This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File:                     _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier:          CkewkU1ghFAX1KzwjQYKtFf5tU9oHXy1qXipCPnM3do=
Subject key identifier:   3F:F0:D8:1C:34:A3:EF:70:B9:65:C8:83:7C:5A:25:FF:2E:65:7D:9B
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer:       /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial:       019C1DCCCD59EF14A96C6BAFA82B4B454FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number:          0197
Signing time:             Mon 02 Feb 2026 10:01:27 +0000
Manifest this update:     Mon 02 Feb 2026 10:01:27 +0000
Manifest next update:     Tue 03 Feb 2026 10:01:27 +0000
Files and hashes:         1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: LyyBqk1l4hrRwGTS+fo4iav7ipte5cMGe8gvxYKVbdE=)
                          2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:cc:cd:59:ef:14:a9:6c:6b:af:a8:2b:4b:45:4f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
        Validity
            Not Before: Feb  2 10:01:27 2026 GMT
            Not After : Feb  3 10:01:27 2026 GMT
        Subject: CN=3ff0d81c34a3ef70b965c8837c5a25ff2e657d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:0c:8b:f3:6b:eb:10:0f:00:5b:6a:1e:af:
                    48:90:ca:bd:e0:47:f1:7a:65:91:a0:72:eb:5c:d2:
                    5b:c8:d9:9f:64:38:76:47:10:3e:ad:f8:b3:b8:2a:
                    e7:7f:fc:5e:89:92:aa:14:36:59:ac:4c:8b:73:92:
                    f3:26:64:79:bf:e8:2f:1f:98:62:69:1f:7d:60:63:
                    44:ec:35:97:6c:b8:c1:cf:7f:fa:ab:a6:a6:20:bb:
                    dc:0d:c4:e4:47:2b:42:d2:59:ee:bc:3b:1b:e7:f4:
                    ae:d8:71:96:17:16:ea:b0:9e:81:29:85:df:b6:17:
                    59:ac:7c:e7:bd:21:78:f5:1c:05:07:d3:b3:92:9b:
                    23:dd:55:55:87:b2:bb:79:c1:49:00:52:e2:ac:bf:
                    c6:0e:cb:1b:e0:d8:3e:40:68:6d:5c:17:b2:94:e5:
                    03:5c:aa:7b:80:4e:6c:ea:73:5b:26:d1:af:64:f6:
                    6f:b0:d2:2a:19:73:64:fd:20:b2:01:10:71:29:b9:
                    64:c2:53:91:a6:ee:48:95:5f:bd:80:e6:04:a8:63:
                    1a:f7:ed:44:05:85:7c:bf:59:5a:9b:23:44:5e:cd:
                    71:bb:e9:69:f8:8b:55:c4:f0:41:05:8d:2a:4b:44:
                    44:05:e0:cf:a6:fe:61:55:fc:2b:74:99:40:c4:aa:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:D8:1C:34:A3:EF:70:B9:65:C8:83:7C:5A:25:FF:2E:65:7D:9B
            X509v3 Authority Key Identifier:
                keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:36:33:32:14:77:f9:40:4d:75:39:51:b1:3a:03:6e:c4:3a:
         e3:c2:ba:23:3a:f7:04:71:17:f0:b0:58:7f:33:d4:0d:01:38:
         29:6f:88:9a:44:0e:20:40:9d:99:41:d9:80:f8:78:8e:00:6a:
         e4:f4:e7:ba:f7:b1:c2:b3:68:1b:ba:12:68:c1:33:8b:b2:18:
         4e:b9:a2:fc:47:51:5f:8e:06:4a:44:17:cc:02:23:3c:97:30:
         56:95:0e:ac:ec:89:10:c6:ae:fd:93:fe:77:b8:a3:4e:ff:1d:
         33:e3:fe:bc:c4:a7:f5:29:af:53:8a:45:4c:f8:d3:0f:9e:a3:
         5a:44:04:d2:11:ed:01:74:14:6d:36:c5:c0:ef:ca:c6:65:dd:
         4b:ef:90:71:33:1c:09:18:9b:70:39:b8:7a:cc:a0:b2:d9:33:
         5d:72:6c:45:10:0f:82:c5:8f:74:ab:a7:62:49:f9:25:c1:b4:
         a0:29:c3:54:78:9a:ff:97:20:68:4c:ab:3c:43:82:69:00:c1:
         1d:ed:94:62:32:15:da:46:16:7a:ee:db:63:7e:6a:4e:9c:d3:
         29:43:99:ec:9c:ee:55:90:e3:d7:9c:8c:1f:5f:04:6e:11:b2:
         fe:d7:27:09:14:52:93:89:5c:8e:08:ef:a4:86:ea:2d:1a:61:
         4d:8b:a4:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdzM1Z7xSpbGuvqCtLRU/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZmM4MzQ0NDJlMTMwZjRkZTc4MTViZjE2OWI3YTA0YzMw
MzlkZGQwHhcNMjYwMjAyMTAwMTI3WhcNMjYwMjAzMTAwMTI3WjAzMTEwLwYDVQQD
EygzZmYwZDgxYzM0YTNlZjcwYjk2NWM4ODM3YzVhMjVmZjJlNjU3ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmgMi/Nr6xAPAFtqHq9IkMq94Efx
emWRoHLrXNJbyNmfZDh2RxA+rfizuCrnf/xeiZKqFDZZrEyLc5LzJmR5v+gvH5hi
aR99YGNE7DWXbLjBz3/6q6amILvcDcTkRytC0lnuvDsb5/Su2HGWFxbqsJ6BKYXf
thdZrHznvSF49RwFB9Ozkpsj3VVVh7K7ecFJAFLirL/GDssb4Ng+QGhtXBeylOUD
XKp7gE5s6nNbJtGvZPZvsNIqGXNk/SCyARBxKblkwlORpu5IlV+9gOYEqGMa9+1E
BYV8v1lamyNEXs1xu+lp+ItVxPBBBY0qS0REBeDPpv5hVfwrdJlAxKonGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/w2Bw0o+9wuWXIg3xaJf8uZX2bMB8GA1UdIwQY
MBaAFP78g0RC4TD03ngVvxabegTDA53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NmJlN2ItNzMyMi00ZjM5LTgzM2Qt
ZjkzM2I5NTk4OGMxLzEvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NmJlN2ItNzMyMi00ZjM5LTgzM2QtZjkzM2I5NTk4OGMx
LzEvX3Z5RFJFTGhNUFRlZUJXX0ZwdDZCTU1EbmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTYzMhR3
+UBNdTlRsToDbsQ648K6Izr3BHEX8LBYfzPUDQE4KW+ImkQOIECdmUHZgPh4jgBq
5PTnuvexwrNoG7oSaMEzi7IYTrmi/EdRX44GSkQXzAIjPJcwVpUOrOyJEMau/ZP+
d7ijTv8dM+P+vMSn9SmvU4pFTPjTD56jWkQE0hHtAXQUbTbFwO/KxmXdS++QcTMc
CRibcDm4esygstkzXXJsRRAPgsWPdKunYkn5JcG0oCnDVHia/5cgaEyrPEOCaQDB
He2UYjIV2kYWeu7bY35qTpzTKUOZ7JzuVZDj15yMH18EbhGy/tcnCRRSk4lcjgjv
pIbqLRphTYuk+w==
-----END CERTIFICATE-----
Generated at Mon Feb 2 17:23:42 2026 by rpki-client