This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          ISncjVtlW5YWGAYi9KJiJLlE0Dicds7oWQtXbzcID8E=
Subject key identifier:   7F:74:9F:03:27:E6:0D:A3:B5:89:B4:08:EF:5D:9D:E7:7F:2D:25:9B
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       019BF2E261C151CEEF3A5C9FBA812C0750D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          1886
Signing time:             Sun 25 Jan 2026 02:01:20 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:20 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:20 +0000
Files and hashes:         1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
                          2: 3DKyG4yqxD-RCxqPWmT7N7olh-A.roa (hash: PJ5W+9gaDI7CdrxxRKkNpvIJyqlsEgvjqhtTWlW7+xo=)
                          3: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
                          4: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
                          5: AQd6696DS58WSqKOJB3_PgGA6ww.roa (hash: LGXodTKuNu4kXpvG5ujn8tNfaAjmgD5yZwsMvUZmhpE=)
                          6: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
                          7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
                          8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
                          9: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
                          10: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
                          11: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
                          12: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: aLwlRZ5bMagJVeV51te1nzME3xo7AHwCi4s9iL04lGU=)
                          13: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
                          14: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
                          15: fEr16b1lvokT-7p2GF-BJ0nwjqw.roa (hash: 4kMeEbpMFnB2cA2N94f/QrIzzEsMpOa1QK/37ueLqzY=)
                          16: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
                          17: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
                          18: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
                          19: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
                          20: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
                          21: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
                          22: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
                          23: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:61:c1:51:ce:ef:3a:5c:9f:ba:81:2c:07:50:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan 25 02:01:20 2026 GMT
            Not After : Jan 26 02:01:20 2026 GMT
        Subject: CN=7f749f0327e60da3b589b408ef5d9de77f2d259b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:22:de:c0:cc:3b:36:4a:d7:7f:ab:a2:81:
                    d6:dd:26:ce:8c:27:a4:a1:e0:7e:8d:81:e7:e0:31:
                    d2:5e:a2:85:f9:c7:b2:5e:00:34:a2:cc:92:26:77:
                    c8:1f:a0:16:f3:50:8a:58:09:d7:76:6c:89:7d:01:
                    75:ba:7c:f4:34:c3:03:71:31:89:7f:d3:44:36:41:
                    d1:25:f1:61:ad:e8:b4:a3:c2:79:b0:64:fe:c3:24:
                    2c:97:30:97:3f:2f:e3:1b:9a:5d:f4:97:e1:56:41:
                    d2:73:cf:1b:60:1a:21:d2:ae:92:80:3c:c7:2a:2b:
                    4d:2a:43:bb:6d:47:ac:9c:e0:0f:01:3d:c7:ff:ba:
                    c2:f3:3a:23:d2:a5:96:47:0e:57:f9:01:c3:e6:6f:
                    dc:db:79:4a:44:e3:0d:31:77:bd:a3:6c:2a:76:de:
                    e5:61:59:f8:e3:f3:b2:21:f1:38:5c:e5:98:2b:ce:
                    84:09:cf:f6:32:97:ec:dd:89:35:59:e6:be:a4:1f:
                    d4:c2:11:c8:81:58:1a:2b:95:66:28:ac:d9:3c:e4:
                    ce:3d:ce:1a:3e:48:85:61:63:02:96:fc:c4:5a:34:
                    1a:be:a2:00:fd:17:c8:36:9f:ee:ae:ba:f3:ee:70:
                    5c:ff:8e:e0:80:d0:ab:26:0e:ca:bc:36:12:67:05:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:74:9F:03:27:E6:0D:A3:B5:89:B4:08:EF:5D:9D:E7:7F:2D:25:9B
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:fe:e0:cd:33:6d:46:bd:ca:ce:c8:9a:3b:d5:57:3a:b7:
         9d:9a:7c:bb:70:58:b8:3d:e8:87:94:e7:dc:0c:1a:3d:35:3c:
         29:0b:93:07:bf:26:2b:f3:78:37:cc:e7:d9:d5:00:e2:59:71:
         e1:1d:20:97:87:33:c8:db:aa:4d:24:12:54:78:5d:b2:bd:aa:
         33:68:aa:b1:5a:26:c7:05:d2:a0:1d:ec:d0:9a:16:0e:b9:51:
         ab:3b:d6:c8:59:2d:5a:b7:7d:fd:2e:49:36:c0:0e:c0:1e:b9:
         e4:70:23:62:d0:ad:b5:52:b2:6f:b1:75:47:4c:76:bc:fb:79:
         fc:16:cd:4a:73:ad:fc:ba:a4:38:85:e3:20:0a:d8:b8:e9:49:
         f2:38:0c:53:48:a1:d9:d3:b5:c0:e2:0c:56:40:e5:6b:fe:2f:
         da:d0:5f:a2:c8:9c:5b:1c:6a:c8:4e:e2:b1:fb:76:15:49:d4:
         0a:11:cd:f0:48:91:e4:86:6e:40:55:4d:18:64:b5:02:d5:fe:
         61:eb:e1:43:89:56:fe:09:9f:8d:51:20:cb:ea:5f:0c:44:b8:
         ad:d4:f1:74:a4:55:e7:49:0e:64:2c:54:40:20:47:78:59:59:
         21:89:b3:74:60:04:d0:c5:f5:c3:a8:6d:7d:3e:aa:1d:24:70:
         fc:45:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:36 2026 by rpki-client