This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File:                     cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier:          w8ukkkXhpgdTru2DhNBNBbtu1ZHTq9U+ijkyQbWReeg=
Subject key identifier:   E3:72:A5:6B:E3:13:BA:89:AA:A1:41:08:33:7C:B5:A5:65:17:EA:17
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer:       /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial:       019BF61998F438D23A1816E311520E42EC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number:          0795
Signing time:             Sun 25 Jan 2026 17:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:31 +0000
Files and hashes:         1: 4w3AemhGZ_3ySwMyKZeafIyCF88.roa (hash: cY5JvH77nnSimrIa7oGqc732afU5pkIzOBhYOOlSeII=)
                          2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: scyhzO60jnBclGs3WTpVI4CMFD/nEuiIgXsFl0hkWt8=)
                          3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:98:f4:38:d2:3a:18:16:e3:11:52:0e:42:ec:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
        Validity
            Not Before: Jan 25 17:00:31 2026 GMT
            Not After : Jan 26 17:00:31 2026 GMT
        Subject: CN=e372a56be313ba89aaa14108337cb5a56517ea17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:91:3a:fa:49:f5:de:6d:92:e8:83:2a:84:be:
                    ae:28:92:df:d6:ce:d7:88:c3:50:2a:36:9c:cf:41:
                    52:a5:be:3e:51:60:c9:82:13:f2:63:96:f5:3b:42:
                    00:80:4d:61:57:9e:93:f6:2e:a2:b0:bc:b5:95:ba:
                    f4:94:d8:9b:99:bf:4e:38:eb:76:89:b9:1c:c9:f3:
                    f9:25:b0:93:1a:f6:e5:71:3a:5e:71:ea:0a:ce:77:
                    be:08:ec:95:e5:6d:e5:94:6e:b4:5e:42:ef:1d:ef:
                    2d:30:fe:4b:21:75:3b:aa:86:3e:bd:ed:24:9d:63:
                    57:f3:12:b6:ef:17:a5:5c:f8:b6:ae:d7:50:be:af:
                    cb:45:94:ce:49:e7:e6:3b:57:ce:2d:73:87:d6:74:
                    8f:c4:21:c9:7a:5b:0b:17:62:99:f3:80:16:d5:49:
                    4b:e3:5f:07:bb:4b:a0:b2:9f:d4:fb:e9:30:59:1f:
                    08:48:57:47:63:56:a2:c1:dd:4c:d1:7d:65:1b:d0:
                    32:0b:57:dd:24:da:37:bc:a9:c9:fa:bb:64:00:88:
                    eb:e5:85:0f:d3:2f:3d:9f:ee:7a:fe:72:fc:02:da:
                    79:cc:a5:3a:a7:36:91:e4:df:66:13:3d:97:cb:ce:
                    1d:66:e7:12:1f:9f:24:8e:e3:a9:ba:fd:90:8c:8a:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:72:A5:6B:E3:13:BA:89:AA:A1:41:08:33:7C:B5:A5:65:17:EA:17
            X509v3 Authority Key Identifier:
                keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:52:b0:b9:5d:b8:41:e1:36:9d:95:bc:93:d1:ed:bc:66:df:
         7f:40:6a:a9:82:6b:2f:35:d0:20:0d:bf:0a:e9:46:0c:c5:ac:
         06:35:c7:6d:8d:50:67:ac:89:df:1f:2a:2c:65:b5:43:d3:92:
         d9:61:79:9f:70:e8:a9:2c:91:e0:8e:60:0f:1c:f4:75:b2:05:
         a3:db:cf:92:98:fe:95:1b:80:0e:e6:fc:75:aa:76:eb:06:ac:
         13:2a:ea:44:84:09:76:0b:d9:b5:22:d5:b1:4f:39:8c:05:12:
         27:a5:b8:49:9c:4e:5b:7b:a4:01:8a:0a:d6:df:58:37:99:54:
         24:2e:9e:ca:78:7c:cd:42:5f:da:d9:8c:e2:63:4a:9d:2b:60:
         b4:73:58:41:01:dd:a5:e5:c4:2b:a8:43:e9:e1:25:d2:a1:55:
         d4:26:95:af:b4:d8:74:ba:e3:4d:88:41:b7:33:bb:7f:03:15:
         55:cd:cd:b9:d1:e6:37:5b:69:2e:b1:c6:f5:f5:2d:63:ca:22:
         b6:c0:d0:0a:58:61:d0:a8:e6:8a:1f:30:b8:28:89:70:09:38:
         d4:c5:87:62:e7:0d:04:8c:5a:a9:b3:5b:75:a8:97:ad:1f:e8:
         24:9a:44:60:c2:84:3f:50:79:c3:90:08:de:ab:dc:b6:4f:4f:
         a2:eb:43:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2GZj0ONI6GBbjEVIOQuwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy
ZWI1NTUwHhcNMjYwMTI1MTcwMDMxWhcNMjYwMTI2MTcwMDMxWjAzMTEwLwYDVQQD
EyhlMzcyYTU2YmUzMTNiYTg5YWFhMTQxMDgzMzdjYjVhNTY1MTdlYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pE6+kn13m2S6IMqhL6uKJLf1s7X
iMNQKjacz0FSpb4+UWDJghPyY5b1O0IAgE1hV56T9i6isLy1lbr0lNibmb9OOOt2
ibkcyfP5JbCTGvblcTpeceoKzne+COyV5W3llG60XkLvHe8tMP5LIXU7qoY+ve0k
nWNX8xK27xelXPi2rtdQvq/LRZTOSefmO1fOLXOH1nSPxCHJelsLF2KZ84AW1UlL
418Hu0ugsp/U++kwWR8ISFdHY1aiwd1M0X1lG9AyC1fdJNo3vKnJ+rtkAIjr5YUP
0y89n+56/nL8Atp5zKU6pzaR5N9mEz2Xy84dZucSH58kjuOpuv2QjIrmRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONypWvjE7qJqqFBCDN8taVlF+oXMB8GA1UdIwQY
MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt
OTI4MWYwZDIzZGJmLzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm
LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1KwuV24
QeE2nZW8k9HtvGbff0BqqYJrLzXQIA2/CulGDMWsBjXHbY1QZ6yJ3x8qLGW1Q9OS
2WF5n3DoqSyR4I5gDxz0dbIFo9vPkpj+lRuADub8dap26wasEyrqRIQJdgvZtSLV
sU85jAUSJ6W4SZxOW3ukAYoK1t9YN5lUJC6eynh8zUJf2tmM4mNKnStgtHNYQQHd
peXEK6hD6eEl0qFV1CaVr7TYdLrjTYhBtzO7fwMVVc3NudHmN1tpLrHG9fUtY8oi
tsDQClhh0Kjmih8wuCiJcAk41MWHYucNBIxaqbNbdaiXrR/oJJpEYMKEP1B5w5AI
3qvctk9PoutD3g==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:02 2026 by rpki-client