This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File:                     7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier:          1oPj7jaArPoV9r8rEuHq/3ZFGckeITOoI2dEEzNio9s=
Subject key identifier:   2E:45:67:79:33:25:A8:94:D9:88:60:B1:6D:7C:C3:62:16:9C:5E:F4
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer:       /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial:       019BF5753D8C211585A0972B40EB5FE9769B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number:          15EF
Signing time:             Sun 25 Jan 2026 14:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:59 +0000
Files and hashes:         1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: pR4Ilb9eyxY0RQS331KLZFjkutx3H2gPbxrhoA9QoZI=)
                          2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
                          3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
                          4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:3d:8c:21:15:85:a0:97:2b:40:eb:5f:e9:76:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
        Validity
            Not Before: Jan 25 14:00:59 2026 GMT
            Not After : Jan 26 14:00:59 2026 GMT
        Subject: CN=2e4567793325a894d98860b16d7cc362169c5ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:2c:87:25:5a:e0:da:a5:e7:6b:4d:f4:4c:
                    e5:de:a9:11:24:78:24:2f:9b:5e:e4:da:29:85:61:
                    58:ec:f5:4b:f2:cc:9f:15:a9:2b:d2:8f:a0:1f:ab:
                    92:1a:6c:e7:09:7d:51:de:ae:fb:5c:e5:94:53:22:
                    ab:bd:8d:6a:00:c0:14:0f:fd:ff:76:17:1f:0a:cf:
                    e5:91:88:19:5e:b4:42:a9:00:02:e0:95:81:c9:75:
                    36:a5:02:b3:81:45:32:1d:48:22:9b:74:45:27:ff:
                    66:a5:5a:ea:09:79:ca:08:25:37:22:95:ac:37:54:
                    3b:95:0c:76:46:6d:8a:b9:69:ec:58:0d:f4:f7:c1:
                    81:f9:77:21:d0:5c:b6:d1:63:ee:8c:39:b3:b3:44:
                    b1:02:f7:d9:7b:cb:89:44:d3:5e:b7:8e:22:88:4f:
                    74:6f:a2:c2:61:11:10:c6:f9:59:d9:fe:9d:7f:23:
                    1e:18:76:af:67:06:19:fa:49:63:8c:e9:ca:1f:d8:
                    1c:c8:03:27:46:27:5e:47:60:11:00:7b:89:76:00:
                    80:df:85:0a:8c:97:a4:52:f8:30:cc:4a:bd:3c:3f:
                    7a:58:82:d5:3e:60:4f:14:75:92:d7:24:b5:d7:0a:
                    da:de:27:c2:8d:52:d7:87:18:d3:bd:e8:ff:2a:0d:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:45:67:79:33:25:A8:94:D9:88:60:B1:6D:7C:C3:62:16:9C:5E:F4
            X509v3 Authority Key Identifier:
                keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:92:9c:61:64:b6:6a:34:b0:61:00:7c:af:67:85:bb:b5:db:
         27:ae:63:cf:18:ef:2f:50:57:9b:26:57:c1:0d:98:22:b3:0a:
         19:28:57:fc:82:9f:b7:61:e9:ff:3b:59:6e:ef:9d:f3:3e:b3:
         a4:a1:c0:59:a4:53:d3:84:0f:49:0b:11:dd:a9:e1:9c:b7:a1:
         0d:bd:91:4f:76:1e:5a:d0:cc:84:02:c0:95:a6:a9:19:3f:93:
         f0:3e:11:7e:6c:75:b9:9e:96:2a:0b:42:29:3d:40:10:ea:b5:
         69:40:27:ae:e8:e3:33:ef:18:1d:e1:81:99:82:26:b5:cd:9e:
         e8:78:05:15:a5:52:3b:c8:0a:1f:7a:62:4e:93:c2:a8:57:0c:
         b4:53:21:c6:2f:38:1e:0c:0f:6b:49:dd:be:81:ea:2f:b2:43:
         5b:6f:8c:64:77:cd:73:71:75:9e:14:97:1a:33:1f:ee:01:13:
         b0:64:aa:f4:c2:cf:42:cd:d6:00:d6:64:a5:0b:6e:86:fb:76:
         f5:40:05:fb:5a:7d:3c:20:15:84:bf:0b:8c:4e:ce:18:23:ba:
         3f:6e:a9:d5:70:3b:2e:5b:e1:d0:f2:fc:0e:f8:b1:77:46:2a:
         de:60:7e:c3:08:b6:eb:14:7e:93:84:9a:2b:24:87:0c:53:ad:
         f8:f3:90:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dT2MIRWFoJcrQOtf6XabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3
OWFkNzcwHhcNMjYwMTI1MTQwMDU5WhcNMjYwMTI2MTQwMDU5WjAzMTEwLwYDVQQD
EygyZTQ1Njc3OTMzMjVhODk0ZDk4ODYwYjE2ZDdjYzM2MjE2OWM1ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+wshyVa4Nql52tN9Ezl3qkRJHgk
L5te5NophWFY7PVL8syfFakr0o+gH6uSGmznCX1R3q77XOWUUyKrvY1qAMAUD/3/
dhcfCs/lkYgZXrRCqQAC4JWByXU2pQKzgUUyHUgim3RFJ/9mpVrqCXnKCCU3IpWs
N1Q7lQx2Rm2KuWnsWA3098GB+Xch0Fy20WPujDmzs0SxAvfZe8uJRNNet44iiE90
b6LCYREQxvlZ2f6dfyMeGHavZwYZ+kljjOnKH9gcyAMnRideR2ARAHuJdgCA34UK
jJekUvgwzEq9PD96WILVPmBPFHWS1yS11wra3ifCjVLXhxjTvej/Kg3eAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5FZ3kzJaiU2YhgsW18w2IWnF70MB8GA1UdIwQY
MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt
M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4
LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZKcYWS2
ajSwYQB8r2eFu7XbJ65jzxjvL1BXmyZXwQ2YIrMKGShX/IKft2Hp/ztZbu+d8z6z
pKHAWaRT04QPSQsR3anhnLehDb2RT3YeWtDMhALAlaapGT+T8D4Rfmx1uZ6WKgtC
KT1AEOq1aUAnrujjM+8YHeGBmYImtc2e6HgFFaVSO8gKH3piTpPCqFcMtFMhxi84
HgwPa0ndvoHqL7JDW2+MZHfNc3F1nhSXGjMf7gETsGSq9MLPQs3WANZkpQtuhvt2
9UAF+1p9PCAVhL8LjE7OGCO6P26p1XA7Llvh0PL8Dvixd0Yq3mB+wwi26xR+k4Sa
KySHDFOt+POQNg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:21:02 2026 by rpki-client