This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
File:                     ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json)
Hash identifier:          xxVuiZG7l4qQjQyHg80IqlM+7ntvspRvMdnvfuFj2pM=
Subject key identifier:   62:C1:CD:78:8E:E0:67:C1:C4:A0:ED:28:2C:2C:AF:6B:D5:D3:98:98
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Certificate issuer:       /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial:       019BF5074456D6A59F301C68DBB3748C4F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
Manifest number:          16AD
Signing time:             Sun 25 Jan 2026 12:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:52 +0000
Files and hashes:         1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=)
                          2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=)
                          3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=)
                          4: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=)
                          5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: 2L8V8GdkkBjMUBA51ryx0aboeNRRuBTVz8Ie5jnxK8s=)
                          6: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=)
                          7: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=)
                          8: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=)
                          9: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=)
                          10: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=)
                          11: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=)
                          12: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=)
                          13: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=)
                          14: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=)
                          15: mcS4SdpuWVbabfdpCB_tOwct_TA.roa (hash: hcfOoUJHvls1DL90VCIcUIUdeQTL2YjVgbYPY6TdJAA=)
                          16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=)
                          17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:44:56:d6:a5:9f:30:1c:68:db:b3:74:8c:4f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
        Validity
            Not Before: Jan 25 12:00:52 2026 GMT
            Not After : Jan 26 12:00:52 2026 GMT
        Subject: CN=62c1cd788ee067c1c4a0ed282c2caf6bd5d39898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:b3:89:ef:67:c8:e8:ce:ab:9b:0c:22:56:
                    45:6d:48:62:a7:b1:64:d0:e4:f2:14:96:79:be:4d:
                    81:2d:2b:e9:47:a3:09:c6:1e:e6:3a:59:be:e2:84:
                    30:9f:e8:80:d5:8c:40:af:10:f3:2d:ac:c9:ed:ca:
                    c6:8b:de:4e:db:aa:c9:32:b6:75:10:ce:17:d8:a1:
                    b0:c7:9a:ea:14:7e:88:40:0e:e4:2e:93:c9:f7:b0:
                    94:46:0a:cf:9c:7b:c5:52:3e:a2:86:fc:26:74:7a:
                    b9:b6:9a:8e:1f:93:e4:d7:6a:e7:f7:8c:81:2d:7d:
                    26:d0:dd:bb:03:2f:f6:05:6f:66:f7:81:1c:93:00:
                    ac:1f:fa:0e:0c:2f:5a:15:4e:8f:5f:83:c3:08:94:
                    b7:b9:1f:02:82:3b:23:53:4e:2f:59:f9:da:1f:91:
                    8b:28:9e:f1:7a:22:36:59:4a:57:86:19:6c:a8:1d:
                    52:7c:5f:80:38:d5:38:1b:13:07:48:25:49:28:d1:
                    db:51:d0:90:d1:bf:a2:34:87:7e:96:bd:22:61:53:
                    3b:d2:be:cd:a3:e0:54:d3:8a:29:db:0c:68:80:49:
                    fb:ed:98:e9:f5:c8:77:5f:25:3f:b1:93:b4:ae:bb:
                    f7:e8:00:f3:6e:82:42:e1:aa:a7:f5:b8:fe:b8:87:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:CD:78:8E:E0:67:C1:C4:A0:ED:28:2C:2C:AF:6B:D5:D3:98:98
            X509v3 Authority Key Identifier:
                keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a3:18:da:ba:d8:79:e2:06:03:cd:60:cd:57:a9:ec:6d:ee:
         e7:17:87:25:ad:4f:73:fc:20:6e:fe:b8:ca:1f:d8:65:96:10:
         b8:bf:3b:a6:7f:28:3b:ec:91:d9:48:18:cc:96:46:da:3b:1e:
         c7:56:bd:06:fd:32:c7:c3:ab:0f:30:85:d7:eb:3b:7e:1a:22:
         0b:14:e3:a0:0f:71:ca:7c:ac:4a:b9:d7:51:35:66:59:63:67:
         c6:8f:59:6d:77:88:4b:02:ac:17:92:58:f9:75:c4:ab:aa:14:
         42:9f:6a:e8:07:97:1a:48:1d:da:ec:e0:36:a1:e5:99:dd:71:
         05:a2:e0:62:51:86:48:4c:e4:c7:90:4c:0e:5e:7c:a8:e3:68:
         c2:68:f0:3a:38:9a:b4:77:32:ac:86:1f:7a:99:76:74:15:31:
         00:8e:6e:1e:62:5a:a5:59:15:b7:2a:81:bc:99:b0:84:2d:4d:
         c3:ef:12:5b:bf:ac:67:bf:f0:6b:5e:b1:3d:e2:fd:21:55:4b:
         41:87:bf:b8:6e:20:c0:03:90:cd:b3:67:7b:76:78:b0:4b:5b:
         71:ab:bd:41:3c:ea:b1:00:1d:1d:60:2c:d1:cb:3f:64:96:88:
         45:75:dd:d0:02:26:bd:3b:88:77:58:54:a3:e6:b5:ef:92:ff:
         05:eb:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:57 2026 by rpki-client