This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File:                     EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier:          rXE5b9NPaGaCulcDGnj5h3UYVn1DEYAGMKFgautKv3I=
Subject key identifier:   1D:BE:C2:03:70:AB:4D:6D:A5:FB:7F:93:98:87:80:42:E6:5B:8B:2E
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer:       /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial:       019BF4998A48D7014F207ABA824E6C6700B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number:          0A9D
Signing time:             Sun 25 Jan 2026 10:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:01 +0000
Files and hashes:         1: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=)
                          2: A8FvgdbHNRHsRdDyYbSZ8Cktx7A.roa (hash: RHm/c9RboC0AG29WQm/fpkqp72AQwurGiN64U8SLSDg=)
                          3: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: P3KCglW16kd89AVXwn4hYoDE9qqPOeM3RhWGl744cuc=)
                          4: FyMBoEGioj_dsmDJj-ikFJwt8rk.roa (hash: um7JctGs28pyaDiqpyjltt0/B/jCArUTgznU+S7I78U=)
                          5: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (hash: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA=)
                          6: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (hash: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg=)
                          7: JO8lw9pc6rdb9fPDm96v3IXX6ls.roa (hash: Laxa18ToStQU8xtCFVMy0nxd8qXrekn2wbTOcsi/EWg=)
                          8: JpOVwzFJR52Ha18KPp_rX9b-oXc.roa (hash: MGU1qSbfzmECTJdJk9NtOxyGUwWK0QwtQwtLKnD+Nus=)
                          9: KIyqHPfwDNAdOx_NOjp4-P_X4oc.roa (hash: 7ZcCUlsf8/YzuQGzuoy8zSBfxuieaLNl0lOg+fkUsWM=)
                          10: RfwinOHzalLF3nqeVUn7pJqKZzw.roa (hash: fJfHYnqpQ6E1zT38hGEb3xb9EUxe0gvjSVN8q7zxuzU=)
                          11: SB2qbaOdh7ZnvTo3d9-1rReC-O8.roa (hash: K48t7pi0aoEqOYKb47PbaJcr/GnhGXsIRIQ+zbZ9rrg=)
                          12: SJ5lDIB3IGqaDmQaI30m-Ngpckk.roa (hash: utGuqYI8PGSeG8YzzGcnX5WML/j07lId3Gwa7KppOww=)
                          13: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (hash: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg=)
                          14: l2Ed9oBWwrVZTwo8feGoIZNIOg0.roa (hash: I8HT0SN3rG3gxZ/qd14mifoV50o4pzJvgAYyOBQWWy4=)
                          15: nvxQJqPj5xCQW67tgi211cFPXTQ.roa (hash: xfa8KDdjeEdqxYcvOvQdbP9fHGnZD3QGyADGsxwOr6I=)
                          16: rXhlV92N2dDSt5AEBQFXZP4vo18.roa (hash: jl3fY0i3pjZygoyHbd5i+NKaykHgJYGsXxeJwuO3F+0=)
                          17: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:8a:48:d7:01:4f:20:7a:ba:82:4e:6c:67:00:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
        Validity
            Not Before: Jan 25 10:01:01 2026 GMT
            Not After : Jan 26 10:01:01 2026 GMT
        Subject: CN=1dbec20370ab4d6da5fb7f9398878042e65b8b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:4f:4c:a5:4d:44:a6:af:00:93:5f:23:99:
                    2a:3a:0a:74:29:5d:82:15:4b:5c:3c:7b:3e:04:97:
                    4b:5e:58:dc:7f:94:ba:18:5c:89:6b:67:fe:c9:15:
                    97:e9:ab:ae:0b:79:fa:0b:ff:9b:13:3a:d5:16:3b:
                    c6:2a:d5:ce:85:43:e7:c3:37:52:43:a2:00:63:5b:
                    0c:93:85:41:95:b7:67:99:6f:db:cc:6b:64:ea:af:
                    7b:68:d7:9b:59:fb:1e:b9:f8:46:93:32:22:14:5a:
                    b2:ff:70:a6:42:a8:7d:4f:c3:47:25:f7:89:47:d0:
                    52:2e:e9:b0:5e:75:a7:17:18:81:e2:4f:35:e8:32:
                    ae:f6:ed:b5:32:db:60:e5:66:b9:6f:5f:5d:48:69:
                    88:41:dd:0e:7b:b7:54:56:22:55:ef:4d:9d:1f:04:
                    c2:58:06:93:8e:94:01:95:c6:dc:d7:c5:84:52:0b:
                    42:6c:bd:70:bb:b7:7a:d6:98:13:59:40:83:8a:89:
                    5c:f7:af:bf:70:30:e1:ac:7e:9a:ac:c5:00:14:e2:
                    10:1c:c7:68:66:36:e0:39:a1:15:53:e1:29:ef:8c:
                    c9:c2:b0:98:12:f7:d2:6b:e8:01:dd:a3:fb:be:c6:
                    bd:75:0b:06:0a:32:f3:b8:75:1f:20:c2:20:88:b7:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BE:C2:03:70:AB:4D:6D:A5:FB:7F:93:98:87:80:42:E6:5B:8B:2E
            X509v3 Authority Key Identifier:
                keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:72:28:f4:3b:bf:72:cd:33:a8:72:24:96:53:c3:b3:8b:76:
         81:19:22:13:a1:4d:45:6b:f6:b9:8b:1c:7b:36:90:9a:33:68:
         80:db:1b:ed:22:f6:fe:95:68:d5:2e:71:13:32:e8:ea:07:f3:
         06:8b:33:58:5c:e5:0c:3d:c6:37:51:f9:6e:a5:66:09:44:34:
         6f:c1:d3:ea:81:a9:7f:a2:8e:cf:d0:fd:aa:06:4c:34:8d:7c:
         ac:6d:91:e7:95:f4:38:2a:d4:08:2e:73:ee:a2:4c:1e:74:fb:
         9a:f2:f3:79:8e:10:25:d8:53:22:5e:fe:11:10:01:ca:94:25:
         8f:78:5a:f6:0d:32:7c:57:ad:c5:ad:99:0f:02:11:c3:c9:c9:
         73:64:60:f6:a2:40:33:b6:38:7b:53:2b:99:86:4d:c8:b7:36:
         94:63:82:eb:42:33:50:8a:c6:d6:c7:97:9d:e2:84:71:a6:fc:
         e3:73:0f:28:45:99:0a:8c:2a:49:6d:65:ab:ff:11:19:bc:6c:
         9f:5a:78:27:37:24:61:08:d6:90:a9:47:87:d7:96:b3:22:64:
         0e:c1:e5:b6:da:af:8b:6b:31:ee:89:2b:c3:a0:94:56:9c:1e:
         89:33:da:b3:d3:da:06:19:bd:d2:1b:07:f4:6e:f5:3e:38:84:
         bd:39:49:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0mYpI1wFPIHq6gk5sZwC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjYwMTI1MTAwMTAxWhcNMjYwMTI2MTAwMTAxWjAzMTEwLwYDVQQD
EygxZGJlYzIwMzcwYWI0ZDZkYTVmYjdmOTM5ODg3ODA0MmU2NWI4YjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46BPTKVNRKavAJNfI5kqOgp0KV2C
FUtcPHs+BJdLXljcf5S6GFyJa2f+yRWX6auuC3n6C/+bEzrVFjvGKtXOhUPnwzdS
Q6IAY1sMk4VBlbdnmW/bzGtk6q97aNebWfseufhGkzIiFFqy/3CmQqh9T8NHJfeJ
R9BSLumwXnWnFxiB4k816DKu9u21Mttg5Wa5b19dSGmIQd0Oe7dUViJV702dHwTC
WAaTjpQBlcbc18WEUgtCbL1wu7d61pgTWUCDiolc96+/cDDhrH6arMUAFOIQHMdo
ZjbgOaEVU+Ep74zJwrCYEvfSa+gB3aP7vsa9dQsGCjLzuHUfIMIgiLfREQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2+wgNwq01tpft/k5iHgELmW4suMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnIo9Du/
cs0zqHIkllPDs4t2gRkiE6FNRWv2uYscezaQmjNogNsb7SL2/pVo1S5xEzLo6gfz
BoszWFzlDD3GN1H5bqVmCUQ0b8HT6oGpf6KOz9D9qgZMNI18rG2R55X0OCrUCC5z
7qJMHnT7mvLzeY4QJdhTIl7+ERABypQlj3ha9g0yfFetxa2ZDwIRw8nJc2Rg9qJA
M7Y4e1MrmYZNyLc2lGOC60IzUIrG1seXneKEcab843MPKEWZCowqSW1lq/8RGbxs
n1p4JzckYQjWkKlHh9eWsyJkDsHlttqvi2sx7okrw6CUVpweiTPas9PaBhm90hsH
9G71PjiEvTlJEA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:47 2026 by rpki-client