This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          FG0atahvOmhqrKjY3iA/KJvgLfMrFHHq8S38iUiTOoY=
Subject key identifier:   D4:AB:78:BA:DE:85:F0:C9:4B:D5:26:2D:F4:1D:62:50:B4:31:0B:DD
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       019BF651286AE1BA0EA475C88881874E2CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          031C
Signing time:             Sun 25 Jan 2026 18:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:12 +0000
Files and hashes:         1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=)
                          2: 72Wb5Ky01kvhl4QhfLQ5L_ylSiI.roa (hash: vZhU/38tVfKMQXtXEf0zL9xQr8OezLicNnuxASDwPqs=)
                          3: 7V5o0G742Xx6wwekFHlHI_pH6s8.roa (hash: 5RA9pDaVBJdJXOc6UztowcHA38lXbN2dK51pTKu1n/4=)
                          4: BsPDuu6JTFYs4fX_8xgCzUyOvqg.roa (hash: o4/3dqfGtKM2QeCkXuEtb4rKzlJPRFAxduyASjTXa5c=)
                          5: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=)
                          6: HH7R7_mgRZ4jJhhX0iKYCX1Shg4.roa (hash: Ld8npwnrGzF1p9EafsI9H/f/LmZsGIBBwH4dfZK0Hdo=)
                          7: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=)
                          8: MvgNCuZzXlWuar7EiR28ia35_v4.roa (hash: pmikhTMcBnwdKLZfauM4zV25CdLoZ0KdBQ1dfdVrR+M=)
                          9: OKYChaN81pM0S03CKWkKHiwLGh4.roa (hash: 9t9dX225dhj6t8dO64Gnk0rph1x6tkTtFVt2UQ1SjiI=)
                          10: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=)
                          11: UnPZZ3Kg5vEIC6EGE2a0fCR05Us.roa (hash: nCSgngo72sAUBIAPkqY1n0nS+kfpLh6FUfGBWOhDNHw=)
                          12: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=)
                          13: WJ-fLCvpA2b7b4xbzc2R6ukUcDA.roa (hash: SBFLbGd5ofqXRAn4g/0xvSlGhywAxzvjT5O22NBuorc=)
                          14: ZolgXVRV8VEUAeyL5pcC--uLXDs.roa (hash: OetY+FbtDKCO0/4jYeRdHRkeUVdAxOsZlvKzDDYPGQI=)
                          15: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=)
                          16: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: PL8jWkWluw5XTkJ17iDwmfOwTO6cZWttijYKyFni/kA=)
                          17: f5M-hTzNDSSqohb0b1K4vjNcyxY.roa (hash: ciY50ZlYxva7aKDHcfCcjzo6LTzr/qKlBuKYyTji90k=)
                          18: gIP9USWnnclcg29VZ6IPiCLAwfs.roa (hash: 5kwZkbeysJwaJZe9nLV8atLbSq1wE0MO56m8K6TUyD0=)
                          19: hVb7evg2z_uz4tr-f0vF8wyaJ0I.roa (hash: qZy8polV2urYl3XbQ7RdweJqVcGirnLtEZ/vKoaMcpk=)
                          20: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=)
                          21: kdLGRbfEBKLHz3ENNx-yw4Gx9H4.roa (hash: rHw65Nbcdk6mE9+YiyVQv5eVR+z1Gtq6E4rwWgNi+kM=)
                          22: oLDa-CgOOZxBktUh5x01lNaT_CQ.roa (hash: 0e7mqlR9kXg777Q7Ih7D03e129ZehslnKxcXsAocg4Y=)
                          23: r9B02vmajGoqzJg47qEQQvo3CxE.roa (hash: SlXFzGDnnfIbDGN67Fp7Oc2RR984LeMf9GzRFDPOlaA=)
                          24: rT54_YmACYM5IjJqJOM_80ntieM.roa (hash: D9IVmXXNyyDAFmCrjTivjq1CStb/zV6S/zguEkOMrtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:28:6a:e1:ba:0e:a4:75:c8:88:81:87:4e:2c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: Jan 25 18:01:12 2026 GMT
            Not After : Jan 26 18:01:12 2026 GMT
        Subject: CN=d4ab78bade85f0c94bd5262df41d6250b4310bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:9b:91:8a:70:a2:fc:d1:64:7e:b1:ee:c8:
                    65:bc:fe:2d:b2:75:41:2a:d9:12:68:bf:93:30:96:
                    09:da:08:27:bf:b2:e1:ec:6c:47:e9:a9:1f:00:3c:
                    fb:29:d6:04:0f:27:db:5d:77:7f:79:34:ca:27:9a:
                    42:16:d9:34:c3:d9:96:2c:a8:e3:4d:d2:a7:b5:6f:
                    d6:68:f3:36:a8:63:b1:cf:06:73:99:90:0a:2b:ce:
                    d9:a2:22:ea:d8:85:04:1a:56:e7:ca:45:74:d0:42:
                    ed:81:f3:aa:bf:92:ff:6d:3f:82:07:5f:c4:b5:5d:
                    7e:68:74:e4:90:65:48:c9:e4:8b:61:59:bc:d1:3c:
                    16:4f:f6:30:43:e2:52:09:58:79:79:db:dc:e7:74:
                    31:34:cd:6d:2a:3d:fa:56:c5:70:fa:9e:07:62:89:
                    62:0f:55:2b:ae:09:e5:94:35:43:6c:e3:3b:a5:8e:
                    54:26:f9:ac:55:e7:82:9a:65:d8:3b:c4:f6:e2:57:
                    67:c0:f4:4b:1e:b1:ba:87:58:8c:52:6c:49:c9:8a:
                    72:17:fa:66:da:3d:32:d9:f6:9a:a8:c6:e8:40:ff:
                    0e:7d:61:3b:1d:60:14:43:1a:37:db:0e:28:e9:2c:
                    5d:dd:b4:84:b8:9c:cb:c2:6d:86:44:9b:a2:01:57:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AB:78:BA:DE:85:F0:C9:4B:D5:26:2D:F4:1D:62:50:B4:31:0B:DD
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:52:ad:59:13:27:9e:70:f0:95:cb:f3:5f:21:08:c6:da:42:
         cc:31:6b:ff:6e:46:7c:7f:d8:58:1d:5a:fc:6c:eb:1f:10:f7:
         ff:d4:fa:56:74:a1:47:97:90:d0:3c:4b:10:9e:b3:f1:f2:ed:
         34:4c:27:ef:11:c8:0b:71:d0:9c:4c:88:c5:66:bd:5e:a5:e9:
         48:b9:8f:af:9c:7f:a2:54:1b:d2:ee:a5:74:f8:62:bf:5d:58:
         8d:d5:76:45:ce:72:60:2a:40:5f:b5:10:78:06:88:89:d0:a7:
         1c:57:c7:3c:80:58:73:02:b9:4a:12:fb:02:4d:7d:34:f4:b9:
         74:ed:6b:bb:eb:08:3d:1c:96:a3:81:41:08:47:17:bf:d4:6d:
         2a:19:27:b8:94:31:cf:4d:95:99:95:7a:c6:09:d5:52:f8:ba:
         c4:e3:ab:5c:7e:a7:52:4b:8b:23:53:79:bd:73:0d:01:9d:75:
         68:70:e6:82:85:6f:13:d3:a1:99:a8:87:1c:e1:e2:34:f4:e9:
         32:8d:03:dc:57:a2:94:5e:d7:1d:a9:2f:bf:cf:54:df:07:9a:
         c5:2b:0c:fb:e8:17:91:21:f8:b9:e8:ca:10:9e:32:0a:20:b4:
         ca:54:f3:e0:b5:2b:cc:af:49:c5:1b:ce:21:3d:e3:d5:00:3a:
         70:66:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:44:36 2026 by rpki-client