This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
File:                     7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json)
Hash identifier:          rlUhSCCyPg5MRlD/uS7D7dJ2s/pc1bSlPawxBbSbh6s=
Subject key identifier:   9F:F3:CC:3D:04:85:4D:0E:49:0F:0D:EC:C3:F8:81:FE:82:CB:F0:6C
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       019BF4D0355E9E4C04E589FDB37C8BEFEE1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
Manifest number:          0E4C
Signing time:             Sun 25 Jan 2026 11:00:44 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:44 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:44 +0000
Files and hashes:         1: 1-zrdARVkzgRoyTnum_A32IqG1lU.roa (hash: PEeob3OGuwYCTUydz8ovE0Sas3nGif0Et/soAa7Ru+U=)
                          2: 112MUhV6Rq4vAZbzuW-obACCM54.roa (hash: bG/EpEeoydzJUldH4JoAmHs4InlJJW21+s36TR2C22g=)
                          3: 6Un4lee3-tm_38Q2a4fRt_TbkO4.roa (hash: 2N91csqhe7eH+tOgGrfmrNd0A1nHCs+2+t/g2zbZlks=)
                          4: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: JWUyzKewe3GN2Op7aNtAGUD2oKXdavKLLgCopXOnZAE=)
                          5: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=)
                          6: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=)
                          7: LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa (hash: woZLLhApCfVxkyZ50HpqXpM/zC7yGzb4mBQNzIbCauE=)
                          8: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=)
                          9: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=)
                          10: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=)
                          11: WN-eS_dhlalip931Wl82--H94Og.roa (hash: rbOvjZx542d8HAJi2Jzi/JJqSYaVayN/xL7SlSV7HvY=)
                          12: WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa (hash: QXm/UopRYCraXfnadtlxCqtDzUMyQNtipIGzmPAgbf4=)
                          13: XUImnZKdlu7MDc0FxppzhVw4AFU.roa (hash: owXiNqfnKaJDDUXdUHghHE0onKUOIoOQu55R09C97Zg=)
                          14: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=)
                          15: eO45uT1GtktLT0DosPv15Nj9hds.roa (hash: /f5UBKEEnLeJEYRPrjwhCeZREfYSrFvilgtotwVacbU=)
                          16: wR_W7Dmg_rj5g7iNLVne8d71bHs.roa (hash: WKw0FrmlGytIPAlBGnbaAghgRapZaSY75ePJ0KO/AmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:35:5e:9e:4c:04:e5:89:fd:b3:7c:8b:ef:ee:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Jan 25 11:00:44 2026 GMT
            Not After : Jan 26 11:00:44 2026 GMT
        Subject: CN=9ff3cc3d04854d0e490f0decc3f881fe82cbf06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:9e:d4:b3:aa:8f:f4:2d:96:46:cc:42:72:
                    0a:9c:dc:c1:3f:b5:33:ef:fa:27:d2:1a:95:d1:41:
                    3e:fd:89:46:ec:28:49:66:af:a1:4d:6b:da:1d:5b:
                    87:46:92:88:44:3c:a6:46:6e:0e:57:3d:52:7f:49:
                    04:13:da:5e:17:17:ff:bd:ac:37:dd:fe:15:02:d8:
                    8e:66:0d:1a:f9:d7:c0:5a:db:cc:8f:62:cb:30:2b:
                    a1:22:27:ba:ad:c9:93:b0:d1:ec:aa:04:a2:4c:a2:
                    c4:49:04:fd:ad:53:58:54:05:94:d2:5e:9f:05:c9:
                    0a:29:32:9a:47:35:d3:e4:4f:ea:95:39:1c:5a:dc:
                    79:f9:8c:f5:dd:f1:36:96:6b:93:29:b3:0e:56:ce:
                    2a:d1:72:4a:0e:4a:17:42:fd:ba:21:31:17:a5:22:
                    5b:4f:f0:74:75:7d:23:23:08:cd:63:11:13:49:21:
                    15:1c:70:af:2e:84:46:ed:e3:ca:5b:d8:ae:37:79:
                    e4:17:23:85:f0:e0:c2:1d:91:28:a3:13:d8:f3:17:
                    b0:45:f7:2c:98:55:cf:03:68:e8:7e:e1:3d:c7:33:
                    33:d4:28:d8:6a:7a:88:28:e9:f8:48:23:ca:d6:19:
                    bc:3f:a0:50:ad:a5:fb:ca:c5:a8:5b:c2:cc:56:08:
                    62:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:CC:3D:04:85:4D:0E:49:0F:0D:EC:C3:F8:81:FE:82:CB:F0:6C
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f8:14:d3:66:04:2a:61:4c:e1:db:90:2d:27:ac:09:e6:98:
         bb:69:01:ea:b7:53:34:70:4e:e3:2e:85:40:47:65:d9:7f:29:
         76:90:e0:43:f0:69:94:c1:a3:07:8c:f0:02:05:fd:af:07:14:
         52:99:b0:4e:32:ed:6c:72:45:fd:6e:db:68:67:d2:c8:32:e9:
         ee:03:7f:1f:03:b9:02:a3:10:a3:d6:19:d8:81:67:c8:12:de:
         00:ad:91:87:cb:ff:10:74:6a:19:c3:2a:91:93:9c:4a:62:90:
         4d:31:cc:ab:2c:ac:ce:d0:96:c8:6a:c5:1e:89:50:24:fb:c0:
         c7:64:9a:90:28:83:3b:03:7a:ad:9b:5c:4f:a6:b8:9f:d8:54:
         da:49:0b:49:e2:e6:48:12:47:63:dd:03:45:f1:02:1e:e5:b6:
         13:0c:55:63:89:f4:c9:b9:fc:e9:e1:6d:a6:4f:44:84:82:c6:
         c8:fb:69:69:ad:13:70:be:f8:69:83:96:f0:5d:ea:91:70:0d:
         5b:1d:ee:4c:e7:4d:d7:d7:0d:28:5e:77:d8:b8:57:ca:c9:4d:
         d6:ab:bf:bc:00:1f:c9:42:f4:94:eb:91:b8:4e:1d:41:e7:34:
         7d:ee:2d:56:62:e4:a5:7a:12:12:bf:ef:e2:d0:1c:8a:98:6a:
         12:1a:f1:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00DVenkwE5Yn9s3yL7+4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjYwMTI1MTEwMDQ0WhcNMjYwMTI2MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg5ZmYzY2MzZDA0ODU0ZDBlNDkwZjBkZWNjM2Y4ODFmZTgyY2JmMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2me1LOqj/QtlkbMQnIKnNzBP7Uz
7/on0hqV0UE+/YlG7ChJZq+hTWvaHVuHRpKIRDymRm4OVz1Sf0kEE9peFxf/vaw3
3f4VAtiOZg0a+dfAWtvMj2LLMCuhIie6rcmTsNHsqgSiTKLESQT9rVNYVAWU0l6f
BckKKTKaRzXT5E/qlTkcWtx5+Yz13fE2lmuTKbMOVs4q0XJKDkoXQv26ITEXpSJb
T/B0dX0jIwjNYxETSSEVHHCvLoRG7ePKW9iuN3nkFyOF8ODCHZEooxPY8xewRfcs
mFXPA2jofuE9xzMz1CjYanqIKOn4SCPK1hm8P6BQraX7ysWoW8LMVghi+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/zzD0EhU0OSQ8N7MP4gf6Cy/BsMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/gU02YE
KmFM4duQLSesCeaYu2kB6rdTNHBO4y6FQEdl2X8pdpDgQ/BplMGjB4zwAgX9rwcU
UpmwTjLtbHJF/W7baGfSyDLp7gN/HwO5AqMQo9YZ2IFnyBLeAK2Rh8v/EHRqGcMq
kZOcSmKQTTHMqyysztCWyGrFHolQJPvAx2SakCiDOwN6rZtcT6a4n9hU2kkLSeLm
SBJHY90DRfECHuW2EwxVY4n0ybn86eFtpk9EhILGyPtpaa0TcL74aYOW8F3qkXAN
Wx3uTOdN19cNKF532LhXyslN1qu/vAAfyUL0lOuRuE4dQec0fe4tVmLkpXoSEr/v
4tAciphqEhrx3A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:22:02 2026 by rpki-client