This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File:                     d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier:          Yc8f22YJEJwOL9Am5IVOD5bY1lbV+Yia5UdqLMGP/TE=
Subject key identifier:   1C:96:04:F6:EE:95:A2:37:63:4C:70:06:A7:70:FE:40:82:62:E5:34
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer:       /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial:       019BF79A94609E9D5390468BA69F0EE72A9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number:          13EF
Signing time:             Mon 26 Jan 2026 00:01:01 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:01 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:01 +0000
Files and hashes:         1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
                          2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: 8BXHPtIjEzlFJUGRSbL12VRuBJn7cL1CpX3ey2txkNI=)
                          3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:94:60:9e:9d:53:90:46:8b:a6:9f:0e:e7:2a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
        Validity
            Not Before: Jan 26 00:01:01 2026 GMT
            Not After : Jan 27 00:01:01 2026 GMT
        Subject: CN=1c9604f6ee95a237634c7006a770fe408262e534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:99:7d:e1:20:12:02:18:db:d2:ba:47:f5:
                    0c:2c:1b:83:db:61:42:13:85:d6:c2:83:7a:f8:72:
                    2d:20:a0:95:ea:9f:2d:58:7d:89:6a:9b:d8:3b:fb:
                    a3:93:3e:5c:7d:34:3a:08:a6:a2:e6:3a:aa:9f:b0:
                    c3:bd:62:26:a9:1f:13:4c:f9:c0:e5:9b:10:ca:0c:
                    7c:e6:71:b3:52:46:8e:ea:f7:85:d7:87:71:c3:90:
                    3c:c7:70:0d:aa:d3:78:6f:aa:e8:7c:c0:5b:68:38:
                    f6:25:cc:c3:4e:3e:c7:0e:3d:c0:99:88:ad:c7:ff:
                    f2:0b:da:9f:45:66:2c:78:97:67:0b:41:2e:8c:6d:
                    02:ab:21:0f:b4:b9:0b:b7:d0:4b:da:03:3d:2b:8d:
                    8d:76:39:97:be:b9:1a:06:01:5c:db:bd:58:e9:8c:
                    a5:4d:55:8d:e4:fc:b2:62:5d:6f:31:12:38:9d:98:
                    30:b9:e5:e7:5c:47:90:32:4b:f8:1f:1f:e2:99:66:
                    f4:cb:98:b0:d0:9b:aa:54:33:f8:f3:0d:7b:50:f4:
                    d5:e7:58:8c:e5:e2:f4:1d:52:22:40:79:b3:66:0d:
                    60:25:3a:6a:77:57:0d:46:ec:66:b5:dd:2d:81:b9:
                    0f:a5:70:c3:d8:82:95:49:23:f9:54:a1:5e:db:6e:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:96:04:F6:EE:95:A2:37:63:4C:70:06:A7:70:FE:40:82:62:E5:34
            X509v3 Authority Key Identifier:
                keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f9:0d:b3:78:47:4f:7e:54:e0:37:68:a2:d7:79:ea:3c:bf:
         a7:c9:fd:8d:78:db:53:d1:50:dc:4c:18:4c:df:4b:86:d0:b0:
         47:90:fa:69:bb:82:38:b4:e4:65:16:e0:39:c9:3c:2a:1e:4f:
         c2:ab:9f:08:3b:5d:de:ef:8d:bf:28:ef:05:d8:f0:15:c7:23:
         84:01:6a:a7:6d:29:15:9c:fc:cb:ac:17:73:1f:a8:ac:a5:13:
         34:06:91:a4:e1:8e:9e:40:96:9a:3e:f2:b0:7f:4a:1c:3d:fc:
         d4:84:a4:9e:48:7f:b7:eb:31:0a:16:28:27:80:cf:d1:b5:e3:
         e1:5a:82:72:11:99:14:37:84:bf:02:6c:71:1f:d1:da:6b:e7:
         50:68:19:32:17:e0:8b:81:7e:5a:94:9c:b2:00:d9:9e:e3:4c:
         53:8e:78:ec:af:90:e8:e2:bd:ef:6b:83:fb:20:cd:31:42:4a:
         59:93:76:fa:5a:8d:0e:25:c3:8f:e7:ff:55:4c:cf:09:13:f3:
         a8:fb:2d:f2:f2:e6:18:c1:1f:5c:b4:a0:5c:ac:d7:38:ac:a3:
         6d:08:4d:ae:7c:cd:37:c2:e4:09:65:06:d1:c8:c5:e9:af:e5:
         37:43:2c:2d:51:94:17:19:18:17:a2:72:29:4c:9b:a1:de:16:
         f4:52:c5:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mpRgnp1TkEaLpp8O5yqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZThiYmY4NjQzYWJkNjJmZjNmNDJiZWM0YzBiMmRiOTc3
NTk2ZDcwHhcNMjYwMTI2MDAwMTAxWhcNMjYwMTI3MDAwMTAxWjAzMTEwLwYDVQQD
EygxYzk2MDRmNmVlOTVhMjM3NjM0YzcwMDZhNzcwZmU0MDgyNjJlNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO6ZfeEgEgIY29K6R/UMLBuD22FC
E4XWwoN6+HItIKCV6p8tWH2JapvYO/ujkz5cfTQ6CKai5jqqn7DDvWImqR8TTPnA
5ZsQygx85nGzUkaO6veF14dxw5A8x3ANqtN4b6rofMBbaDj2JczDTj7HDj3AmYit
x//yC9qfRWYseJdnC0EujG0CqyEPtLkLt9BL2gM9K42NdjmXvrkaBgFc271Y6Yyl
TVWN5PyyYl1vMRI4nZgwueXnXEeQMkv4Hx/imWb0y5iw0JuqVDP48w17UPTV51iM
5eL0HVIiQHmzZg1gJTpqd1cNRuxmtd0tgbkPpXDD2IKVSSP5VKFe224x9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByWBPbulaI3Y0xwBqdw/kCCYuU0MB8GA1UdIwQY
MBaAFHfou/hkOr1i/z9CvsTAstuXdZbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjkt
NDRjY2QxYjUxZjEwLzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjktNDRjY2QxYjUxZjEw
LzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovkNs3hH
T35U4Ddootd56jy/p8n9jXjbU9FQ3EwYTN9LhtCwR5D6abuCOLTkZRbgOck8Kh5P
wqufCDtd3u+NvyjvBdjwFccjhAFqp20pFZz8y6wXcx+orKUTNAaRpOGOnkCWmj7y
sH9KHD381ISknkh/t+sxChYoJ4DP0bXj4VqCchGZFDeEvwJscR/R2mvnUGgZMhfg
i4F+WpScsgDZnuNMU4547K+Q6OK972uD+yDNMUJKWZN2+lqNDiXDj+f/VUzPCRPz
qPst8vLmGMEfXLSgXKzXOKyjbQhNrnzNN8LkCWUG0cjF6a/lN0MsLVGUFxkYF6Jy
KUybod4W9FLFPw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:22 2026 by rpki-client