This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File:                     cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier:          qFkWEYrIePQock9Nbv6HCbOYswsknpc7Uy4pzMiWGYE=
Subject key identifier:   CF:B6:C0:6A:61:94:AC:7B:03:4B:E9:CE:EF:0A:7C:29:95:25:BC:D8
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer:       /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial:       019C1BDE1C422E0B8E6FB22F1580D175D2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number:          1187
Signing time:             Mon 02 Feb 2026 01:01:06 +0000
Manifest this update:     Mon 02 Feb 2026 01:01:06 +0000
Manifest next update:     Tue 03 Feb 2026 01:01:06 +0000
Files and hashes:         1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
                          2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: w7M8tO1TmFBBBmUhczrpc1niZDg1Br6HT9XzjVMx470=)
                          3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:de:1c:42:2e:0b:8e:6f:b2:2f:15:80:d1:75:d2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
        Validity
            Not Before: Feb  2 01:01:06 2026 GMT
            Not After : Feb  3 01:01:06 2026 GMT
        Subject: CN=cfb6c06a6194ac7b034be9ceef0a7c299525bcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:67:6d:dc:b6:42:ec:b4:a0:ef:e1:38:b1:
                    72:78:d4:67:b0:83:b6:9d:88:4c:d6:41:b4:a3:ef:
                    98:25:8e:3c:a3:ac:90:20:95:19:a5:7e:d1:6b:36:
                    b1:3e:ba:70:37:3f:d7:77:68:c6:9f:d7:e0:55:af:
                    e9:db:59:ad:24:6b:6e:fb:d7:81:8e:ba:14:fa:f6:
                    fd:c9:c1:49:65:2b:8c:ae:62:82:4b:de:14:86:31:
                    f2:24:f2:94:1b:89:be:d8:81:08:3a:f2:ed:e6:86:
                    de:c6:8f:4f:82:28:f9:d2:a7:20:14:c7:1a:00:cc:
                    48:c2:37:c2:61:c1:32:6b:ae:ce:4f:4f:cd:ba:69:
                    54:27:f3:f8:2c:9d:c0:05:d4:a2:ea:06:6d:9d:76:
                    2b:35:2c:44:d0:9b:4c:8e:f6:01:1a:02:be:b4:3d:
                    d5:27:05:44:16:77:61:31:28:9a:fe:2f:3c:ef:1c:
                    57:f3:42:45:b1:f1:fa:83:80:7a:63:3a:55:ea:d0:
                    c4:03:d5:f6:50:4e:ec:72:6c:04:46:73:af:38:1f:
                    e7:ef:78:04:42:81:86:e8:d6:3c:7c:6a:11:78:f0:
                    59:f6:3a:cf:75:6c:81:ae:3d:3c:19:5e:bb:44:da:
                    c0:d6:f5:3f:62:b7:f8:9a:c3:71:5e:0f:c0:ee:a0:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:C0:6A:61:94:AC:7B:03:4B:E9:CE:EF:0A:7C:29:95:25:BC:D8
            X509v3 Authority Key Identifier:
                keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:51:c2:e2:38:33:c8:2e:14:34:e8:bf:6c:c7:2c:72:ae:08:
         d5:6f:dc:6d:67:69:65:cd:84:7a:f3:ea:ac:d6:1b:e4:77:2c:
         42:73:d0:3a:72:ca:ea:64:18:0b:03:0b:f4:94:1b:e5:2d:96:
         75:eb:93:20:ce:78:cf:f0:bd:dc:5e:2b:6f:16:09:32:56:9a:
         8b:c8:64:25:7a:a1:9e:f0:3c:e9:70:2f:36:dc:67:3c:85:66:
         f5:b0:4d:53:71:96:f1:4c:f7:a0:8f:73:67:ce:c2:75:9e:9b:
         0e:e5:7f:de:a4:0a:20:a1:63:21:40:45:93:5f:de:90:6f:43:
         76:12:48:ad:d5:11:6d:b5:e2:26:83:44:fc:42:7f:ee:44:cc:
         f4:c1:ea:61:ca:39:35:c2:a2:21:37:2b:98:ef:5f:55:a2:44:
         2c:7a:f1:f3:ce:f8:59:30:1e:16:4d:c0:77:e0:63:54:3c:8e:
         75:bc:d6:2e:e3:f8:e9:5e:7f:a6:d5:d6:8b:e1:a5:50:c8:28:
         a3:30:f2:b8:aa:b6:db:5e:b0:93:54:d3:94:9a:ca:bc:70:ee:
         a8:db:9e:ee:ea:cd:6e:18:b2:77:fc:1b:f0:b3:3d:d2:54:49:
         69:d2:ed:8e:9b:12:0b:34:b8:bf:0e:20:13:e1:19:bc:14:dc:
         57:83:99:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwb3hxCLguOb7IvFYDRddK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjYwMjAyMDEwMTA2WhcNMjYwMjAzMDEwMTA2WjAzMTEwLwYDVQQD
EyhjZmI2YzA2YTYxOTRhYzdiMDM0YmU5Y2VlZjBhN2MyOTk1MjViY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB9nbdy2Quy0oO/hOLFyeNRnsIO2
nYhM1kG0o++YJY48o6yQIJUZpX7RazaxPrpwNz/Xd2jGn9fgVa/p21mtJGtu+9eB
jroU+vb9ycFJZSuMrmKCS94UhjHyJPKUG4m+2IEIOvLt5obexo9Pgij50qcgFMca
AMxIwjfCYcEya67OT0/NumlUJ/P4LJ3ABdSi6gZtnXYrNSxE0JtMjvYBGgK+tD3V
JwVEFndhMSia/i887xxX80JFsfH6g4B6YzpV6tDEA9X2UE7scmwERnOvOB/n73gE
QoGG6NY8fGoRePBZ9jrPdWyBrj08GV67RNrA1vU/Yrf4msNxXg/A7qBpYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+2wGphlKx7A0vpzu8KfCmVJbzYMB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFHC4jgz
yC4UNOi/bMcscq4I1W/cbWdpZc2EevPqrNYb5HcsQnPQOnLK6mQYCwML9JQb5S2W
deuTIM54z/C93F4rbxYJMlaai8hkJXqhnvA86XAvNtxnPIVm9bBNU3GW8Uz3oI9z
Z87CdZ6bDuV/3qQKIKFjIUBFk1/ekG9DdhJIrdURbbXiJoNE/EJ/7kTM9MHqYco5
NcKiITcrmO9fVaJELHrx8874WTAeFk3Ad+BjVDyOdbzWLuP46V5/ptXWi+GlUMgo
ozDyuKq2216wk1TTlJrKvHDuqNue7urNbhiyd/wb8LM90lRJadLtjpsSCzS4vw4g
E+EZvBTcV4OZhw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:04 2026 by rpki-client