This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File:                     K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier:          TO9f5jqbATIL2TIAmBLqq1L/5Mj6BlvuYeD6962JZnQ=
Subject key identifier:   0A:33:12:FE:97:83:E4:FF:F2:F5:43:1E:DE:9B:5F:E8:91:D1:60:BF
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       019C1C837EFA03F2D4DAEA38AEE368DF5283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number:          09BA
Signing time:             Mon 02 Feb 2026 04:01:45 +0000
Manifest this update:     Mon 02 Feb 2026 04:01:45 +0000
Manifest next update:     Tue 03 Feb 2026 04:01:45 +0000
Files and hashes:         1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
                          2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: 87y3ydMHgkmF4v1xRZonHg+5XluUF51hcGQGDPatuD0=)
                          3: wLKTHNAi_SKjDTW74BcesnX-WQQ.asa (hash: j48nzI6JGxErzvih/a7iFeEhyD9lYuYhcQYuQ7FCZgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:83:7e:fa:03:f2:d4:da:ea:38:ae:e3:68:df:52:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Feb  2 04:01:45 2026 GMT
            Not After : Feb  3 04:01:45 2026 GMT
        Subject: CN=0a3312fe9783e4fff2f5431ede9b5fe891d160bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:8f:6c:8c:d8:ef:ed:ed:1d:ad:be:8b:6e:
                    34:be:97:6c:e1:27:75:f5:64:5d:00:6e:24:19:11:
                    46:01:81:23:8d:a6:57:4d:2e:b0:e3:97:7a:34:c3:
                    6d:24:74:05:38:0f:c9:57:3f:f6:8d:b3:04:c7:6d:
                    0f:03:d7:72:1d:3d:75:7f:3b:21:44:84:3f:70:70:
                    3f:f7:64:cb:1f:ae:48:6a:bc:c5:d3:6d:3b:07:44:
                    68:4d:c7:d5:d6:b4:63:d3:10:0d:c1:72:93:17:f7:
                    43:18:1c:ab:de:a5:c4:43:55:bc:a4:77:35:c4:f1:
                    81:54:73:44:53:08:cd:f2:0d:c7:c8:b4:2d:bf:6e:
                    f6:38:69:d5:30:79:18:37:3b:11:99:29:73:21:47:
                    69:1b:72:9e:16:a1:75:e5:94:95:11:79:a4:80:4d:
                    ff:87:d9:7e:88:28:5e:94:ef:8b:b8:16:34:3c:41:
                    2b:b4:73:aa:ef:42:73:48:a6:04:58:c9:e2:50:83:
                    14:cd:19:54:e8:b3:82:09:85:22:56:ab:51:88:bc:
                    7f:59:cf:56:86:b7:98:35:75:46:79:c3:aa:82:05:
                    b9:cf:91:7e:aa:ad:10:0c:8e:ff:a7:82:1f:f6:af:
                    7b:5c:84:b7:b9:8a:d4:32:4a:ba:fc:4b:de:19:8c:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:12:FE:97:83:E4:FF:F2:F5:43:1E:DE:9B:5F:E8:91:D1:60:BF
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:89:6b:65:f5:a6:61:db:42:db:ce:40:e9:5d:d8:e1:90:e7:
         ec:60:a8:dc:e0:c9:91:8b:10:5e:a8:aa:50:47:33:e1:fa:c6:
         1c:3d:ef:a0:52:23:24:53:a6:6e:18:99:44:70:80:5f:0a:98:
         84:b7:3d:0a:86:d8:df:21:69:04:dd:85:48:03:ff:f5:96:1a:
         ee:14:33:11:23:fd:37:54:5b:53:f7:b0:9c:9a:38:d5:d5:7c:
         bf:47:1a:25:b4:01:e4:f7:9b:8c:50:6e:8f:b1:68:ef:3d:9a:
         a4:83:18:65:58:36:bf:a0:5a:3a:1b:d0:af:df:62:d4:9f:6a:
         5a:e5:6c:7f:9e:a3:fe:10:00:2e:60:82:5c:f6:d5:53:33:79:
         4e:19:06:04:8b:76:36:94:6a:b5:5b:b0:e8:35:d2:8b:d6:c8:
         10:eb:3b:da:5b:dd:57:f4:e8:06:f1:1b:e0:c9:b1:24:9d:a3:
         d5:a6:8d:9b:77:d5:d9:dd:49:fe:3f:05:92:6e:a1:b9:d5:78:
         cb:41:28:e5:6d:00:ee:3d:4a:e7:2d:34:8c:93:e6:8e:f0:e9:
         99:3c:6f:07:ea:dd:b9:b5:d7:c8:20:2e:dc:63:54:cf:37:e2:
         6c:b6:98:f0:19:87:99:ff:ba:73:98:e2:6a:7d:38:16:c9:30:
         40:25:2e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcg376A/LU2uo4ruNo31KDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYWVlN2VhNDgyZDYyYTY3MTA2M2VhYzgzNzg5YWYzOWYz
OTBiNzQwHhcNMjYwMjAyMDQwMTQ1WhcNMjYwMjAzMDQwMTQ1WjAzMTEwLwYDVQQD
EygwYTMzMTJmZTk3ODNlNGZmZjJmNTQzMWVkZTliNWZlODkxZDE2MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmCPbIzY7+3tHa2+i240vpds4Sd1
9WRdAG4kGRFGAYEjjaZXTS6w45d6NMNtJHQFOA/JVz/2jbMEx20PA9dyHT11fzsh
RIQ/cHA/92TLH65IarzF0207B0RoTcfV1rRj0xANwXKTF/dDGByr3qXEQ1W8pHc1
xPGBVHNEUwjN8g3HyLQtv272OGnVMHkYNzsRmSlzIUdpG3KeFqF15ZSVEXmkgE3/
h9l+iChelO+LuBY0PEErtHOq70JzSKYEWMniUIMUzRlU6LOCCYUiVqtRiLx/Wc9W
hreYNXVGecOqggW5z5F+qq0QDI7/p4If9q97XIS3uYrUMkq6/EveGYzS4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAozEv6Xg+T/8vVDHt6bX+iR0WC/MB8GA1UdIwQY
MBaAFCuu5+pILWKmcQY+rIN4mvOfOQt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQt
NzUyMWFmMWNlMjU5LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQtNzUyMWFmMWNlMjU5
LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIlrZfWm
YdtC285A6V3Y4ZDn7GCo3ODJkYsQXqiqUEcz4frGHD3voFIjJFOmbhiZRHCAXwqY
hLc9CobY3yFpBN2FSAP/9ZYa7hQzESP9N1RbU/ewnJo41dV8v0caJbQB5PebjFBu
j7Fo7z2apIMYZVg2v6BaOhvQr99i1J9qWuVsf56j/hAALmCCXPbVUzN5ThkGBIt2
NpRqtVuw6DXSi9bIEOs72lvdV/ToBvEb4MmxJJ2j1aaNm3fV2d1J/j8Fkm6hudV4
y0Eo5W0A7j1K5y00jJPmjvDpmTxvB+rdubXXyCAu3GNUzzfibLaY8BmHmf+6c5ji
an04FskwQCUuyg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:24:28 2026 by rpki-client