This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File:                     ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier:          JiO2O8cYaRW4MzNOs9IZ4VNAxilW5bzY/EIs+Yf5TcI=
Subject key identifier:   9B:BD:05:3E:0C:F8:CC:7F:55:FF:80:E0:14:78:A7:66:C8:5F:2D:BE
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer:       /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial:       019BFB0A04E708C9B3B8B60A9377671FBE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number:          17F8
Signing time:             Mon 26 Jan 2026 16:01:36 +0000
Manifest this update:     Mon 26 Jan 2026 16:01:36 +0000
Manifest next update:     Tue 27 Jan 2026 16:01:36 +0000
Files and hashes:         1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
                          2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
                          3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
                          4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
                          5: FKX17PHtkRiTG0VO4fdkemmP9q0.roa (hash: 46njTd7Whv8oDcKQQcq166dpo8DO+HMFvA14eGT2kvA=)
                          6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
                          7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
                          8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: pzH1ePJY5UiyYnt7xpLZ8GPBxy6w23MCqRzzro4yEUI=)
                          9: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
                          10: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
                          11: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:0a:04:e7:08:c9:b3:b8:b6:0a:93:77:67:1f:be:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
        Validity
            Not Before: Jan 26 16:01:36 2026 GMT
            Not After : Jan 27 16:01:36 2026 GMT
        Subject: CN=9bbd053e0cf8cc7f55ff80e01478a766c85f2dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:f4:0e:b8:25:a7:db:af:c9:ff:6c:05:fb:
                    87:ad:aa:e8:25:e7:b6:eb:b1:ae:73:49:69:a4:9b:
                    5e:00:dc:aa:7d:63:68:cc:3f:d4:cc:b5:ca:4e:7c:
                    ae:d3:04:ef:8f:93:8c:3c:b9:2a:54:df:48:70:73:
                    ed:f8:47:e8:c6:05:9e:7a:06:b3:8c:5d:c6:c6:2c:
                    b1:b2:bb:d9:2f:a6:36:bd:7b:83:8c:88:d7:0b:4d:
                    44:d5:b1:a1:0c:d5:aa:41:26:f5:23:14:d5:08:25:
                    c6:82:d7:06:60:c3:f6:1a:1b:c9:2a:48:f3:a7:e4:
                    a1:3d:62:0b:cd:26:28:b7:ad:12:33:a9:ce:a9:91:
                    92:0e:8a:92:36:0f:74:70:e0:d8:0e:44:cf:70:38:
                    52:6f:22:38:39:81:19:2b:43:d5:24:ba:4a:09:56:
                    9b:a6:c6:f0:ad:de:ec:88:31:eb:73:38:0d:d6:9f:
                    e6:d8:4a:48:42:68:76:e3:33:7e:d8:e4:a3:61:a2:
                    ec:68:d6:e3:7d:51:90:65:0c:08:b7:be:bc:93:8c:
                    f4:5d:57:ab:72:1b:60:88:9d:8d:7f:6f:36:a7:0d:
                    3d:f7:db:98:02:a0:23:61:96:ea:aa:32:99:71:c2:
                    f9:1a:d1:7e:5c:03:e4:99:00:b4:e6:51:63:09:c0:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BD:05:3E:0C:F8:CC:7F:55:FF:80:E0:14:78:A7:66:C8:5F:2D:BE
            X509v3 Authority Key Identifier:
                keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e5:37:76:b4:d6:b4:6a:16:d2:90:0d:4e:fe:05:8a:f4:9a:
         9f:76:bc:91:1e:c5:4e:fa:66:74:7b:c4:14:a5:97:7b:be:2c:
         4a:19:b3:70:fe:c0:df:84:ba:c5:66:37:c7:bb:12:0a:1a:b9:
         40:26:32:f5:45:d1:44:a3:28:5d:d4:44:92:32:aa:da:5a:38:
         16:af:d3:4f:5f:b8:74:c9:c7:69:94:5b:3f:f9:e5:01:38:8c:
         dc:8b:d0:2f:58:72:d5:f9:59:39:22:40:de:c7:bd:c8:36:fc:
         14:bc:12:89:c4:e7:07:d0:85:48:4f:3a:5d:68:c2:ea:38:a7:
         f6:28:62:c9:95:cc:dd:96:f6:59:24:7c:7d:84:0e:7a:66:fb:
         c1:52:18:4d:63:03:d4:4b:3c:25:20:01:4a:eb:31:cf:f5:1b:
         0d:c5:7f:dc:ca:46:a3:85:db:77:54:ed:48:cb:76:89:86:05:
         0c:03:28:93:cc:ba:dc:8b:5c:49:0e:08:79:bd:84:2d:09:7c:
         bf:f2:de:7c:11:19:63:e1:74:62:ba:d5:ef:50:54:75:e2:2c:
         c5:74:7d:25:d8:9d:65:8c:2f:c7:8a:7f:5f:89:a7:31:df:21:
         e3:53:34:1e:69:89:db:dc:f7:9f:c3:95:e6:6a:e6:fe:8d:42:
         c8:87:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:23:47 2026 by rpki-client