This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
File:                     rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json)
Hash identifier:          zPXH1CKeKaw5MfJsyZMzOzMSIM/NCLV/FrBoLIYNtNQ=
Subject key identifier:   F4:24:67:13:AB:B2:25:F6:0F:4E:10:19:94:BE:0F:F5:87:A8:20:D3
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Certificate issuer:       /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial:       019BF350B46C3570A78823A8A6EECE20228F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
Manifest number:          17FA
Signing time:             Sun 25 Jan 2026 04:01:50 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:50 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:50 +0000
Files and hashes:         1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=)
                          2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=)
                          3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=)
                          4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=)
                          5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=)
                          6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=)
                          7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=)
                          8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=)
                          9: _EVIloZkNxmGZyYoucRtLycs2NM.roa (hash: hhnd4/lK0WaT0EX9/P9lh5SOkp9/hmkVwIYPiP2PidU=)
                          10: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=)
                          11: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=)
                          12: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=)
                          13: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=)
                          14: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=)
                          15: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=)
                          16: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: YrYYx+UA5Vax6sAQ9aXPH3/5Fwk+RbuEJa56fXIH/cY=)
                          17: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=)
                          18: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=)
                          19: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:b4:6c:35:70:a7:88:23:a8:a6:ee:ce:20:22:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
        Validity
            Not Before: Jan 25 04:01:50 2026 GMT
            Not After : Jan 26 04:01:50 2026 GMT
        Subject: CN=f4246713abb225f60f4e101994be0ff587a820d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:8a:23:0a:23:18:46:7a:74:1c:42:77:ef:
                    cf:fe:55:31:bf:a8:4f:97:45:87:0b:ae:b7:43:5d:
                    64:82:19:b8:79:20:b1:31:9c:11:00:72:46:0e:ed:
                    39:b0:51:f3:b5:53:27:d2:20:d2:35:68:d1:f3:c3:
                    ec:7d:18:1b:38:22:92:68:9a:8c:35:69:65:8d:32:
                    19:66:6f:e6:cf:2b:85:a2:33:05:56:3c:7d:53:c5:
                    1a:e5:01:71:33:f4:c5:50:19:40:df:c4:2e:f0:45:
                    45:a6:56:d9:40:c6:bd:2a:7b:bd:8e:e0:0d:39:4b:
                    75:f0:bb:46:60:f1:a4:7b:f0:ef:aa:db:a3:b6:01:
                    9b:4d:c4:38:01:89:b2:22:df:c2:f1:82:3d:b2:75:
                    db:de:63:75:b5:68:b2:87:59:1b:74:98:0a:0f:79:
                    74:6e:cf:4c:32:ba:75:40:84:32:cb:f9:d3:88:62:
                    dc:fe:e9:10:55:14:68:6f:b0:54:01:ab:d4:45:b2:
                    77:4a:30:ea:dd:e7:ea:ad:f6:08:9e:c2:0f:6b:8e:
                    7d:6e:ba:5d:c3:7b:32:5a:28:cc:1b:43:f6:3c:c7:
                    ed:73:9e:90:cd:b1:1c:c4:6b:3b:14:f0:a9:54:d9:
                    18:95:fc:f4:92:28:40:50:db:0b:c3:51:24:13:1d:
                    9d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:67:13:AB:B2:25:F6:0F:4E:10:19:94:BE:0F:F5:87:A8:20:D3
            X509v3 Authority Key Identifier:
                keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:e9:5b:59:02:80:3e:3b:9b:43:a2:31:87:bc:2a:b8:60:
         da:c5:15:b1:77:1d:b5:99:0d:5e:a1:cd:b0:0a:f4:91:40:c7:
         f4:ed:f7:b5:bb:32:7b:9d:1d:98:70:67:e3:d6:0d:21:53:eb:
         4f:48:41:4b:02:20:24:be:0f:31:98:55:2f:3b:76:06:fb:60:
         27:eb:ac:ee:64:a0:e7:36:33:1d:b9:ce:7c:b0:8e:b2:5c:79:
         6e:ad:c4:5b:5e:5d:33:b0:65:1b:7e:68:8c:a4:46:00:c6:38:
         76:7b:b6:0b:00:0a:e6:30:0e:ea:bb:da:46:b2:ee:50:5e:25:
         39:89:ca:d5:f2:f3:1b:97:e2:b3:ff:a9:c6:66:64:80:00:14:
         15:66:c5:3d:33:47:39:23:30:8f:52:03:20:5d:c8:c7:32:8d:
         76:a0:26:7d:40:4d:16:15:c1:ea:b4:06:11:5a:75:9e:d6:3a:
         6e:25:f4:04:95:d5:1f:25:06:7c:f4:be:5d:fe:a5:3d:ff:59:
         5e:fa:81:cd:e4:89:e8:68:6b:14:91:50:7f:c4:79:23:29:ed:
         a8:c4:9b:6e:c5:d9:fb:e2:2d:b6:03:02:b0:8c:05:d8:e8:2f:
         e5:68:1f:57:62:7f:ab:af:e9:79:c8:94:a3:29:85:37:ba:8c:
         03:04:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:33 2026 by rpki-client