This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          TKzpi5xeZ+t08FhHY7QmGi3oPfQsxuQQ4Qbyi/ko2vM=
Subject key identifier:   F4:94:7E:78:AF:06:7A:F5:3B:FD:76:B9:58:F5:AD:BF:D6:7C:FD:55
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       019BF274986971879B0EB17C2D786AA27845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          0726
Signing time:             Sun 25 Jan 2026 00:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:25 +0000
Manifest next update:     Mon 26 Jan 2026 00:01:25 +0000
Files and hashes:         1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
                          2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: aeq/bhD2q4zqZRyDHy8706jz5fsYU+40XxG/DOK6wc8=)
                          3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
                          4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:74:98:69:71:87:9b:0e:b1:7c:2d:78:6a:a2:78:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Jan 25 00:01:25 2026 GMT
            Not After : Jan 26 00:01:25 2026 GMT
        Subject: CN=f4947e78af067af53bfd76b958f5adbfd67cfd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:06:1b:66:5f:3a:4b:b0:4b:6c:12:2a:b7:
                    60:0a:c5:9b:fb:db:13:28:a7:67:11:ad:c7:fa:4e:
                    01:f7:79:0d:f7:a9:13:ed:63:eb:02:65:ae:a6:18:
                    89:8c:9d:02:16:2f:db:81:c8:1d:8b:2a:38:ae:51:
                    e2:9f:26:24:7a:61:f3:de:bd:83:60:a6:22:44:1f:
                    7a:b5:55:1d:f2:40:e3:84:88:f6:0f:cc:24:72:ee:
                    37:68:55:9f:19:9f:1e:09:b8:05:02:11:30:be:ab:
                    f2:f7:75:28:19:4d:1a:95:60:4d:f1:05:26:fa:cf:
                    47:a9:6b:be:66:49:d3:6f:21:12:28:92:ca:cc:ee:
                    d7:4e:f8:7e:12:24:a6:62:87:ec:c5:ce:11:93:e7:
                    23:55:38:a7:e1:32:29:ed:26:c7:93:1d:2d:b9:02:
                    eb:d5:d6:04:bf:b7:e5:62:1f:e5:d0:1c:ef:73:17:
                    39:bd:38:c1:12:3b:91:89:8c:78:7c:7b:12:3c:2d:
                    92:52:d9:50:21:e7:18:70:93:e2:9c:4a:e7:0f:96:
                    64:71:5c:e6:a8:59:f1:87:91:9d:3e:0e:65:f9:79:
                    6e:be:31:44:1d:b7:9b:4b:05:28:f1:d8:d9:78:a6:
                    e9:51:34:3a:5c:46:1c:26:66:bf:3e:0e:7a:ba:2e:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:94:7E:78:AF:06:7A:F5:3B:FD:76:B9:58:F5:AD:BF:D6:7C:FD:55
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:4f:4f:a7:9f:1c:9f:4f:d9:95:06:43:81:fa:9e:14:90:
         b0:0f:d1:f5:4e:a1:71:ba:44:74:d8:b4:2f:8c:65:59:a2:1f:
         e2:e0:47:8a:c9:33:05:4e:01:b1:b5:4d:91:15:d6:7e:17:84:
         e0:f2:6b:e9:3c:ac:08:44:10:fe:35:a9:a4:94:1f:ba:c8:4e:
         9c:77:05:c2:08:6c:2d:b8:ad:f9:eb:9f:28:18:04:1c:8b:8b:
         a4:74:db:3b:85:88:7c:77:da:a9:24:bc:e6:af:40:2a:c3:83:
         94:af:cd:31:bd:bb:83:36:6b:35:2a:ef:e0:eb:2a:fb:53:95:
         1e:64:a6:29:ef:99:40:72:2e:c5:ad:16:2c:49:6e:f3:26:0c:
         22:73:68:29:4b:1c:10:33:fc:4c:28:dc:4c:3d:17:56:d8:9d:
         b6:1d:d7:98:fb:06:74:3f:88:ea:4c:19:05:0d:ef:ae:dd:f6:
         2c:59:09:0f:a2:33:99:ad:21:52:57:b3:53:88:40:e0:8d:28:
         90:a7:1d:f9:1d:23:aa:38:5b:d5:48:4c:58:48:4a:70:01:66:
         54:a3:5a:ef:6f:6b:a6:1a:70:f8:af:4e:d1:8b:48:cb:94:cd:
         47:7e:8f:90:29:ae:ee:a0:47:6b:fe:18:aa:d9:56:0f:59:0d:
         5d:88:b2:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvydJhpcYebDrF8LXhqonhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh
OTAzMWUwHhcNMjYwMTI1MDAwMTI1WhcNMjYwMTI2MDAwMTI1WjAzMTEwLwYDVQQD
EyhmNDk0N2U3OGFmMDY3YWY1M2JmZDc2Yjk1OGY1YWRiZmQ2N2NmZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ckGG2ZfOkuwS2wSKrdgCsWb+9sT
KKdnEa3H+k4B93kN96kT7WPrAmWuphiJjJ0CFi/bgcgdiyo4rlHinyYkemHz3r2D
YKYiRB96tVUd8kDjhIj2D8wkcu43aFWfGZ8eCbgFAhEwvqvy93UoGU0alWBN8QUm
+s9HqWu+ZknTbyESKJLKzO7XTvh+EiSmYofsxc4Rk+cjVTin4TIp7SbHkx0tuQLr
1dYEv7flYh/l0Bzvcxc5vTjBEjuRiYx4fHsSPC2SUtlQIecYcJPinErnD5ZkcVzm
qFnxh5GdPg5l+XluvjFEHbebSwUo8djZeKbpUTQ6XEYcJma/Pg56ui58YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSUfnivBnr1O/12uVj1rb/WfP1VMB8GA1UdIwQY
MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt
Mzg3NTM2ZDAzYTcxLzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx
LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemtPT6ef
HJ9P2ZUGQ4H6nhSQsA/R9U6hcbpEdNi0L4xlWaIf4uBHiskzBU4BsbVNkRXWfheE
4PJr6TysCEQQ/jWppJQfushOnHcFwghsLbit+eufKBgEHIuLpHTbO4WIfHfaqSS8
5q9AKsODlK/NMb27gzZrNSrv4Osq+1OVHmSmKe+ZQHIuxa0WLElu8yYMInNoKUsc
EDP8TCjcTD0XVtidth3XmPsGdD+I6kwZBQ3vrt32LFkJD6Izma0hUlezU4hA4I0o
kKcd+R0jqjhb1UhMWEhKcAFmVKNa729rphpw+K9O0YtIy5TNR36PkCmu7qBHa/4Y
qtlWD1kNXYiyvg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:53 2026 by rpki-client