This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
File:                     7VSy51k1UxJ457rRV8SMiuxD7ug.mft (raw, json)
Hash identifier:          P93Rjn20N7dS4GPAUvtiPcln87I2q8wD8TbNWc+97gM=
Subject key identifier:   AB:6E:1E:EF:95:9E:F8:AC:0C:1E:32:F8:66:84:E2:4B:B4:CE:7A:8E
Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
Certificate issuer:       /CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Certificate serial:       019BF8ACD105463A43F7CF1522AD3806D303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
Manifest number:          07CA
Signing time:             Mon 26 Jan 2026 05:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:33 +0000
Files and hashes:         1: 7VSy51k1UxJ457rRV8SMiuxD7ug.crl (hash: OF7FPDRfHXktjwq2vmf2oRgZ+oeHZ9LO3pl22foPfVI=)
                          2: 9jn6dsCG7zUKMoNLEB2Nq7yEmNo.roa (hash: ZpDThViKND8r1v13uLcKpK3wc0tcaMhUMIpaAAxcmHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ac:d1:05:46:3a:43:f7:cf:15:22:ad:38:06:d3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8
        Validity
            Not Before: Jan 26 05:00:33 2026 GMT
            Not After : Jan 27 05:00:33 2026 GMT
        Subject: CN=ab6e1eef959ef8ac0c1e32f86684e24bb4ce7a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:65:86:a1:93:c7:97:01:92:09:13:d3:a1:
                    94:d5:cf:e5:a8:4e:c0:39:ff:bd:f3:10:15:ce:5c:
                    db:95:9d:16:6c:11:a9:42:e8:24:da:95:00:77:12:
                    08:09:c3:ff:ac:89:d9:e6:df:09:63:1f:cc:5a:c6:
                    54:1b:8b:00:7f:07:17:34:38:91:f8:4c:75:a8:00:
                    5b:aa:00:76:56:3c:20:ce:be:8b:c2:0e:a0:6c:06:
                    7e:4f:75:93:cd:90:c8:ef:8e:5a:d1:75:b2:b7:c3:
                    09:7b:f9:29:69:5f:e4:1d:92:b0:55:b7:df:1b:ba:
                    8b:25:1a:6b:90:ef:68:ec:06:79:f2:4c:7c:26:33:
                    a3:5d:55:7a:2d:8d:40:eb:55:49:ec:ac:b4:e6:2b:
                    86:d4:52:48:9c:5f:ec:e1:b8:f4:f8:9f:12:7f:43:
                    ac:95:52:18:9f:1d:70:9b:de:13:db:b1:8f:99:ea:
                    85:af:0d:13:e3:3a:0d:70:e7:ad:8a:a6:c6:1f:a2:
                    89:81:09:e5:08:20:3b:94:aa:bd:c6:87:8b:86:c7:
                    d2:ce:5f:5f:42:b5:20:23:8a:72:bd:b8:d6:81:ac:
                    76:74:d5:4d:99:3b:d4:c9:92:ab:2e:73:60:b6:c1:
                    c4:4e:5c:c7:0f:a3:70:85:5a:2d:14:c6:a1:04:81:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:1E:EF:95:9E:F8:AC:0C:1E:32:F8:66:84:E2:4B:B4:CE:7A:8E
            X509v3 Authority Key Identifier:
                keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:41:3b:87:02:f6:d3:5b:0f:ba:fc:63:8d:63:92:85:b6:63:
         10:1d:82:aa:e2:f0:17:82:88:86:e4:79:da:d5:2b:6c:45:f1:
         ae:a8:39:f4:b9:9e:17:39:bd:34:07:51:11:97:aa:b2:2b:ba:
         06:c4:8d:97:32:62:f0:75:f5:99:a5:2d:31:fc:ce:97:25:bf:
         b1:56:35:f9:12:42:3c:7c:97:07:e8:94:62:fb:5c:99:d5:e8:
         e0:5d:3a:65:39:f2:08:dd:6b:b3:13:36:df:8d:32:64:95:cb:
         65:7c:39:62:a6:58:9b:90:e7:f1:33:19:1b:f3:75:e6:8a:17:
         7e:14:b2:9e:b2:2d:e2:53:ec:00:e7:69:3c:43:1c:88:b8:31:
         18:47:b5:f5:45:53:5b:da:34:9e:2c:81:03:26:57:c1:79:81:
         4f:57:87:c1:42:9d:f0:1c:8d:26:07:e4:0b:a8:e9:51:84:85:
         5e:6e:4c:db:26:fc:5a:18:fa:18:52:1a:22:ab:0b:93:1e:c2:
         0e:78:85:c2:68:1f:a6:f3:3c:7b:5e:b4:6c:0d:ec:b4:85:cb:
         3e:c9:8c:09:f3:a7:56:a2:41:1b:da:37:b1:c0:28:db:88:25:
         ec:a4:3b:08:b4:16:04:c7:9b:39:5f:54:94:d3:8f:7d:bd:90:
         c4:3b:91:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4rNEFRjpD988VIq04BtMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTRiMmU3NTkzNTUzMTI3OGU3YmFkMTU3YzQ4YzhhZWM0
M2VlZTgwHhcNMjYwMTI2MDUwMDMzWhcNMjYwMTI3MDUwMDMzWjAzMTEwLwYDVQQD
EyhhYjZlMWVlZjk1OWVmOGFjMGMxZTMyZjg2Njg0ZTI0YmI0Y2U3YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlZlhqGTx5cBkgkT06GU1c/lqE7A
Of+98xAVzlzblZ0WbBGpQugk2pUAdxIICcP/rInZ5t8JYx/MWsZUG4sAfwcXNDiR
+Ex1qABbqgB2Vjwgzr6Lwg6gbAZ+T3WTzZDI745a0XWyt8MJe/kpaV/kHZKwVbff
G7qLJRprkO9o7AZ58kx8JjOjXVV6LY1A61VJ7Ky05iuG1FJInF/s4bj0+J8Sf0Os
lVIYnx1wm94T27GPmeqFrw0T4zoNcOetiqbGH6KJgQnlCCA7lKq9xoeLhsfSzl9f
QrUgI4pyvbjWgax2dNVNmTvUyZKrLnNgtsHETlzHD6NwhVotFMahBIGPSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtuHu+VnvisDB4y+GaE4ku0znqOMB8GA1UdIwQY
MBaAFO1UsudZNVMSeOe60VfEjIrsQ+7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mZWUwOTYtMzJiNy00ZjQ4LTg1NTAt
MTA0NTU3MjU3ZmI4LzEvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mZWUwOTYtMzJiNy00ZjQ4LTg1NTAtMTA0NTU3MjU3ZmI4
LzEvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUE7hwL2
01sPuvxjjWOShbZjEB2CquLwF4KIhuR52tUrbEXxrqg59LmeFzm9NAdREZeqsiu6
BsSNlzJi8HX1maUtMfzOlyW/sVY1+RJCPHyXB+iUYvtcmdXo4F06ZTnyCN1rsxM2
340yZJXLZXw5YqZYm5Dn8TMZG/N15ooXfhSynrIt4lPsAOdpPEMciLgxGEe19UVT
W9o0niyBAyZXwXmBT1eHwUKd8ByNJgfkC6jpUYSFXm5M2yb8Whj6GFIaIqsLkx7C
DniFwmgfpvM8e160bA3stIXLPsmMCfOnVqJBG9o3scAo24gl7KQ7CLQWBMebOV9U
lNOPfb2QxDuRDA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:15 2026 by rpki-client