This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File:                     _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier:          lwddiQ4/ETIO2Q4HKUI2rBBb3Ya3SJHIURqoex0Wkw0=
Subject key identifier:   85:3D:99:DB:95:5F:83:A1:CC:58:AC:7C:BA:5D:0F:5E:D4:48:40:8C
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer:       /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial:       019BF5AC1CFA7A9B919B2479A4E3B27ADB84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number:          078C
Signing time:             Sun 25 Jan 2026 15:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:56 +0000
Files and hashes:         1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
                          2: 2geswA6ENW-xIrWxFpiZS2QEtSg.roa (hash: Wximrdr2iWFM1jcG/8HAiLIPhr2g4tLO5QAJ9/FpqDs=)
                          3: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
                          4: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
                          5: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
                          6: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
                          7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
                          8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
                          9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: g9p1y1Jcf/ZdVnLNNxOuVqur7N3mstYlFou1pTHYBHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:1c:fa:7a:9b:91:9b:24:79:a4:e3:b2:7a:db:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
        Validity
            Not Before: Jan 25 15:00:56 2026 GMT
            Not After : Jan 26 15:00:56 2026 GMT
        Subject: CN=853d99db955f83a1cc58ac7cba5d0f5ed448408c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:3e:8d:6e:b1:ac:f0:2e:0d:25:2b:8d:31:
                    5a:60:cc:f0:2a:9c:bb:8e:47:39:22:3e:46:61:07:
                    8e:e5:2d:56:f2:ca:f9:ae:05:e2:81:c0:0b:81:b8:
                    0b:34:74:59:fc:0a:d9:08:2a:bc:fe:20:1d:93:14:
                    c9:91:3e:be:b4:38:24:f8:f5:20:17:19:60:3f:a3:
                    55:91:5c:e5:26:59:d5:33:9d:29:bf:aa:f1:45:74:
                    06:5b:7e:59:bf:e0:60:6b:4d:ec:a5:51:ce:6f:84:
                    46:6f:8a:20:20:a1:fc:b7:ba:5f:ec:b4:92:ba:10:
                    94:a5:db:22:59:3d:d3:10:1b:76:ef:60:59:5f:7b:
                    29:a0:52:5b:3c:1e:ad:43:d0:49:e5:d9:90:b3:1f:
                    e2:e6:6d:c9:63:91:68:34:8b:4e:9d:51:6c:8b:6d:
                    26:5e:1d:4c:4c:d6:e5:e7:5f:44:b9:82:e2:7f:c3:
                    45:c6:54:07:7a:db:ed:a6:71:8d:be:29:e1:e3:41:
                    16:35:e1:90:80:4e:72:24:8d:47:5f:27:9b:f5:c1:
                    7a:94:6e:75:a4:4e:6b:d8:30:7e:27:38:cf:44:f5:
                    e1:c8:25:ff:a9:aa:75:d3:48:c5:e6:3f:1e:3d:2d:
                    81:0c:2c:83:88:15:9c:d5:af:b5:ca:33:9b:10:2c:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3D:99:DB:95:5F:83:A1:CC:58:AC:7C:BA:5D:0F:5E:D4:48:40:8C
            X509v3 Authority Key Identifier:
                keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:a5:b8:1b:8c:7f:27:31:c0:61:be:46:a8:a8:06:cf:0e:
         e7:64:60:5f:98:1f:87:0a:bd:f0:7f:54:b3:ca:3a:a9:64:82:
         3c:00:13:54:3d:73:c1:76:34:96:e0:1a:35:5a:02:94:1f:e8:
         f0:90:0c:41:b3:08:c1:b6:da:72:0d:57:3f:3f:73:60:5a:f0:
         2b:c8:09:93:ac:59:28:45:fa:42:83:60:d6:fb:eb:02:00:e5:
         75:52:7d:69:4e:f9:50:03:72:4f:6a:de:95:f4:08:24:45:64:
         82:d4:2b:4c:c0:77:9e:38:84:e2:ea:ff:9f:30:f4:40:fb:a3:
         0b:00:86:74:f7:8a:ff:41:e7:c6:6a:97:a3:5c:2e:2e:3e:49:
         81:e2:eb:dd:8f:49:c7:ee:24:62:30:42:43:fb:97:70:43:a5:
         cf:75:4e:49:6c:5a:c8:da:b3:f4:5e:4f:60:65:09:a2:a0:32:
         d8:0e:8b:c7:ac:e1:e9:9d:d2:f5:d2:7b:91:76:74:4f:8b:06:
         d4:6a:43:ad:a4:15:08:26:85:18:42:fc:f2:94:5d:a7:5a:54:
         0b:09:ff:c9:b0:e4:41:c1:ee:4a:cb:b8:1b:eb:d8:e2:4c:a4:
         86:6c:a6:61:03:98:8c:8d:5f:a8:e2:83:26:85:07:03:3b:fc:
         4f:e8:93:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1rBz6epuRmyR5pOOyetuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjYwMTI1MTUwMDU2WhcNMjYwMTI2MTUwMDU2WjAzMTEwLwYDVQQD
Eyg4NTNkOTlkYjk1NWY4M2ExY2M1OGFjN2NiYTVkMGY1ZWQ0NDg0MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMc+jW6xrPAuDSUrjTFaYMzwKpy7
jkc5Ij5GYQeO5S1W8sr5rgXigcALgbgLNHRZ/ArZCCq8/iAdkxTJkT6+tDgk+PUg
FxlgP6NVkVzlJlnVM50pv6rxRXQGW35Zv+Bga03spVHOb4RGb4ogIKH8t7pf7LSS
uhCUpdsiWT3TEBt272BZX3spoFJbPB6tQ9BJ5dmQsx/i5m3JY5FoNItOnVFsi20m
Xh1MTNbl519EuYLif8NFxlQHetvtpnGNvinh40EWNeGQgE5yJI1HXyeb9cF6lG51
pE5r2DB+JzjPRPXhyCX/qap100jF5j8ePS2BDCyDiBWc1a+1yjObECwpyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU9mduVX4OhzFisfLpdD17USECMMB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoeluBuM
fycxwGG+RqioBs8O52RgX5gfhwq98H9Us8o6qWSCPAATVD1zwXY0luAaNVoClB/o
8JAMQbMIwbbacg1XPz9zYFrwK8gJk6xZKEX6QoNg1vvrAgDldVJ9aU75UANyT2re
lfQIJEVkgtQrTMB3njiE4ur/nzD0QPujCwCGdPeK/0HnxmqXo1wuLj5JgeLr3Y9J
x+4kYjBCQ/uXcEOlz3VOSWxayNqz9F5PYGUJoqAy2A6Lx6zh6Z3S9dJ7kXZ0T4sG
1GpDraQVCCaFGEL88pRdp1pUCwn/ybDkQcHuSsu4G+vY4kykhmymYQOYjI1fqOKD
JoUHAzv8T+iTig==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:33 2026 by rpki-client