIy152Q30x3zv2+IbmXk5SHJVDkU=)
                          12: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=)
                          13: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 15:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:00:67:64:82:17:52:62:25:e7:23:dc:c6:34:c6:89:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
        Validity
            Not Before: Jan 27 17:01:41 2026 GMT
            Not After : Jan 28 17:01:41 2026 GMT
        Subject: CN=4f728988651486844132058bfdb1c96752a3e6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:2c:a2:13:55:39:61:fe:e0:78:e8:6b:62:
                    ae:be:6f:3c:c1:7a:a3:d6:e6:f9:b1:e4:65:41:77:
                    f0:9d:b0:da:bf:06:df:63:71:90:5a:cf:76:8e:63:
                    02:be:31:2f:f0:c3:cf:63:7e:94:1d:18:11:f6:cd:
                    7a:4c:31:9d:d0:ca:95:3c:58:34:f3:d3:a8:12:a8:
                    2d:9d:f8:be:4b:6f:b3:38:a1:e0:24:56:ff:6b:1e:
                    1a:36:26:b3:b8:af:0e:19:b8:b3:a5:c3:ed:af:b3:
                    d7:09:43:c5:94:fc:e9:27:cd:2a:38:f7:1e:26:e0:
                    e0:52:71:6d:b5:ef:cc:b0:82:d7:a1:ce:8f:05:da:
                    73:13:65:28:3c:d4:9a:3a:47:5e:53:ca:d8:c5:11:
                    47:5a:62:bd:59:f8:eb:79:99:88:e5:e5:ed:25:8b:
                    e8:2a:a7:b0:f9:36:fd:b8:57:5b:ed:45:5d:e2:e7:
                    d4:e1:7e:a5:c8:9f:a8:2d:79:5c:42:84:51:95:2a:
                    67:f2:65:7e:34:ff:d6:ed:a6:90:7f:b8:d9:35:f0:
                    1e:36:a4:e1:68:f8:1a:95:bd:f6:91:fd:9a:66:e6:
                    5b:b3:17:29:d0:83:89:2f:02:3a:0e:8f:9b:1e:d6:
                    e1:c2:29:2c:9d:ae:ec:63:8f:3e:cd:4b:5a:ec:dc:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:72:89:88:65:14:86:84:41:32:05:8B:FD:B1:C9:67:52:A3:E6:E7
            X509v3 Authority Key Identifier:
                keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:79:e1:52:ad:44:cb:e7:d8:3a:d1:bc:4e:36:01:8a:94:a7:
         fb:ab:a0:26:1e:a7:a3:45:84:77:24:e9:5a:30:71:31:5b:fc:
         16:7d:b7:07:8d:ef:93:3b:c5:9e:ae:9f:67:0a:0f:53:36:53:
         7d:f2:3c:62:9c:1f:51:4a:75:7f:26:52:85:b7:8c:52:ac:fa:
         7a:b4:ad:e0:31:01:ee:06:ac:e2:d3:2c:14:09:75:5b:c9:81:
         7c:72:34:00:a9:0d:4f:5f:0c:a5:27:10:78:bf:0b:82:be:0f:
         04:2f:5a:53:77:5e:6c:c2:d3:7a:d4:19:92:4f:98:d9:01:91:
         a8:37:fb:1c:86:5b:66:9a:7c:13:1c:1f:7a:8e:f2:3d:30:58:
         0a:63:14:27:66:48:81:86:26:3e:92:d8:5e:cb:50:1c:3f:48:
         e8:6a:e8:86:a7:79:d9:27:b6:f4:39:85:0b:e1:fd:14:ba:c4:
         76:79:5b:ca:73:a5:a3:47:96:c4:ca:39:d2:c6:f5:c9:90:1a:
         75:65:ed:8b:03:6d:d1:cd:a1:96:4c:3c:74:be:91:0e:26:6c:
         a6:94:41:c8:8f:7c:c1:03:49:8c:1d:3b:db:17:aa:64:92:85:
         ac:60:50:bc:31:0d:5c:93:d3:5e:ad:0d:d2:03:89:57:28:10:
         9f:cb:4b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwAZ2SCF1JiJecj3MY0xomlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjYwMTI3MTcwMTQxWhcNMjYwMTI4MTcwMTQxWjAzMTEwLwYDVQQD
Eyg0ZjcyODk4ODY1MTQ4Njg0NDEzMjA1OGJmZGIxYzk2NzUyYTNlNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtUsohNVOWH+4Hjoa2Kuvm88wXqj
1ub5seRlQXfwnbDavwbfY3GQWs92jmMCvjEv8MPPY36UHRgR9s16TDGd0MqVPFg0
89OoEqgtnfi+S2+zOKHgJFb/ax4aNiazuK8OGbizpcPtr7PXCUPFlPzpJ80qOPce
JuDgUnFtte/MsILXoc6PBdpzE2UoPNSaOkdeU8rYxRFHWmK9WfjreZmI5eXtJYvo
Kqew+Tb9uFdb7UVd4ufU4X6lyJ+oLXlcQoRRlSpn8mV+NP/W7aaQf7jZNfAeNqTh
aPgalb32kf2aZuZbsxcp0IOJLwI6Do+bHtbhwiksna7sY48+zUta7NwF8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9yiYhlFIaEQTIFi/2xyWdSo+bnMB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3nhUq1E
y+fYOtG8TjYBipSn+6ugJh6no0WEdyTpWjBxMVv8Fn23B43vkzvFnq6fZwoPUzZT
ffI8YpwfUUp1fyZShbeMUqz6erSt4DEB7gas4tMsFAl1W8mBfHI0AKkNT18MpScQ
eL8Lgr4PBC9aU3debMLTetQZkk+Y2QGRqDf7HIZbZpp8Exwfeo7yPTBYCmMUJ2ZI
gYYmPpLYXstQHD9I6Grohqd52Se29DmFC+H9FLrEdnlbynOlo0eWxMo50sb1yZAa
dWXtiwNt0c2hlkw8dL6RDiZsppRByI98wQNJjB072xeqZJKFrGBQvDENXJPTXq0N
0gOJVygQn8tLow==
-----END CERTIFICATE-----
Generated at Tue Jan 27 22:42:42 2026 by rpki-client