This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File:                     idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier:          V9sw4FlxkzFirPzRY0oE3wIKSmSHLZMRx4LDTp26pQA=
Subject key identifier:   84:35:6C:6B:AC:2E:B2:67:25:C0:C1:B0:8B:B5:BD:B5:49:E8:2C:DC
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer:       /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial:       019C1C4BB0B8BCA7901141B5FFAEEE58E1A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number:          1802
Signing time:             Mon 02 Feb 2026 03:00:48 +0000
Manifest this update:     Mon 02 Feb 2026 03:00:48 +0000
Manifest next update:     Tue 03 Feb 2026 03:00:48 +0000
Files and hashes:         1: 0CdqlW01ACbv3EQD2O6eNsK9tUw.asa (hash: 9WhwZoBfEGd5k4zvC4ZA/vr5vp3EXDon/OkKYutAIU0=)
                          2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=)
                          3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=)
                          4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: azRsJ6pUGD7RMYaVt87RMgmiwDcfRtyeUvSFb8ux6LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:4b:b0:b8:bc:a7:90:11:41:b5:ff:ae:ee:58:e1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
        Validity
            Not Before: Feb  2 03:00:48 2026 GMT
            Not After : Feb  3 03:00:48 2026 GMT
        Subject: CN=84356c6bac2eb26725c0c1b08bb5bdb549e82cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:d9:7a:b3:6d:80:0d:2e:93:02:f7:cc:6d:
                    60:15:a7:99:b3:ad:4f:a6:a0:a7:2c:49:7d:5d:6d:
                    4d:6e:11:74:79:ec:51:f2:90:3c:53:b4:c8:c3:67:
                    2c:54:78:69:60:25:f3:de:46:f8:e5:01:10:dc:cb:
                    9a:15:8a:1f:46:02:7d:a6:14:98:83:23:c4:51:36:
                    c3:01:b0:45:73:dc:9c:d0:75:1e:45:76:70:d0:93:
                    a4:51:e2:83:c4:c1:8f:4e:69:49:64:49:89:57:4e:
                    cc:be:3e:6f:94:cf:21:72:ee:e0:ba:d3:86:da:2f:
                    e5:82:6f:95:ba:2d:cb:99:0a:b6:04:46:9d:91:db:
                    0c:36:f5:09:d5:c5:64:fd:63:ae:30:88:1e:90:68:
                    61:0b:d3:41:68:0e:e2:42:60:a3:b1:7c:14:64:83:
                    6a:89:ba:b7:f9:0a:dd:61:da:ff:8f:f7:5d:0a:6b:
                    ba:af:b9:91:dc:cf:be:0c:a8:a4:bd:f8:42:2a:85:
                    19:ce:29:a8:82:28:0e:d9:a8:43:c8:94:79:01:20:
                    06:bf:04:fb:30:ba:ff:e5:f9:50:36:65:48:a5:33:
                    d4:d4:97:04:7b:ee:e1:14:3e:7a:6c:0f:79:c5:97:
                    d6:2a:9a:76:eb:94:e8:ab:15:b6:74:6c:63:a6:4d:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:35:6C:6B:AC:2E:B2:67:25:C0:C1:B0:8B:B5:BD:B5:49:E8:2C:DC
            X509v3 Authority Key Identifier:
                keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4b:a6:61:72:b8:3f:c8:02:ad:69:f1:5a:37:3f:19:58:d3:
         a1:2b:78:f8:26:88:c0:9e:bb:dc:dc:0e:ba:69:e9:75:04:67:
         d8:7a:c6:bf:68:4d:44:68:eb:a3:6b:2a:1a:38:d1:d0:eb:f6:
         47:87:9e:1d:b6:05:d2:be:9d:26:55:a6:07:22:09:dc:7c:40:
         a4:79:57:2e:23:47:16:de:c0:ba:b5:45:ed:d8:f3:26:6d:16:
         65:8a:a9:e7:6d:36:bf:6f:60:ee:68:f2:2f:41:0a:6f:96:48:
         cc:f6:69:11:08:75:52:ce:35:42:26:a5:20:6e:e2:26:6f:31:
         74:a1:a2:45:61:bb:1e:b1:44:86:c6:12:e2:4d:c6:bc:3e:94:
         5a:49:7d:1e:11:4c:0c:82:97:ea:32:a1:c4:0d:9a:6a:3f:ed:
         25:09:ab:52:00:32:56:37:ea:ab:a2:3f:64:39:49:38:19:5c:
         be:1d:ec:71:0f:98:18:ef:0a:eb:86:27:1c:c7:e3:89:c5:c7:
         44:ce:c8:1a:f7:15:4a:20:af:1d:2b:03:3c:58:eb:b6:74:6c:
         84:bb:94:ef:74:50:1c:51:d6:a8:a4:e8:ee:ba:4a:42:92:64:
         2c:22:b3:80:07:9d:1a:f2:9a:85:e0:31:c2:1a:fd:66:9f:30:
         3b:c7:c9:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcS7C4vKeQEUG1/67uWOGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh
MzViYWIwHhcNMjYwMjAyMDMwMDQ4WhcNMjYwMjAzMDMwMDQ4WjAzMTEwLwYDVQQD
Eyg4NDM1NmM2YmFjMmViMjY3MjVjMGMxYjA4YmI1YmRiNTQ5ZTgyY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupTZerNtgA0ukwL3zG1gFaeZs61P
pqCnLEl9XW1NbhF0eexR8pA8U7TIw2csVHhpYCXz3kb45QEQ3MuaFYofRgJ9phSY
gyPEUTbDAbBFc9yc0HUeRXZw0JOkUeKDxMGPTmlJZEmJV07Mvj5vlM8hcu7gutOG
2i/lgm+Vui3LmQq2BEadkdsMNvUJ1cVk/WOuMIgekGhhC9NBaA7iQmCjsXwUZINq
ibq3+QrdYdr/j/ddCmu6r7mR3M++DKikvfhCKoUZzimogigO2ahDyJR5ASAGvwT7
MLr/5flQNmVIpTPU1JcEe+7hFD56bA95xZfWKpp265ToqxW2dGxjpk0QYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ1bGusLrJnJcDBsIu1vbVJ6CzcMB8GA1UdIwQY
MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It
NDk1MDFhNzY5NGM0LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0
LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0umYXK4
P8gCrWnxWjc/GVjToSt4+CaIwJ673NwOumnpdQRn2HrGv2hNRGjro2sqGjjR0Ov2
R4eeHbYF0r6dJlWmByIJ3HxApHlXLiNHFt7AurVF7djzJm0WZYqp5202v29g7mjy
L0EKb5ZIzPZpEQh1Us41QialIG7iJm8xdKGiRWG7HrFEhsYS4k3GvD6UWkl9HhFM
DIKX6jKhxA2aaj/tJQmrUgAyVjfqq6I/ZDlJOBlcvh3scQ+YGO8K64YnHMfjicXH
RM7IGvcVSiCvHSsDPFjrtnRshLuU73RQHFHWqKTo7rpKQpJkLCKzgAedGvKaheAx
whr9Zp8wO8fJWw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:13 2026 by rpki-client