This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          O5QE2Q4yD9GpIbCFn87q49Qn9GD+pboRfezz20aiDWA=
Subject key identifier:   AE:34:58:95:99:10:1F:3A:2D:83:A0:23:4D:15:F2:AA:ED:6C:12:DA
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019C213B7E780D2D4144DD42C00E0B989B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          1000
Signing time:             Tue 03 Feb 2026 02:01:13 +0000
Manifest this update:     Tue 03 Feb 2026 02:01:13 +0000
Manifest next update:     Wed 04 Feb 2026 02:01:13 +0000
Files and hashes:         1: A80PxrMm_Ufx0vA3DxhZrXcX5fg.roa (hash: NlbOfNMPHpTki4eHgoxzVdl7/dImbAIAT8h3ZO3gam4=)
                          2: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=)
                          3: JnusafZM9SODnF8zPyjbOXPor2k.roa (hash: srb1yfQWnE9aW96NrcbrBQ/908feeGdR7K5sg1Fie0I=)
                          4: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=)
                          5: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: vetzXaN3FR62xsmWUu/k83vFo3/kPyMEUaPBCuCRr1I=)
                          6: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=)
                          7: qfssabipb-ztXEUVfY8jVD0wDUU.roa (hash: 35vnggv/gBzV949aBfyIzEwsk9uuE/B6VzD7g0Qyt3w=)
                          8: t6iqftpbJQl-rj4l4hMmt54XfbA.roa (hash: lDaGCGIXZDpqUqTytYf/+3g7w0I/cU8Ge92ZphoqH7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:3b:7e:78:0d:2d:41:44:dd:42:c0:0e:0b:98:9b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Feb  3 02:01:13 2026 GMT
            Not After : Feb  4 02:01:13 2026 GMT
        Subject: CN=ae34589599101f3a2d83a0234d15f2aaed6c12da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:d6:70:b8:27:4c:96:54:5b:81:02:20:36:
                    55:0a:5c:57:9f:cf:d8:31:03:d4:3e:4b:e3:67:eb:
                    b4:c8:5f:f0:a0:6b:52:24:52:17:5d:ce:b6:fa:34:
                    23:34:28:9c:d1:e2:81:de:b5:79:f5:25:f5:94:0b:
                    6c:b9:c5:cb:a2:e8:a1:00:47:a9:1b:2a:cf:35:52:
                    7f:3a:86:82:50:1e:fd:4b:75:d2:d5:44:df:65:6b:
                    29:20:7f:73:48:ca:96:dc:a2:95:f3:21:f0:ae:48:
                    7b:92:cb:d3:55:c3:e9:d2:ef:ba:3b:92:b7:d5:25:
                    2d:54:e0:02:12:c9:21:38:8f:d8:b8:6b:72:d0:73:
                    42:31:d6:72:18:68:8b:4d:53:59:63:e8:b1:01:c3:
                    30:dd:2b:62:d8:d7:c9:74:95:0e:a3:50:74:3b:9b:
                    f7:a2:9d:80:78:1f:d7:e0:91:be:96:2b:0e:9b:f6:
                    6a:7a:11:99:cb:be:7a:fb:d4:96:87:da:b5:88:29:
                    fb:e0:0f:3d:1b:22:da:65:06:f7:e6:f0:c9:3f:c5:
                    49:3d:34:ac:4f:d8:a1:ca:0f:83:db:1a:c4:b6:ef:
                    ba:c3:73:47:79:97:76:dd:6b:06:38:fb:c0:af:98:
                    5a:70:2a:dc:58:81:c6:5b:01:ac:06:e9:8f:17:37:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:34:58:95:99:10:1F:3A:2D:83:A0:23:4D:15:F2:AA:ED:6C:12:DA
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:74:3d:fa:cf:0f:1b:3f:62:87:02:97:3d:01:29:b9:81:ab:
         32:4d:0d:23:0d:f5:7e:94:0a:bb:ac:e1:b8:4e:1c:cc:13:0d:
         7c:17:62:02:b1:fd:fa:2a:ce:ec:a6:e7:95:f9:48:0c:52:97:
         91:61:17:4c:1c:25:c7:04:fe:52:b8:98:3d:2c:1f:a3:7c:79:
         a5:ab:6c:b0:0e:a8:cb:3f:f8:0e:e4:54:6b:f3:2b:79:4c:0e:
         cc:7e:b1:35:20:95:e1:54:6f:5e:ec:1d:c1:9a:51:11:33:fc:
         8a:40:fb:8a:81:9d:09:41:08:c3:c4:59:7d:82:7d:d4:53:98:
         ea:ed:f4:8d:9b:03:09:f9:2c:69:24:9a:4d:a4:96:c8:26:ec:
         3c:11:da:ca:09:b1:83:f1:05:f7:61:3c:34:64:b8:84:2f:66:
         d0:65:a8:74:47:23:fa:0f:6e:44:dc:8b:27:9a:6b:09:cb:b6:
         09:a4:91:c9:8c:a1:8c:05:66:81:2b:cc:e0:40:d6:6e:92:a1:
         9d:50:6b:ac:e1:42:64:5c:9d:ea:5c:28:be:69:d5:82:2e:4f:
         71:39:7e:a4:73:c3:6d:c7:93:0a:57:c0:9e:ad:e4:15:27:78:
         ac:08:9e:a8:dd:3c:7a:82:63:4c:ce:da:33:dc:8b:9a:d3:58:
         a5:db:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 07:18:36 2026 by rpki-client