This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File:                     1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier:          sJTmtpOfxnLxYNwjcAb5KMGJ6EusoAyhrAC7EQhNWkw=
Subject key identifier:   7E:25:A5:F4:B8:CF:CE:E2:9B:BA:5A:7E:53:BB:C4:15:7F:E9:33:E7
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       019BF5AC495FA62774A4424C75BF8999DF67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number:          17F2
Signing time:             Sun 25 Jan 2026 15:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:07 +0000
Files and hashes:         1: 1-_yOHxDowuUEcsMT-tBSHJNawJY.roa (hash: OkEE2PY+HxH7AS4Wef2NDEm88il1r3tB4z1trxdzMcY=)
                          2: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: ySZOyaU91zaIhofC9WLnN2gKn13DgbGm2wrwCnWSk6E=)
                          3: 1vy2Zod5icTuhsQoU0EnDjOvBUw.roa (hash: lJYkGyyhIavQAOFGfkLnoEQo2R64Z5o6AfYNpKGslCE=)
                          4: 3J_CxMgmJXuVSnvK_SwiuKDZQUc.roa (hash: e33I6eVGoqxWrHvmScm9q4ErMPJHZ8jH0FBrEufjZp8=)
                          5: 6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa (hash: TDLoh7DszsOvKZFOmyvLjh7bfnLG215xsT9A8ZTykgo=)
                          6: 8gJt_vKgY7RalSb-2BGe533Itg8.roa (hash: SlU8QzhG9LmIVc3LENP/NU0v6qpC64nU8O2T4x7X/MA=)
                          7: ASvKzZxweZT7xHuni0eKcHpcjqU.roa (hash: 4YMxscW7TktQGLKn19P50CYxgYAoxEYLDNh2Yo+uAZs=)
                          8: BXsYcbjTxRZ5Rq9pCsvx7EKXBXE.roa (hash: fDsxTkNxo0dsPCuB6RQRrUNQrvhghUZtv/5lAhqvN8s=)
                          9: FgdvpoQS9eNGBCF7vb9OQ805L4w.roa (hash: qPGoYa/8WfjiLv4BgmlM7xbw8t368ZlcAuc0Wqq0xog=)
                          10: Gsh7wu04p9ODvC2NV_A1Roh2Qd8.roa (hash: kD9fJwgoxSXQISK6GThZF24PkPBOrX99sD40C0cTkOU=)
                          11: IxwIjHVYTFyVPPJeuiO1JpcCvzM.roa (hash: uGsI2smQZDACq5TGrMadh8kVvnRLPaTcj/HGRS+HaPA=)
                          12: LXOlrFf8_l83rpmn17vhLFJbiZM.roa (hash: sNb9fSP4DWs/c7lN80M3XZoZwHMjGq02DY0II5j0Qyw=)
                          13: OfWV2U6d2G66IUWsrNxQqrV7mss.roa (hash: gASQVd+Sh51sow2h+7M1wSuBugvFozeRnIy6awd7pEU=)
                          14: SAtVAePJhWqo0wutfiUY2R4nPhI.roa (hash: 0H4+3p93lCzGpK1JwDK4bkQfPmCv/xN0G8ejzBatka4=)
                          15: UhjMuilgxrHuJbG_v5PNxnq08SY.roa (hash: Xd2IZu005wTJgMzbjP6ZPuNUygMnfEV45FJoAZWWctE=)
                          16: _RlUaty7XFL7Cg1Bd_uBGGhGjOQ.roa (hash: qwy34usdJCqXP9Il0XAoY9RGd5uIHfbG7rpjrxu69io=)
                          17: hHFL6YvmkxeC88wNUSyE--wEbwg.roa (hash: oRWVW/Ew2m5MAblBqbb+qw5rCChK2C1xyIO8/seBpWQ=)
                          18: jX6P-bHofIqjGsTJnOwPDX7xdQE.roa (hash: a9lEvQ6DaP+YBlQpn96SMBqrqZvPXdiisAwCLDojp1s=)
                          19: kIwcjzINW8dxv0n9475H5UAlv-o.roa (hash: z7kthu14PX9eFygYlQs12XpkisLRPxXCnKfsTXiY9WE=)
                          20: qKKybqkrLx3Ya1--kbP2_lmbPEk.roa (hash: uTZzIjPiBF1BZfJxXa4Io6x8P1a8OROcC2WIKx0Gejk=)
                          21: svBR3bGWVaZYfi0KyiWyrD9Uw4k.roa (hash: mBYHUbx1m9DpD1cLPkr3K0AOJjiELWaZ7tIIWQo2etY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:49:5f:a6:27:74:a4:42:4c:75:bf:89:99:df:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jan 25 15:01:07 2026 GMT
            Not After : Jan 26 15:01:07 2026 GMT
        Subject: CN=7e25a5f4b8cfcee29bba5a7e53bbc4157fe933e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:4b:29:e4:47:05:f8:a8:8f:71:d2:ca:ea:
                    9f:50:6a:ea:9d:c9:04:5b:d0:e9:3f:27:6a:59:3b:
                    f7:94:7f:91:bb:55:87:63:39:76:01:03:98:33:63:
                    77:ae:7a:d7:92:3c:cc:a7:35:02:b9:fc:7f:19:5c:
                    8c:c2:2c:9e:59:0c:e3:ac:c9:e8:78:4a:ce:2d:09:
                    6b:95:71:d7:b0:ee:6e:f3:c4:ae:ec:c5:8c:80:57:
                    67:ce:02:58:41:f5:63:a1:99:19:8d:8f:ce:5a:77:
                    f7:5b:89:d3:1b:cd:39:80:51:04:32:17:c1:06:55:
                    b1:8c:10:ff:3f:1f:92:44:ae:4d:b0:22:95:a5:05:
                    40:f6:2d:c4:9b:31:1e:cd:25:d4:fd:7a:7c:04:85:
                    a5:0c:2d:04:ae:e8:71:ee:d0:36:e6:2d:a4:4f:3f:
                    01:74:16:35:65:ff:33:52:c9:2a:f4:25:62:9e:2d:
                    69:7f:c1:9d:1c:ca:0d:88:0a:28:06:ac:de:22:67:
                    30:52:d5:79:c8:be:3f:3d:ca:d8:58:14:9b:ab:b4:
                    d1:fd:58:f0:19:9b:e0:27:09:b2:d7:61:15:de:33:
                    df:93:ba:c0:ae:d0:6e:3e:36:c5:e2:c1:d7:11:49:
                    e4:1a:e8:98:5f:f3:d8:c3:92:7a:30:b8:45:50:7a:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:25:A5:F4:B8:CF:CE:E2:9B:BA:5A:7E:53:BB:C4:15:7F:E9:33:E7
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:be:8b:44:29:50:d3:a5:ac:8e:1f:cf:ee:2b:51:f8:3a:f4:
         87:17:1b:86:5e:37:5e:03:c1:cc:33:ae:fe:8d:38:c6:b6:b9:
         cf:47:cb:ae:29:a4:56:4a:3e:63:a9:4e:87:0f:8d:57:d3:fa:
         90:b5:c8:87:c3:6d:1f:f2:98:28:84:36:3f:d4:df:bd:f2:0e:
         7a:03:c1:63:a5:05:5a:67:f8:98:84:fc:af:8b:cc:15:66:77:
         2f:1d:83:c6:b4:17:10:11:fa:5b:a1:4e:c2:cb:46:00:2a:69:
         74:58:95:02:8f:f0:b8:73:29:31:32:2e:05:c8:2d:8f:e6:bd:
         6e:27:9d:02:60:bb:40:f5:b9:2a:95:fc:c7:bc:ff:d7:35:3a:
         96:81:77:26:98:8c:25:fb:3a:25:4e:a3:19:b0:d4:c3:c8:41:
         54:d8:64:06:f4:ee:fd:31:21:3b:5a:33:67:a5:53:9e:f5:67:
         8d:95:4f:12:67:ba:b3:e1:c5:a8:d8:cf:5c:b5:b6:32:b2:d0:
         53:c2:9c:d9:d4:49:8f:04:52:9a:e6:df:40:be:f3:56:04:ba:
         e1:55:93:ec:33:31:29:da:78:ec:5f:d0:87:c3:c1:18:7a:26:
         f5:61:ff:db:ca:68:53:da:74:af:de:16:cc:f7:00:b9:83:7c:
         fd:51:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:54:32 2026 by rpki-client