This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
File:                     SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json)
Hash identifier:          bVPBaX75FsXSlfNhpUNeLkFqrJn5QakEdE1Tx7c/ikQ=
Subject key identifier:   7F:AE:98:AC:9E:57:A5:8B:39:EB:F2:48:FF:8A:B0:CD:C5:EF:7B:C1
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Certificate issuer:       /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial:       019BF79A49E948FED46013DF13D8DA9E1C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
Manifest number:          177A
Signing time:             Mon 26 Jan 2026 00:00:42 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:42 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:42 +0000
Files and hashes:         1: RQT8IM5YpZZwOG6-oLbHqe47a-w.roa (hash: blADeokcP6llo8Gy54kWFLivb2CKCeXJKcNiIgYk8iI=)
                          2: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: JFGCyj3OWXgfF0hytoJKu847qOmqD2/M4njzYFUj47Y=)
                          3: iO3SkKO1UQLda-9awSqU8lYbgSU.roa (hash: rqIW3vWhfYP/PXzk9vOJK+ndWvAPgxulGED/LkU7CuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:49:e9:48:fe:d4:60:13:df:13:d8:da:9e:1c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
        Validity
            Not Before: Jan 26 00:00:42 2026 GMT
            Not After : Jan 27 00:00:42 2026 GMT
        Subject: CN=7fae98ac9e57a58b39ebf248ff8ab0cdc5ef7bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:cc:9f:0f:a9:87:fb:0b:36:8c:61:57:c2:
                    39:11:5b:b1:51:66:d6:89:8e:2d:59:8a:94:df:f5:
                    1e:f0:8c:37:3f:fb:ea:73:5f:5b:42:b6:e0:f0:6c:
                    cd:29:f5:56:f2:04:1f:c9:17:1b:10:6e:2f:55:08:
                    25:00:b7:f5:09:ca:b6:ee:32:66:3c:09:fa:09:77:
                    63:3c:f0:d9:c6:6d:bc:c0:6c:93:4e:46:2b:b3:74:
                    85:49:7f:d1:e7:90:75:a7:0f:1f:eb:f5:64:b3:4b:
                    00:61:f7:f1:af:72:21:8a:05:72:6f:ea:f3:62:03:
                    08:4d:c8:22:91:f2:cd:46:2f:ac:3d:30:fd:58:df:
                    49:85:81:12:a9:20:bb:8b:f4:e9:c5:2f:38:35:3b:
                    fb:32:3f:fa:a8:e2:2b:be:d8:39:58:f7:d1:89:2b:
                    ab:2e:a2:fb:be:87:76:8f:b4:18:18:7b:76:90:4c:
                    fd:3f:e6:3b:53:44:1a:bc:9d:73:21:1c:70:d3:99:
                    c0:7d:76:ec:6d:37:2c:64:26:ca:6e:9f:bd:18:4a:
                    e0:51:1d:39:e6:6a:85:0e:e2:04:4d:99:50:7b:54:
                    55:50:cf:a0:c7:cf:87:f9:95:39:7e:e1:ed:39:79:
                    64:3d:01:85:e9:f9:41:9c:0e:99:cd:e6:09:1c:ea:
                    f1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:98:AC:9E:57:A5:8B:39:EB:F2:48:FF:8A:B0:CD:C5:EF:7B:C1
            X509v3 Authority Key Identifier:
                keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:30:2d:9e:2d:aa:08:0e:d5:97:aa:34:01:7c:ac:97:ba:
         51:21:89:cf:c4:0f:c5:7a:b7:44:6d:f1:32:a5:09:b6:8f:20:
         8b:10:d8:ea:d3:48:63:92:ec:08:ea:53:bd:52:d8:d8:65:2e:
         80:e0:b3:0b:07:31:8c:17:37:78:0f:a4:e1:4f:ac:c7:88:1a:
         9e:e7:a9:1e:c6:a8:66:f9:2e:75:38:00:b6:31:0f:8b:bf:41:
         dd:09:97:10:3f:03:cf:ac:a6:87:eb:66:91:8b:55:f6:9d:a8:
         01:93:9d:88:a5:2d:bc:47:8f:af:61:2b:49:7d:ef:99:f7:87:
         63:43:6a:ac:fd:c4:3e:dc:d2:97:df:c6:0e:1f:f9:b5:d9:fb:
         16:15:df:05:ee:7c:fe:66:e5:5c:7b:c4:1f:b7:97:c0:bf:b6:
         d4:97:58:cf:57:24:5b:ec:47:0f:98:0e:ef:ac:ff:da:fe:88:
         dd:46:ef:fa:37:6e:cb:60:21:74:dd:69:1b:d0:ad:01:09:82:
         05:89:3f:f2:87:e8:41:2e:c3:d7:60:76:c1:4c:92:61:97:7a:
         81:be:68:77:c5:91:73:d7:4d:f2:8e:04:99:6a:5d:20:2f:1a:
         2a:ee:30:02:de:74:80:07:a4:d7:ca:63:9e:40:5e:4d:30:40:
         d8:e5:c1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mknpSP7UYBPfE9janhw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh
YThiNjEwHhcNMjYwMTI2MDAwMDQyWhcNMjYwMTI3MDAwMDQyWjAzMTEwLwYDVQQD
Eyg3ZmFlOThhYzllNTdhNThiMzllYmYyNDhmZjhhYjBjZGM1ZWY3YmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+HMnw+ph/sLNoxhV8I5EVuxUWbW
iY4tWYqU3/Ue8Iw3P/vqc19bQrbg8GzNKfVW8gQfyRcbEG4vVQglALf1Ccq27jJm
PAn6CXdjPPDZxm28wGyTTkYrs3SFSX/R55B1pw8f6/Vks0sAYffxr3IhigVyb+rz
YgMITcgikfLNRi+sPTD9WN9JhYESqSC7i/TpxS84NTv7Mj/6qOIrvtg5WPfRiSur
LqL7vod2j7QYGHt2kEz9P+Y7U0QavJ1zIRxw05nAfXbsbTcsZCbKbp+9GErgUR05
5mqFDuIETZlQe1RVUM+gx8+H+ZU5fuHtOXlkPQGF6flBnA6ZzeYJHOrxAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+umKyeV6WLOevySP+KsM3F73vBMB8GA1UdIwQY
MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt
N2E1MDQzYzkxOGY5LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5
LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALggwLZ4t
qggO1ZeqNAF8rJe6USGJz8QPxXq3RG3xMqUJto8gixDY6tNIY5LsCOpTvVLY2GUu
gOCzCwcxjBc3eA+k4U+sx4ganuepHsaoZvkudTgAtjEPi79B3QmXED8Dz6ymh+tm
kYtV9p2oAZOdiKUtvEePr2ErSX3vmfeHY0NqrP3EPtzSl9/GDh/5tdn7FhXfBe58
/mblXHvEH7eXwL+21JdYz1ckW+xHD5gO76z/2v6I3Ubv+jduy2AhdN1pG9CtAQmC
BYk/8ofoQS7D12B2wUySYZd6gb5od8WRc9dN8o4EmWpdIC8aKu4wAt50gAek18pj
nkBeTTBA2OXB5Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:57:41 2026 by rpki-client