This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          hQCARzwTgd2SyNXOFS1i4E0iWD9X+Tyo5+W7/bYXXWQ=
Subject key identifier:   FE:B7:FD:68:20:CF:26:7E:F1:4A:0C:CE:55:52:09:70:19:D3:09:76
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019C1A262D680AD37822A46484227E35A747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          17F9
Signing time:             Sun 01 Feb 2026 17:00:35 +0000
Manifest this update:     Sun 01 Feb 2026 17:00:35 +0000
Manifest next update:     Mon 02 Feb 2026 17:00:35 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: mICBOyNxmlAXfo3jSvaj23jjSCM3Y6qT8XrH+YktsrU=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:26:2d:68:0a:d3:78:22:a4:64:84:22:7e:35:a7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Feb  1 17:00:35 2026 GMT
            Not After : Feb  2 17:00:35 2026 GMT
        Subject: CN=feb7fd6820cf267ef14a0cce5552097019d30976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:37:2e:30:33:7a:6f:64:eb:a8:66:74:2f:
                    0c:b6:91:37:9e:e4:b3:86:b8:a6:95:f2:2a:9a:c0:
                    5a:a3:67:cc:87:d9:3b:b3:e5:94:c7:da:e4:1a:58:
                    76:20:89:e1:e7:05:2e:69:63:d0:74:74:53:4f:21:
                    da:8e:c7:33:04:a3:cc:23:0d:be:b3:89:a8:94:51:
                    88:13:2f:a9:72:f4:f3:60:05:c1:e2:a8:79:43:09:
                    10:2c:16:5f:8b:3d:a6:46:51:60:70:05:56:48:0c:
                    80:a7:dc:3c:be:d4:08:c6:7b:1f:1e:22:c0:d4:45:
                    02:71:8a:31:24:04:19:4d:8f:40:8e:99:6e:e0:c6:
                    42:c1:06:d1:81:d6:d2:26:ad:a9:3a:94:ae:f2:47:
                    f3:a6:97:8a:52:6b:68:94:00:8a:f5:df:13:45:33:
                    63:f9:91:68:64:d5:fd:45:1e:a3:0d:ce:33:07:fd:
                    4d:7a:5d:d4:dd:e5:8f:ca:09:ed:5c:ae:c0:29:e7:
                    11:2e:a5:b9:38:c0:90:a3:fa:81:3e:6d:cc:b6:d2:
                    13:cc:27:a7:9a:63:40:a4:b0:5f:c0:fc:0e:04:ef:
                    b2:10:af:93:8d:fa:05:17:fd:cc:cf:e2:93:15:23:
                    4b:f0:7b:16:90:04:5e:5e:14:4f:0c:26:fe:6b:c3:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B7:FD:68:20:CF:26:7E:F1:4A:0C:CE:55:52:09:70:19:D3:09:76
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:fb:53:77:cb:7e:56:f1:91:7d:2c:de:a1:a8:66:52:d1:
         8b:57:13:e2:6e:49:c5:54:2e:92:27:4f:cd:f5:f8:1c:64:e7:
         0c:6f:2f:0f:5e:5f:04:d5:76:be:de:62:81:c8:b7:4c:23:c4:
         0b:9e:5e:83:f6:cf:1d:ef:b2:47:18:cc:d5:10:06:bb:43:ca:
         14:b1:4e:75:e8:bf:32:c9:50:a7:75:4e:27:94:bc:fe:5f:ee:
         74:ba:93:db:d5:d8:4b:34:11:27:bf:43:e8:c0:c9:1b:46:37:
         91:f8:a9:2e:f9:28:4c:f2:ab:8e:4b:f9:91:4c:88:0f:2e:44:
         15:ce:ab:22:e2:ee:11:4d:06:d3:23:54:57:75:02:eb:95:f9:
         88:05:af:dd:41:f3:b3:c8:76:7b:2e:ef:98:a6:99:9a:25:81:
         de:a4:e8:32:e6:ce:e0:54:8b:63:33:2d:b5:a2:1e:ed:fb:25:
         56:ae:25:d0:b2:13:c2:83:c7:92:49:a4:bb:75:50:5c:91:13:
         fe:43:1b:35:e0:59:2b:4b:30:a0:87:e1:30:b8:ef:21:f3:52:
         36:d6:01:fa:74:f7:48:9b:42:1b:3d:58:08:2e:77:67:a0:37:
         90:1b:d0:67:01:b3:83:6a:11:71:f0:b8:11:39:7e:5b:0f:91:
         30:b9:4f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwaJi1oCtN4IqRkhCJ+NadHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4
MGI1ZWMwHhcNMjYwMjAxMTcwMDM1WhcNMjYwMjAyMTcwMDM1WjAzMTEwLwYDVQQD
EyhmZWI3ZmQ2ODIwY2YyNjdlZjE0YTBjY2U1NTUyMDk3MDE5ZDMwOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszM3LjAzem9k66hmdC8MtpE3nuSz
hrimlfIqmsBao2fMh9k7s+WUx9rkGlh2IInh5wUuaWPQdHRTTyHajsczBKPMIw2+
s4molFGIEy+pcvTzYAXB4qh5QwkQLBZfiz2mRlFgcAVWSAyAp9w8vtQIxnsfHiLA
1EUCcYoxJAQZTY9Ajplu4MZCwQbRgdbSJq2pOpSu8kfzppeKUmtolACK9d8TRTNj
+ZFoZNX9RR6jDc4zB/1Nel3U3eWPygntXK7AKecRLqW5OMCQo/qBPm3MttITzCen
mmNApLBfwPwOBO+yEK+TjfoFF/3Mz+KTFSNL8HsWkAReXhRPDCb+a8MAtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP63/WggzyZ+8UoMzlVSCXAZ0wl2MB8GA1UdIwQY
MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt
MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3
LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8X7U3fL
flbxkX0s3qGoZlLRi1cT4m5JxVQukidPzfX4HGTnDG8vD15fBNV2vt5igci3TCPE
C55eg/bPHe+yRxjM1RAGu0PKFLFOdei/MslQp3VOJ5S8/l/udLqT29XYSzQRJ79D
6MDJG0Y3kfipLvkoTPKrjkv5kUyIDy5EFc6rIuLuEU0G0yNUV3UC65X5iAWv3UHz
s8h2ey7vmKaZmiWB3qToMubO4FSLYzMttaIe7fslVq4l0LITwoPHkkmku3VQXJET
/kMbNeBZK0swoIfhMLjvIfNSNtYB+nT3SJtCGz1YCC53Z6A3kBvQZwGzg2oRcfC4
ETl+Ww+RMLlPrQ==
-----END CERTIFICATE-----
Generated at Sun Feb 1 22:15:13 2026 by rpki-client