This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
File:                     KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json)
Hash identifier:          bb7z7wXUXMhXVLk0DFSQoiVZjFDYEy1E5JBQGG4E1nc=
Subject key identifier:   14:7F:E7:E2:70:55:C4:4B:B3:C6:B9:C9:5B:D5:D4:05:F6:22:70:C7
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Certificate issuer:       /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial:       019BF38676A5A75083D6828D1B2F41A7572B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
Manifest number:          079B
Signing time:             Sun 25 Jan 2026 05:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:34 +0000
Files and hashes:         1: 07sEtYgDD4P8DDdRCKN5iG4AMmY.roa (hash: 1D7e4u6dPSbKGI3tO20WfhKAQ8qfjqNxZrP0FvNTv4I=)
                          2: 1qXgqeRwym7VByCjt4dnmoVzCYA.roa (hash: 2+inDA791AGBpU1a4CaMfg8jPit5Dw+MtJ4r3DaAdkE=)
                          3: 34HMPXP3gEFiutCTD0yGcBkIiXc.roa (hash: bxhgk0bC5DY2ITvwM+gQQ6zIFbXvjkWnDfe1DuZaAkQ=)
                          4: BkKBEoBuPl12ptQekVldu_PtnTA.roa (hash: DoBPvLm1XOv7qBE48sBP+sgHTxMy7m9SUCSPAi7sn8c=)
                          5: F03cOeX0lKxmDBnvII8QRD-Hu7s.roa (hash: vIDLN9sfXqleYhJzQ9IgaC3HLXJdLv9t/s+hdk041RA=)
                          6: HxaAYOadFUt_TLVqbPD2f0mU6HE.roa (hash: XUpOxSS1DmAvympYf4/luiffAEU6fK5cecSF5YVTzUA=)
                          7: J3qhVDm59tgGij8FSKNvb_obrQQ.roa (hash: Xmn0IdQ3k4dgxv6WEWS+sFmXZWMyOMaCwrNw7xwruBM=)
                          8: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: zVC8bP8KlpBHopOriiEPGdcUK508gHtiSMTYJbrWURY=)
                          9: _bFFpYb8xNQtTH_3yPe_MDsPOZk.roa (hash: kDuaFVmunVmsMM4Jp1RzmY+vtuYMYvEW+p089DaIgrM=)
                          10: bzSWstjFIYA6blRoFbFSF1OGU6I.roa (hash: 7+JXpzWh9jeKZFp1Mfmg0BBiAYIO4Ce8OyrMvTMG8jY=)
                          11: e5H8rjjlVKlxfiAJ6IlS4G9OI08.roa (hash: NsnVR6BfsnGaMNfRKxx2wayfw4t4s2vRuzJq672PfAo=)
                          12: gATtXJLtqL0pyDE7aBGAHapu64E.roa (hash: ybBtdONa/UXYBRo/ca8SLa1FBdD6Jo+wJU9zhUxtzIQ=)
                          13: io5yyLDlHPGCEzGEMhnAmmdPx5s.roa (hash: jf2AJXsyEXE21uFIryQ83Vk8vd7pT2QW+lohF7eLHiQ=)
                          14: pBdOHT5tecjZpCjNpcydOSIR1PM.roa (hash: FLs6R8klsIETpJmcq3AWUpjGlsfTVyV7nd1ia0rcgok=)
                          15: sipyhYZTDUoVqJQxzsKOL-8LAkw.roa (hash: VV0MN0WQekFnJFeON5niYNrkxCw6xaFz74ZyByZEACQ=)
                          16: t-_MzdSyzfn3dt4ieMfm3gQyOb8.roa (hash: hc8v6I3bcH7DbpxSPGSHrr3KaGypH/0OP4q4IQAtF2g=)
                          17: t1miWIZwqhFnHm1V8OaiWDQkZvQ.roa (hash: 6fT15sb19FmXqLe9+b0pS8/2omYg2Drcv+bmA7jcy/I=)
                          18: vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa (hash: 936PpJYOLKkKzEDTt3gNFk26BfcHqznMHt6CO1ILfRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:76:a5:a7:50:83:d6:82:8d:1b:2f:41:a7:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
        Validity
            Not Before: Jan 25 05:00:34 2026 GMT
            Not After : Jan 26 05:00:34 2026 GMT
        Subject: CN=147fe7e27055c44bb3c6b9c95bd5d405f62270c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:26:c6:4c:f7:33:5d:d3:c9:88:61:a7:22:
                    be:1b:61:5e:48:a0:45:ff:35:72:1c:cb:48:20:1d:
                    b5:52:2e:93:98:d5:29:a2:dc:cb:da:9b:7a:9f:c6:
                    8e:07:3d:95:a7:5e:5c:63:02:66:ee:bb:4d:7e:14:
                    47:a9:76:58:73:fc:58:14:0a:11:9a:cf:90:14:3b:
                    e5:e8:4e:ff:42:be:18:d2:0a:84:b6:53:f1:e2:25:
                    4c:71:38:7c:27:d6:8f:a6:03:2d:ee:00:d6:14:85:
                    16:94:30:d4:aa:62:f7:0f:c5:cb:6c:4a:58:e0:c3:
                    6f:df:d3:11:2e:80:0b:b3:54:a5:c8:c5:ee:30:bd:
                    cc:0e:5e:04:89:b6:af:74:56:01:66:28:31:d5:c7:
                    44:2c:99:a4:e2:06:86:04:63:73:5c:72:89:21:cb:
                    a9:60:7d:48:a5:18:d9:bc:69:f0:37:30:b1:6e:35:
                    de:5c:af:dd:58:3f:f0:51:b3:57:0f:d7:d1:47:dd:
                    9a:99:56:f0:1a:3a:77:4c:77:3e:30:fc:2b:6d:77:
                    f4:55:3b:cc:3f:35:6f:0b:c8:9b:9f:67:84:f7:13:
                    af:9c:b7:68:e9:b0:e9:e9:2d:1d:c6:ef:61:cf:1c:
                    c2:38:98:5f:89:f3:4f:d6:31:91:5f:bf:db:13:b5:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7F:E7:E2:70:55:C4:4B:B3:C6:B9:C9:5B:D5:D4:05:F6:22:70:C7
            X509v3 Authority Key Identifier:
                keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0f:57:3c:71:e3:84:81:55:fa:db:07:37:29:73:14:d1:7c:
         ea:e9:96:d5:5a:3f:7b:4c:fb:22:0e:83:bf:46:9b:56:4f:a6:
         61:1f:65:09:53:fa:8c:1b:bc:7a:21:32:89:8f:d6:e2:24:b3:
         c6:82:2f:c3:3e:4f:e6:32:ba:7a:f7:3b:a7:0f:1a:a5:a7:48:
         52:fb:bc:f5:77:14:f9:9e:78:18:d4:ab:59:ec:82:ec:fb:2c:
         ff:58:8c:4c:ff:16:75:91:47:0c:4a:02:47:e4:ef:29:b5:88:
         b5:65:c7:a9:f6:88:9c:2d:19:1b:c4:6e:ef:4e:f9:96:fd:60:
         1e:78:24:00:b1:24:c5:2f:f8:cf:72:cf:d1:ca:b8:d0:18:c1:
         c5:f2:80:d7:4f:38:78:e5:74:0f:fb:35:d1:96:d2:87:c8:8b:
         a3:c1:10:45:07:2f:6d:31:98:46:08:d3:b9:c2:82:30:47:e9:
         11:c2:31:1d:b9:96:19:bc:e8:c7:62:55:e7:29:61:14:a4:e0:
         6c:31:ca:29:ec:20:d5:5d:08:1b:a1:5b:6d:a1:60:6f:d1:58:
         0d:97:fc:0a:5d:5f:9d:ee:03:34:46:1d:24:a1:1f:ab:0d:64:
         dd:e0:1c:a7:a8:3a:a2:25:3c:b8:1f:3f:e4:f3:8b:4a:eb:47:
         ca:7b:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:28 2026 by rpki-client