This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File:                     dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier:          rmStK6Vf4LbaSUHhypVb505gjIjDe0G5p8lIbX2RxNY=
Subject key identifier:   98:90:74:7C:13:F5:3C:80:DA:58:32:8C:69:4B:E3:F7:71:53:0B:66
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer:       /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial:       019C3E32D01622FC17DA93A26AFC4AC20B32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number:          61
Signing time:             Sun 08 Feb 2026 17:00:43 +0000
Manifest this update:     Sun 08 Feb 2026 17:00:43 +0000
Manifest next update:     Mon 09 Feb 2026 17:00:43 +0000
Files and hashes:         1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
                          2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
                          3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: nRXqWA/mOzdsQUsbeohfWDWe93W8JHA6A4zrA0o1UEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3e:32:d0:16:22:fc:17:da:93:a2:6a:fc:4a:c2:0b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
        Validity
            Not Before: Feb  8 17:00:43 2026 GMT
            Not After : Feb  9 17:00:43 2026 GMT
        Subject: CN=9890747c13f53c80da58328c694be3f771530b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:ad:cf:36:48:98:3e:2d:d0:33:47:0d:5e:
                    7e:81:4b:8b:ca:75:1d:7b:b2:1f:c7:9d:05:bf:43:
                    62:de:a4:27:71:39:ef:84:12:f5:a5:c7:86:0b:d8:
                    c6:7f:4a:89:86:bc:54:bf:96:fa:73:a2:37:af:fe:
                    58:cd:fc:70:ec:ca:62:62:fb:cb:86:90:2e:8e:be:
                    c9:c3:fb:ac:64:e3:fa:e6:fa:cd:5b:09:45:40:85:
                    de:ea:8b:39:ae:bb:74:dd:05:d0:b2:21:2d:7f:22:
                    f8:cc:6b:02:d3:08:af:ef:07:5d:85:5f:f3:68:64:
                    d5:93:c4:01:9e:f6:09:49:7b:e5:03:28:97:41:17:
                    8d:79:44:45:ca:f0:69:2c:7c:0b:1c:e8:3c:b6:e3:
                    04:9f:f2:41:40:9c:6b:9d:3f:9c:cf:ba:92:9f:85:
                    e2:d5:4c:f0:99:db:65:58:c4:e8:a6:2d:ad:54:5b:
                    6a:e3:16:c7:41:39:f8:99:3a:5b:6c:3d:9e:6d:6c:
                    fb:6f:06:02:88:30:75:95:7b:b0:f5:03:f4:74:8c:
                    26:92:0f:db:a1:4e:41:0a:f6:3a:60:7c:57:c5:15:
                    e9:18:0c:52:bb:3b:ef:65:39:01:f1:f5:e2:cf:e2:
                    28:b4:92:79:7b:a2:70:a1:04:ae:0c:b6:ee:2c:09:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:90:74:7C:13:F5:3C:80:DA:58:32:8C:69:4B:E3:F7:71:53:0B:66
            X509v3 Authority Key Identifier:
                keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:79:ef:1e:6b:fc:18:ed:7b:5e:81:40:67:b1:b7:b3:c4:80:
         5d:13:5b:e9:a4:ad:b4:34:58:a8:8d:cb:97:d4:cb:36:78:61:
         fe:42:e5:46:04:f6:cf:7b:7d:fb:12:be:62:0e:fd:86:a4:87:
         10:88:ec:d7:d4:4e:e9:6e:e7:48:b1:89:0a:4b:67:2c:97:41:
         69:a2:78:41:79:f5:49:62:87:91:5f:eb:60:64:3b:c8:1c:05:
         2f:76:25:c3:f1:d5:f4:36:de:31:18:a2:7a:40:ee:01:d7:31:
         cf:14:3b:f5:a1:70:13:5b:b8:39:fe:6b:f8:b6:dc:4f:0a:f6:
         ee:59:88:08:4d:90:e7:be:4b:ef:1f:6b:39:29:f7:99:ab:03:
         ac:d3:06:eb:74:e1:85:95:e9:84:8d:00:ee:c5:be:ad:44:c1:
         05:7e:fc:ee:df:bf:f1:fc:1a:8d:36:08:b8:e2:a3:74:54:90:
         74:b6:5f:d7:64:e4:d0:cb:fa:96:80:0f:66:c8:00:17:5c:48:
         2e:5d:e6:84:a1:fa:f4:2d:ef:3d:a4:54:c9:ba:ad:b4:ae:a8:
         b2:d7:68:f8:87:58:5b:f4:11:01:e4:13:0e:99:f7:a8:30:96:
         27:5a:8f:f6:8b:07:74:a2:09:fa:00:13:5f:f8:61:7d:8c:4c:
         49:41:e7:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZw+MtAWIvwX2pOiavxKwgsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWM3YTRhN2EwZWFlNDg4MTM3NzM5YmVjNzFhMmIzMjQ3
MGY4ZWQwHhcNMjYwMjA4MTcwMDQzWhcNMjYwMjA5MTcwMDQzWjAzMTEwLwYDVQQD
Eyg5ODkwNzQ3YzEzZjUzYzgwZGE1ODMyOGM2OTRiZTNmNzcxNTMwYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZitzzZImD4t0DNHDV5+gUuLynUd
e7Ifx50Fv0Ni3qQncTnvhBL1pceGC9jGf0qJhrxUv5b6c6I3r/5Yzfxw7MpiYvvL
hpAujr7Jw/usZOP65vrNWwlFQIXe6os5rrt03QXQsiEtfyL4zGsC0wiv7wddhV/z
aGTVk8QBnvYJSXvlAyiXQReNeURFyvBpLHwLHOg8tuMEn/JBQJxrnT+cz7qSn4Xi
1UzwmdtlWMTopi2tVFtq4xbHQTn4mTpbbD2ebWz7bwYCiDB1lXuw9QP0dIwmkg/b
oU5BCvY6YHxXxRXpGAxSuzvvZTkB8fXiz+IotJJ5e6JwoQSuDLbuLAnUQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiQdHwT9TyA2lgyjGlL4/dxUwtmMB8GA1UdIwQY
MBaAFHWcekp6Dq5IgTdzm+xxorMkcPjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hNWU4ZDUtMzI2NC00NmIyLTgwMjYt
YTM5YTljNzc1YTUwLzEvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hNWU4ZDUtMzI2NC00NmIyLTgwMjYtYTM5YTljNzc1YTUw
LzEvZFp4NlNub09ya2lCTjNPYjdIR2lzeVJ3LU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHnvHmv8
GO17XoFAZ7G3s8SAXRNb6aSttDRYqI3Ll9TLNnhh/kLlRgT2z3t9+xK+Yg79hqSH
EIjs19RO6W7nSLGJCktnLJdBaaJ4QXn1SWKHkV/rYGQ7yBwFL3Ylw/HV9DbeMRii
ekDuAdcxzxQ79aFwE1u4Of5r+LbcTwr27lmICE2Q575L7x9rOSn3masDrNMG63Th
hZXphI0A7sW+rUTBBX787t+/8fwajTYIuOKjdFSQdLZf12Tk0Mv6loAPZsgAF1xI
Ll3mhKH69C3vPaRUybqttK6ostdo+IdYW/QRAeQTDpn3qDCWJ1qP9osHdKIJ+gAT
X/hhfYxMSUHnsA==
-----END CERTIFICATE-----
Generated at Sun Feb 8 21:05:54 2026 by rpki-client