This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File:                     zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier:          UtDCACwNwbPBWONF9j1drfJgO2HHbQnIH6LprSEG9gY=
Subject key identifier:   78:28:DF:98:10:78:95:50:D8:57:15:36:C8:23:04:F6:80:4B:11:15
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer:       /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial:       019C44DA0577FCC95F87D772D95D1F366C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number:          0AD3
Signing time:             Tue 10 Feb 2026 00:01:04 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:04 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:04 +0000
Files and hashes:         1: 84ShoK67lkAzxpq5fgwmHF7-Mug.asa (hash: M4b3tLPWFgypK3mWPPB8dw2tRn1bXCTWo2xZXTLHO8o=)
                          2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
                          3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: qqyUhPNqUS+W8/NAuygDhRRi3xQOMD8EXSJRP+9ZCXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:05:77:fc:c9:5f:87:d7:72:d9:5d:1f:36:6c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
        Validity
            Not Before: Feb 10 00:01:04 2026 GMT
            Not After : Feb 11 00:01:04 2026 GMT
        Subject: CN=7828df9810789550d8571536c82304f6804b1115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:4b:39:93:48:4b:2a:5c:c9:09:7c:d2:e5:
                    4b:7c:62:3a:53:3c:a7:ad:ef:2d:a2:3d:62:1e:45:
                    de:82:c4:90:13:f5:28:07:49:c8:3b:a8:c9:ab:92:
                    33:20:b5:e3:c5:9d:7b:65:2e:a7:97:ab:5f:01:c2:
                    bd:1d:00:a1:8a:0d:21:0d:f5:bb:4d:91:86:54:e8:
                    c7:e5:58:b3:21:04:56:55:7c:23:18:4b:b3:3c:76:
                    54:65:8d:ab:0a:9f:66:47:6d:3c:7d:1e:b1:64:a2:
                    86:4e:95:32:d6:9a:26:be:29:84:61:52:88:75:3b:
                    b4:ca:c4:3e:e0:72:e8:b1:12:e1:3b:c6:78:31:f8:
                    a4:40:6b:13:b5:bc:fc:77:ff:f4:2d:20:0f:68:99:
                    43:7f:e4:71:5c:13:d9:2d:52:d6:78:d5:fc:ff:73:
                    ac:73:32:52:03:e3:29:5c:81:d6:c1:24:bf:1f:85:
                    e2:3e:b2:98:4f:4d:23:d2:aa:9f:4c:f0:f5:4f:8d:
                    81:26:e9:88:b4:15:05:c5:b0:e8:a6:8b:c7:c5:ad:
                    8c:c3:4f:64:10:69:4f:b0:a5:16:56:c0:b8:6f:0a:
                    01:6d:fe:39:48:fe:a8:27:db:f2:91:f2:fa:75:1c:
                    be:cd:cf:ae:c1:ad:a6:b3:1f:2e:4b:79:71:7d:8b:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:28:DF:98:10:78:95:50:D8:57:15:36:C8:23:04:F6:80:4B:11:15
            X509v3 Authority Key Identifier:
                keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b0:dc:7a:11:18:93:b2:ba:70:af:14:cb:75:b3:03:3f:9d:
         ff:65:8b:8c:1e:08:c6:3d:23:b1:83:f2:e3:e1:f5:66:d1:5b:
         c3:a2:9f:0d:bf:2c:28:ea:6e:9b:ef:3e:74:ae:1d:52:67:48:
         9e:30:39:f0:c3:38:29:95:5e:25:5f:94:25:03:6c:bb:11:ee:
         70:d0:cb:29:3c:92:e3:93:f5:57:d8:37:21:b9:54:82:d7:e7:
         e3:81:dc:a8:39:96:a1:d3:af:0f:e2:5d:d6:3a:0a:80:68:23:
         07:d7:66:6c:25:0b:7e:01:cf:6e:37:1e:61:44:64:49:98:86:
         d1:3c:01:26:41:4f:de:a0:b1:2f:6b:a4:40:b3:e3:8a:be:ae:
         f7:54:23:83:05:8c:e1:b5:dc:04:cb:70:28:eb:07:47:48:7c:
         31:5b:1e:7f:7d:6d:4d:e2:b1:ac:13:28:8c:a3:5c:95:7f:6d:
         b7:d7:29:31:6a:a7:8a:4e:81:d0:94:29:25:69:45:e7:08:e0:
         36:16:60:03:a1:99:ff:81:75:cc:aa:42:ea:92:75:98:eb:a4:
         be:61:7b:7a:86:fa:44:88:a3:16:1c:3c:d6:20:49:91:63:64:
         0d:0a:66:35:25:33:13:48:2d:8d:95:4b:8b:d6:5e:b4:a5:19:
         d3:60:4f:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2gV3/Mlfh9dy2V0fNmxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmNiYTEwYWI0NjVjZjBlZTNlNzYwMjVjNjdmODU1NGQy
ZDAxYTUwHhcNMjYwMjEwMDAwMTA0WhcNMjYwMjExMDAwMTA0WjAzMTEwLwYDVQQD
Eyg3ODI4ZGY5ODEwNzg5NTUwZDg1NzE1MzZjODIzMDRmNjgwNGIxMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCJLOZNISypcyQl80uVLfGI6Uzyn
re8toj1iHkXegsSQE/UoB0nIO6jJq5IzILXjxZ17ZS6nl6tfAcK9HQChig0hDfW7
TZGGVOjH5VizIQRWVXwjGEuzPHZUZY2rCp9mR208fR6xZKKGTpUy1pomvimEYVKI
dTu0ysQ+4HLosRLhO8Z4MfikQGsTtbz8d//0LSAPaJlDf+RxXBPZLVLWeNX8/3Os
czJSA+MpXIHWwSS/H4XiPrKYT00j0qqfTPD1T42BJumItBUFxbDopovHxa2Mw09k
EGlPsKUWVsC4bwoBbf45SP6oJ9vykfL6dRy+zc+uwa2msx8uS3lxfYsI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgo35gQeJVQ2FcVNsgjBPaASxEVMB8GA1UdIwQY
MBaAFM1suhCrRlzw7j52Alxn+FVNLQGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81MWRkMjEtOWRiMS00MjI0LTlhYWMt
NTZhZmMzY2JkZjRlLzEveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81MWRkMjEtOWRiMS00MjI0LTlhYWMtNTZhZmMzY2JkZjRl
LzEveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7DcehEY
k7K6cK8Uy3WzAz+d/2WLjB4Ixj0jsYPy4+H1ZtFbw6KfDb8sKOpum+8+dK4dUmdI
njA58MM4KZVeJV+UJQNsuxHucNDLKTyS45P1V9g3IblUgtfn44HcqDmWodOvD+Jd
1joKgGgjB9dmbCULfgHPbjceYURkSZiG0TwBJkFP3qCxL2ukQLPjir6u91QjgwWM
4bXcBMtwKOsHR0h8MVsef31tTeKxrBMojKNclX9tt9cpMWqnik6B0JQpJWlF5wjg
NhZgA6GZ/4F1zKpC6pJ1mOukvmF7eob6RIijFhw81iBJkWNkDQpmNSUzE0gtjZVL
i9ZetKUZ02BPSA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:42 2026 by rpki-client