This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          HyT1CCJC/wbaMDi6B4QN0SIj4OVryx3SzVy/oCHBrz4=
Subject key identifier:   05:88:D5:08:C9:7B:58:C5:45:AC:57:7B:27:CA:95:3A:9A:06:82:CE
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       019BF23DC8E70BA6D4B4FA7E315C170F1E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          17FC
Signing time:             Sat 24 Jan 2026 23:01:33 +0000
Manifest this update:     Sat 24 Jan 2026 23:01:33 +0000
Manifest next update:     Sun 25 Jan 2026 23:01:33 +0000
Files and hashes:         1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=)
                          2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=)
                          3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=)
                          4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: DiNPBHLz96NDKsNEBsP+FfmwoC5BHfVLrxFsHjiGDA8=)
                          5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=)
                          6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=)
                          7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=)
                          8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=)
                          9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=)
                          10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=)
                          11: XDRix6QDR_Gjs6-Cgo-LajMwjLo.roa (hash: D5tYwaAg7BrfpT0g1cIaNhjKGBys4m2pxD23SmcuiB0=)
                          12: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=)
                          13: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=)
                          14: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=)
                          15: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=)
                          16: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=)
                          17: x_JLnp-gge30umPx_RvTQbE6gPs.roa (hash: Ia9WGZIGIJ1OoZ2Ke+mCm85FUNL3XOpDFSZD7R/PX0c=)
                          18: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:3d:c8:e7:0b:a6:d4:b4:fa:7e:31:5c:17:0f:1e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jan 24 23:01:33 2026 GMT
            Not After : Jan 25 23:01:33 2026 GMT
        Subject: CN=0588d508c97b58c545ac577b27ca953a9a0682ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:0c:a3:87:ac:b2:87:24:71:0a:31:53:c7:
                    f1:d8:60:82:09:dc:2b:0d:dd:d2:fe:ba:c0:e8:76:
                    98:ec:e6:87:70:97:a8:42:73:a1:c2:bb:4d:28:80:
                    a0:af:a8:c5:4a:a1:31:80:d4:99:0d:dc:ef:df:fd:
                    90:1e:37:48:a8:60:4d:35:30:05:83:21:f3:2e:4a:
                    31:37:ba:f6:cb:79:44:96:23:2f:f9:fb:5d:75:b7:
                    94:ee:42:84:5e:45:40:e5:2a:a5:81:5b:13:80:97:
                    30:cc:cb:0f:98:34:49:6e:b0:79:10:dc:47:20:3c:
                    0e:79:fc:fb:60:d9:05:a6:28:9d:6e:9d:c5:d6:88:
                    ac:97:ee:e0:b0:d4:10:1d:1c:10:59:04:fe:bf:62:
                    e0:51:b0:bc:ca:2d:2e:11:84:7a:79:a1:47:e7:0c:
                    25:5a:95:4a:7f:d0:d9:c2:b6:d2:3c:61:c9:24:0a:
                    22:49:c6:db:8a:d9:48:81:8b:f7:0d:4d:b3:88:10:
                    db:51:4f:bb:f5:3a:fb:ce:d3:fa:2e:36:1f:f6:d6:
                    13:d4:a1:d5:a1:b1:d9:ae:90:31:e7:12:d5:b4:1b:
                    ff:f2:d8:7f:48:85:3b:92:f4:4b:fe:81:78:ad:5b:
                    8a:b2:f1:d5:d9:5f:2f:a4:c4:36:49:5e:04:68:b0:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:88:D5:08:C9:7B:58:C5:45:AC:57:7B:27:CA:95:3A:9A:06:82:CE
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:aa:d2:9a:b1:ad:7b:ab:da:8a:17:c1:75:0c:4d:b9:b7:
         53:cd:b1:5f:f9:9a:18:a6:cf:4d:12:f3:44:41:53:87:49:d1:
         00:b3:bd:6b:de:5f:c9:f2:fe:06:0e:00:99:1c:2c:5f:73:8d:
         4b:47:7f:eb:28:ea:ab:38:1d:20:53:19:11:56:8a:29:9e:f9:
         1a:68:91:68:6e:dc:a2:01:8d:9c:0e:cc:0a:98:9e:44:a4:b2:
         f2:a6:a3:01:b6:87:6e:50:e8:33:18:a8:f6:aa:40:3b:33:4d:
         9f:1b:0c:63:0e:b3:1e:81:19:74:bf:3f:0f:db:e2:d9:73:c1:
         e4:5a:b9:be:6a:cb:26:a3:38:e8:51:fb:9b:a8:8d:68:d0:1f:
         8b:88:a6:67:c8:34:fe:38:58:4d:e7:a2:a6:61:b1:98:ad:ea:
         3d:26:bc:44:2a:5c:84:16:11:28:3e:6f:cc:33:fe:e5:c0:00:
         fe:5b:d2:00:fa:72:b9:31:57:a4:93:06:96:6f:8c:04:ef:6f:
         cb:74:6e:23:15:d8:2c:3d:26:a5:30:94:b9:f8:0a:91:0f:e9:
         e2:cc:67:ed:c1:9d:ec:62:30:3d:1b:5c:ef:e4:2d:15:32:c9:
         bf:ca:b3:20:ef:c5:5e:0d:4e:12:86:89:68:c3:15:bc:3c:ee:
         0e:b5:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:43 2026 by rpki-client