This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File:                     y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier:          0Dn2PFKgMVwsGGg5p5/lGwRZ0GVKVDVOf3zLaxVRfKs=
Subject key identifier:   12:96:67:CB:0F:39:6E:71:32:DB:C7:0A:5E:13:1D:C8:9A:47:98:AA
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer:       /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial:       019C1BA6F9B2666945B2201D50781B7A19E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number:          13
Signing time:             Mon 02 Feb 2026 00:00:53 +0000
Manifest this update:     Mon 02 Feb 2026 00:00:53 +0000
Manifest next update:     Tue 03 Feb 2026 00:00:53 +0000
Files and hashes:         1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
                          2: Px9h_qvgLqREBCZLN00mVbIkO-Q.asa (hash: +GoCJubw5kPuru6g+Ang9jMhhF3Gnykp2+EjDy3hM8c=)
                          3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: G46/XpCSFuldO3Mv7UDe0rVDoxGUWSjV0hdzxeh7iWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a6:f9:b2:66:69:45:b2:20:1d:50:78:1b:7a:19:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
        Validity
            Not Before: Feb  2 00:00:53 2026 GMT
            Not After : Feb  3 00:00:53 2026 GMT
        Subject: CN=129667cb0f396e7132dbc70a5e131dc89a4798aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:4c:f1:ba:2e:3d:d0:8b:7e:cd:90:bb:ad:
                    44:57:1c:ea:3c:f7:e3:27:b8:eb:92:5a:99:cb:71:
                    81:33:2b:1c:49:69:14:a7:82:7c:97:ca:d5:93:a6:
                    11:42:b9:08:b7:27:4e:0a:2b:2d:7b:d6:1b:6d:03:
                    d8:f6:37:bd:8f:37:ed:36:d6:31:ed:f5:00:ed:e9:
                    c5:d1:4f:41:f3:80:78:83:e6:ef:b8:ff:ea:32:b7:
                    b0:f0:7d:e5:c3:fb:67:66:6c:20:66:23:9f:cc:9f:
                    3d:be:74:c2:0e:3b:3e:7c:e1:63:be:f1:7e:ae:ff:
                    ba:d9:d6:7a:57:53:d3:b6:3c:62:e2:29:b3:2a:93:
                    8a:e8:f2:67:4d:f7:3e:0f:12:46:d2:9a:df:1b:3d:
                    48:5f:63:66:a6:fd:54:f3:81:dc:12:95:a7:4c:39:
                    e0:fa:a9:9e:0c:aa:99:a6:82:d3:cf:92:8f:d7:b5:
                    41:f4:00:b1:4b:d9:63:d7:c0:a3:54:c5:1c:d9:61:
                    f2:f4:30:99:6e:35:d2:eb:15:39:70:d6:1b:65:cd:
                    30:22:40:6b:b2:1f:3a:a3:f0:70:24:6e:89:d3:34:
                    ec:3c:47:14:06:97:87:d7:3a:10:78:2a:4b:33:0c:
                    c4:e5:3f:a3:9a:07:5b:17:7b:2a:1b:e5:2d:b7:a1:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:67:CB:0F:39:6E:71:32:DB:C7:0A:5E:13:1D:C8:9A:47:98:AA
            X509v3 Authority Key Identifier:
                keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:16:97:74:37:31:1a:fa:6b:bf:a0:a6:df:5f:d1:93:1d:
         55:d1:d2:78:87:e5:19:a9:67:26:c2:1a:e8:b8:f6:67:65:09:
         67:51:20:d5:11:fb:86:0f:31:c5:96:0f:69:24:97:bd:5d:c8:
         69:d7:b1:36:8c:32:87:ea:70:ed:46:14:f7:61:66:e0:e4:d7:
         13:e0:32:94:3a:0d:17:e4:dd:43:d5:fa:63:e0:b4:24:68:8e:
         f1:69:3e:f5:f2:9e:6c:aa:2e:18:79:e0:13:c6:5e:30:91:9e:
         b3:27:94:6b:76:89:15:ed:b7:05:88:03:5e:47:38:28:49:93:
         d7:4c:80:12:a2:5a:20:97:91:29:9c:f5:e3:4d:41:96:5d:55:
         1b:dc:97:2b:cb:cf:ef:90:b6:8c:e8:9e:86:45:7f:32:57:ba:
         58:27:07:37:af:43:ef:5d:5e:a4:62:96:e4:54:e0:c2:99:42:
         d7:f6:84:72:dc:5c:7a:e6:bb:36:c8:fb:6a:bc:9c:bb:03:fc:
         f3:51:45:02:25:e2:83:96:d8:f9:9d:5f:97:90:68:c8:2b:a0:
         bf:ec:15:d2:65:1a:42:af:6e:c6:8a:8e:b1:6f:e8:83:5f:b6:
         f0:63:3c:f9:ab:6b:ee:9c:8f:81:82:87:85:e2:3a:62:0b:d4:
         9c:62:28:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwbpvmyZmlFsiAdUHgbehniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiN2YyZmZiMzlhYTJkZjIwMDRiN2NhMTU3M2QxMTMxN2E4
ZmI3NGEwHhcNMjYwMjAyMDAwMDUzWhcNMjYwMjAzMDAwMDUzWjAzMTEwLwYDVQQD
EygxMjk2NjdjYjBmMzk2ZTcxMzJkYmM3MGE1ZTEzMWRjODlhNDc5OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GNM8bouPdCLfs2Qu61EVxzqPPfj
J7jrklqZy3GBMyscSWkUp4J8l8rVk6YRQrkItydOCiste9YbbQPY9je9jzftNtYx
7fUA7enF0U9B84B4g+bvuP/qMrew8H3lw/tnZmwgZiOfzJ89vnTCDjs+fOFjvvF+
rv+62dZ6V1PTtjxi4imzKpOK6PJnTfc+DxJG0prfGz1IX2Nmpv1U84HcEpWnTDng
+qmeDKqZpoLTz5KP17VB9ACxS9lj18CjVMUc2WHy9DCZbjXS6xU5cNYbZc0wIkBr
sh86o/BwJG6J0zTsPEcUBpeH1zoQeCpLMwzE5T+jmgdbF3sqG+Utt6EByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKWZ8sPOW5xMtvHCl4THciaR5iqMB8GA1UdIwQY
MBaAFMt/L/s5qi3yAEt8oVc9ETF6j7dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2IxN2YtMDdkMi00ZjQ1LWJlMWQt
YzhmYmEwYjMxMGE5LzEveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hM2IxN2YtMDdkMi00ZjQ1LWJlMWQtYzhmYmEwYjMxMGE5
LzEveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBYWl3Q3
MRr6a7+gpt9f0ZMdVdHSeIflGalnJsIa6Lj2Z2UJZ1Eg1RH7hg8xxZYPaSSXvV3I
adexNowyh+pw7UYU92Fm4OTXE+AylDoNF+TdQ9X6Y+C0JGiO8Wk+9fKebKouGHng
E8ZeMJGesyeUa3aJFe23BYgDXkc4KEmT10yAEqJaIJeRKZz1401Bll1VG9yXK8vP
75C2jOiehkV/Mle6WCcHN69D711epGKW5FTgwplC1/aEctxceua7Nsj7arycuwP8
81FFAiXig5bY+Z1fl5BoyCugv+wV0mUaQq9uxoqOsW/og1+28GM8+atr7pyPgYKH
heI6YgvUnGIokA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:00:14 2026 by rpki-client