This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
File:                     7uVzCEEAtB18weRHKVunHQGdUZI.mft (raw, json)
Hash identifier:          7qvqciwloqvEfWpZse+E1VKfuvMtm4hHmhjJYxw+IWA=
Subject key identifier:   5B:C4:80:F2:1C:65:40:EA:91:3B:30:80:EC:9D:FE:88:E8:C5:2A:0D
Authority key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92
Certificate issuer:       /CN=eee573084100b41d7cc1e447295ba71d019d5192
Certificate serial:       019BFCC0BCEFDFC1EA31238DB8FE0EF74E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
Manifest number:          17EE
Signing time:             Tue 27 Jan 2026 00:00:48 +0000
Manifest this update:     Tue 27 Jan 2026 00:00:48 +0000
Manifest next update:     Wed 28 Jan 2026 00:00:48 +0000
Files and hashes:         1: 6q1ULhfkWdwyyagDflHHz9LqBpc.roa (hash: l8m9g7yUkPHkSxeR6ukqIQSmxc1XLN7jhDjXf/cXTFk=)
                          2: 7uVzCEEAtB18weRHKVunHQGdUZI.crl (hash: hctAvrGNf1Pj+V4QvYgZJt6doZZpKBFz6EXN6YwyOko=)
                          3: J6faa1GibNw6MoSS_lsuGkWgigA.roa (hash: B7w95QdSwgNMUOur1scDCD/uIecO23CLtKhv7ej0ZQA=)
                          4: kIc25lNhDl4D7pUCbie5D4jyeE4.roa (hash: IhxMDpi+INQ3n3VWqRXdFP57vs6T6oZx2cztKdPMw6s=)
                          5: rKTkliLDLQIxVXw-jHQNtO48JpE.asa (hash: sYxyuJnt8ZAM8SuaIevBds7e+invNcssIifEE4APXWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c0:bc:ef:df:c1:ea:31:23:8d:b8:fe:0e:f7:4e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee573084100b41d7cc1e447295ba71d019d5192
        Validity
            Not Before: Jan 27 00:00:48 2026 GMT
            Not After : Jan 28 00:00:48 2026 GMT
        Subject: CN=5bc480f21c6540ea913b3080ec9dfe88e8c52a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:07:8d:4b:45:0a:aa:fe:fd:d5:38:ca:15:
                    94:d4:45:16:6f:19:1d:d7:06:22:3c:bb:a6:05:9f:
                    98:30:dc:4c:5b:7c:04:6f:67:7d:08:22:c6:de:4e:
                    13:ce:27:2f:45:95:d5:38:2a:b3:33:3d:f4:28:28:
                    42:46:a6:2f:cd:0a:32:4d:3d:45:f6:74:8f:53:f2:
                    eb:c2:c7:0c:be:4d:5a:76:fd:67:d3:a5:6e:15:76:
                    8c:ca:65:be:00:fb:6d:25:9a:98:e5:61:ea:cc:f5:
                    ec:f1:96:f0:8a:ee:d5:18:0c:30:b9:9a:fe:ca:b7:
                    07:17:fa:22:1c:ea:68:e3:f7:08:da:ec:f2:51:80:
                    b1:ff:56:d4:40:ec:04:d3:ca:13:6c:e4:c1:54:54:
                    cd:9e:85:19:33:46:b6:6d:c5:e9:07:9f:e9:31:fd:
                    30:3f:f0:a9:64:51:a6:a1:ad:af:d4:f3:20:03:4e:
                    cb:9b:63:13:8f:cc:2d:2c:0a:f9:d9:86:65:b3:b6:
                    b1:7e:4b:46:e3:72:06:1a:85:a3:8b:96:b1:e5:71:
                    b9:38:21:ee:c2:00:bf:41:e6:68:77:71:af:67:56:
                    b0:18:1f:47:24:f6:de:c0:19:2e:d9:6e:ba:86:d1:
                    11:18:08:c5:c8:e7:a9:fe:76:89:4a:e6:99:a9:33:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C4:80:F2:1C:65:40:EA:91:3B:30:80:EC:9D:FE:88:E8:C5:2A:0D
            X509v3 Authority Key Identifier:
                keyid:EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5a:fd:7a:c7:69:0e:40:18:07:4e:dd:70:8b:8c:d2:ad:cc:
         59:c3:3e:3b:64:68:77:b2:ac:a5:4c:b0:84:43:16:59:df:c5:
         1c:96:6e:26:c1:4c:de:a0:85:d8:b7:f9:75:8a:1c:b4:bc:67:
         5a:44:90:6d:6e:2a:19:07:5a:95:ea:4a:ba:3a:96:64:5a:86:
         b9:5e:40:ef:91:1b:62:65:9c:16:4e:e6:fc:9e:b1:4a:cb:57:
         2c:b6:0e:6f:eb:67:4c:72:25:b6:9a:5a:02:09:ed:56:bf:76:
         0a:81:50:a4:db:cb:69:d0:b9:3d:ae:89:36:db:4a:f2:fe:99:
         84:b1:fe:ca:8b:2d:df:d6:8e:65:ec:54:42:f1:a6:54:ef:be:
         31:86:b2:b5:cc:ba:7f:a6:44:23:74:fa:ec:fd:f9:d8:67:d9:
         a8:2a:44:06:07:df:16:27:fc:70:3b:45:a6:d6:98:9d:68:d6:
         95:04:ce:1f:f0:16:f4:70:98:84:d4:5c:e7:bd:24:53:45:26:
         28:4a:25:2f:17:70:89:ee:af:63:34:2e:a6:ed:96:d8:3a:74:
         39:8a:9d:74:c4:7f:ec:61:7a:87:9d:ab:84:53:30:11:22:77:
         0e:c9:90:d0:5e:e9:a5:ad:5c:6a:46:02:71:d1:62:65:50:8b:
         b9:26:7c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8wLzv38HqMSONuP4O905tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTU3MzA4NDEwMGI0MWQ3Y2MxZTQ0NzI5NWJhNzFkMDE5
ZDUxOTIwHhcNMjYwMTI3MDAwMDQ4WhcNMjYwMTI4MDAwMDQ4WjAzMTEwLwYDVQQD
Eyg1YmM0ODBmMjFjNjU0MGVhOTEzYjMwODBlYzlkZmU4OGU4YzUyYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzgHjUtFCqr+/dU4yhWU1EUWbxkd
1wYiPLumBZ+YMNxMW3wEb2d9CCLG3k4TzicvRZXVOCqzMz30KChCRqYvzQoyTT1F
9nSPU/LrwscMvk1adv1n06VuFXaMymW+APttJZqY5WHqzPXs8Zbwiu7VGAwwuZr+
yrcHF/oiHOpo4/cI2uzyUYCx/1bUQOwE08oTbOTBVFTNnoUZM0a2bcXpB5/pMf0w
P/CpZFGmoa2v1PMgA07Lm2MTj8wtLAr52YZls7axfktG43IGGoWji5ax5XG5OCHu
wgC/QeZod3GvZ1awGB9HJPbewBku2W66htERGAjFyOep/naJSuaZqTNn6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvEgPIcZUDqkTswgOyd/ojoxSoNMB8GA1UdIwQY
MBaAFO7lcwhBALQdfMHkRylbpx0BnVGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xMWE4NjQtZDFjYi00MDAwLWIyYmMt
MTllZTNkOGI1NzdlLzEvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8xMWE4NjQtZDFjYi00MDAwLWIyYmMtMTllZTNkOGI1Nzdl
LzEvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1r9esdp
DkAYB07dcIuM0q3MWcM+O2Rod7KspUywhEMWWd/FHJZuJsFM3qCF2Lf5dYoctLxn
WkSQbW4qGQdalepKujqWZFqGuV5A75EbYmWcFk7m/J6xSstXLLYOb+tnTHIltppa
AgntVr92CoFQpNvLadC5Pa6JNttK8v6ZhLH+yost39aOZexUQvGmVO++MYaytcy6
f6ZEI3T67P352GfZqCpEBgffFif8cDtFptaYnWjWlQTOH/AW9HCYhNRc570kU0Um
KEolLxdwie6vYzQupu2W2Dp0OYqddMR/7GF6h52rhFMwESJ3DsmQ0F7ppa1cakYC
cdFiZVCLuSZ88g==
-----END CERTIFICATE-----
Generated at Tue Jan 27 06:08:06 2026 by rpki-client