This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
File:                     ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json)
Hash identifier:          oile49OdcdHDFwrL+IuWMR1HXih7yhQ5urm9AlibzxE=
Subject key identifier:   D0:43:9F:F8:E9:47:B2:75:F6:9B:E1:C1:B5:BD:BC:7E:9B:E0:1B:E4
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Certificate issuer:       /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial:       019BFAD26FCD0261629A94FFBDA961168344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
Manifest number:          16B0
Signing time:             Mon 26 Jan 2026 15:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 15:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 15:00:53 +0000
Files and hashes:         1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=)
                          2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=)
                          3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=)
                          4: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=)
                          5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: uUPju4z0//8F8yvN+flvqw7HAqRkgKbrUKsivzaVIgM=)
                          6: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=)
                          7: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=)
                          8: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=)
                          9: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=)
                          10: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=)
                          11: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=)
                          12: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=)
                          13: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=)
                          14: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=)
                          15: mcS4SdpuWVbabfdpCB_tOwct_TA.roa (hash: hcfOoUJHvls1DL90VCIcUIUdeQTL2YjVgbYPY6TdJAA=)
                          16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=)
                          17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:d2:6f:cd:02:61:62:9a:94:ff:bd:a9:61:16:83:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
        Validity
            Not Before: Jan 26 15:00:53 2026 GMT
            Not After : Jan 27 15:00:53 2026 GMT
        Subject: CN=d0439ff8e947b275f69be1c1b5bdbc7e9be01be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:8d:4d:4c:d0:22:8e:17:56:93:74:f5:65:
                    cf:64:ef:a8:2d:35:a5:e8:57:4d:a1:77:c1:e4:e4:
                    3d:18:f8:23:ef:18:d5:20:63:1b:fd:77:5a:2d:3d:
                    32:5c:bd:a9:1f:4b:9b:b1:f6:32:4b:ff:85:a9:91:
                    93:e9:32:84:17:42:e3:87:8f:02:a6:c1:53:ae:67:
                    a6:f1:bc:76:a1:97:ff:52:81:c6:84:68:db:05:5a:
                    e7:9e:f4:46:41:a2:f6:a3:a4:cc:f2:c1:43:56:66:
                    0c:17:80:68:e6:6c:a7:03:e5:aa:10:a3:35:27:5d:
                    a1:82:d8:3d:70:cc:a8:8a:da:a4:96:b6:fb:19:04:
                    ee:f3:01:88:71:b8:5c:b9:8e:15:bd:60:4e:75:c0:
                    71:cb:67:fa:3e:df:61:c4:bd:5a:fd:1d:a0:55:bd:
                    f5:d1:5b:e0:75:f1:3a:7e:1d:24:71:99:f6:90:78:
                    f6:65:fe:81:a2:f9:8e:f1:cf:2f:99:b4:db:97:00:
                    a5:85:e8:34:16:e4:bb:12:3f:e8:0e:27:bb:a5:80:
                    0a:2c:51:17:3a:13:a8:0e:bc:24:db:29:d6:72:18:
                    6e:26:d2:d5:7f:e0:4b:61:70:18:bb:50:7b:8d:25:
                    74:6c:63:53:0c:5a:56:1e:4e:e9:ad:7e:56:25:0e:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:43:9F:F8:E9:47:B2:75:F6:9B:E1:C1:B5:BD:BC:7E:9B:E0:1B:E4
            X509v3 Authority Key Identifier:
                keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:e1:79:cd:8e:5e:f4:fc:cb:02:1f:78:01:9e:b0:9a:fe:
         29:b2:55:68:14:be:9a:74:43:ee:e7:26:2a:bf:cb:a9:4d:7e:
         76:2a:09:ba:48:1d:1d:f6:56:83:d6:37:bd:27:57:03:33:63:
         31:ca:0a:4b:07:98:11:9f:27:ea:1f:5f:f0:d5:52:11:68:73:
         de:d6:ec:24:bc:4c:56:e9:3d:1f:30:99:a0:dd:33:41:3d:03:
         fc:a0:b3:6a:4d:eb:42:e9:24:0f:5c:ca:ee:03:a9:8a:83:cd:
         cf:02:2d:99:0b:77:71:4a:04:87:6b:bf:3c:6a:9f:7b:cc:ef:
         df:8a:a3:4a:91:0a:5b:8d:67:b6:f8:12:c2:53:16:5d:be:27:
         6b:66:a6:a1:4a:dd:3f:ff:fe:65:37:0e:fe:0c:8a:08:9f:06:
         84:d1:97:ea:5c:ea:de:b9:d7:29:b0:4c:78:a2:c4:10:d6:56:
         f3:8d:be:f7:77:f6:86:9d:00:74:a3:c3:3f:6f:58:5f:1d:82:
         04:be:26:c1:7f:02:7a:8e:d9:b3:f2:2f:47:19:37:a7:37:d9:
         85:c5:67:b2:b0:96:1c:b0:be:36:ea:89:b2:06:e8:d3:1a:cc:
         51:69:ae:ea:c3:1c:b6:67:7e:27:1e:77:b4:a7:e4:05:3e:d0:
         5a:6d:e1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:06 2026 by rpki-client