This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
File:                     f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json)
Hash identifier:          /q5/nR6hvqVhY107ZYy/Sx9zvJTkMBQP67Ivc6qfPiU=
Subject key identifier:   B9:0B:34:17:E1:69:8D:A1:00:B2:E7:2F:17:88:70:B2:47:3C:13:08
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Certificate issuer:       /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial:       019C2BF57F5BED740335F442EB5B6A33639C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
Manifest number:          06AA
Signing time:             Thu 05 Feb 2026 04:00:35 +0000
Manifest this update:     Thu 05 Feb 2026 04:00:35 +0000
Manifest next update:     Fri 06 Feb 2026 04:00:35 +0000
Files and hashes:         1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=)
                          2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=)
                          3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=)
                          4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=)
                          5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=)
                          6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=)
                          7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: OevXsKbHs+wP1/fyLL8zyaAESWzvzND3rtMqx3xwxWo=)
                          8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=)
                          9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=)
                          10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=)
                          11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=)
                          12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=)
                          13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2b:f5:7f:5b:ed:74:03:35:f4:42:eb:5b:6a:33:63:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
        Validity
            Not Before: Feb  5 04:00:35 2026 GMT
            Not After : Feb  6 04:00:35 2026 GMT
        Subject: CN=b90b3417e1698da100b2e72f178870b2473c1308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:66:21:8b:fb:e2:14:28:f9:40:6a:83:88:
                    67:08:fd:74:de:3c:b1:f0:83:c5:b5:4a:6b:da:2e:
                    a9:c2:68:0a:cd:f4:ab:0f:e8:1d:ba:f7:5c:94:cb:
                    ff:0e:39:6f:be:fb:d4:7a:2d:a1:13:00:cd:44:aa:
                    82:89:df:f2:8a:40:41:95:c3:06:7e:74:00:28:c6:
                    f1:cf:6a:57:ae:43:96:c4:c6:0b:de:03:ee:09:0a:
                    93:bd:63:91:c5:d2:bd:b3:d5:c3:40:af:ab:91:5f:
                    03:59:00:19:24:1f:00:b7:bf:01:7c:03:dc:4b:22:
                    15:5f:c3:67:f2:89:f5:18:74:55:c1:49:99:8f:ff:
                    78:75:3f:4b:91:55:00:39:cd:85:85:7b:11:3b:9e:
                    85:a1:a8:28:36:26:42:4d:2c:f9:54:f9:89:bc:4c:
                    24:17:e7:ad:77:bd:1d:59:2f:ea:f6:5a:b8:0e:ed:
                    27:52:ae:ca:43:46:a2:fd:5a:8f:31:6c:e8:79:28:
                    f2:83:23:60:6d:49:87:8f:87:c6:ed:d4:f5:6c:9e:
                    10:e1:fe:40:0f:19:bf:f4:03:b9:0a:17:85:fc:9c:
                    b0:5c:d2:c6:fd:ed:56:0d:29:5f:52:70:e3:a4:d5:
                    f2:c6:82:a2:ef:33:60:95:ba:9b:a4:e1:a7:da:9a:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0B:34:17:E1:69:8D:A1:00:B2:E7:2F:17:88:70:B2:47:3C:13:08
            X509v3 Authority Key Identifier:
                keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:7f:50:96:81:03:bf:31:25:db:1c:1f:58:8f:56:24:7b:
         4c:aa:a7:81:85:57:06:44:ff:91:76:c7:5d:1d:98:47:8c:d2:
         c0:5d:0c:2a:ba:68:1d:5e:a4:f8:e5:43:44:05:97:b4:79:44:
         cd:f6:f1:3a:7d:31:11:1b:80:d9:d8:4b:bc:67:da:d7:23:d2:
         bc:3e:a6:a6:64:f9:ec:e3:ef:d4:14:ef:61:6a:0a:6d:f3:1a:
         79:a3:43:28:38:a9:70:d4:4e:b6:1f:35:ad:12:1e:fe:d5:9f:
         ba:c0:3f:06:3b:fb:32:ec:8b:ca:5c:28:ce:88:6d:49:c2:2b:
         0a:9c:ab:42:8e:e2:63:ef:80:c2:fe:7d:39:60:e7:f4:1b:41:
         48:08:98:65:5a:50:fc:cb:8e:d0:54:ce:78:0e:1b:e5:d1:a3:
         12:4c:da:5f:36:b8:04:6c:71:4b:e4:51:74:a1:c8:31:0c:4e:
         8b:a7:18:a8:b9:3a:70:e6:02:ec:d4:bf:64:06:91:4e:ba:d2:
         54:59:aa:c6:6b:e1:a6:7e:ea:af:63:54:4b:62:52:5f:15:8d:
         7d:09:e6:77:ae:e4:b4:ae:3a:03:af:10:9a:9a:f7:85:a2:c7:
         54:10:0d:80:76:de:ca:e4:dd:6f:b0:42:a2:8a:8a:6b:c2:a5:
         44:7c:c3:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwr9X9b7XQDNfRC61tqM2OcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0
NzQwOGMwHhcNMjYwMjA1MDQwMDM1WhcNMjYwMjA2MDQwMDM1WjAzMTEwLwYDVQQD
EyhiOTBiMzQxN2UxNjk4ZGExMDBiMmU3MmYxNzg4NzBiMjQ3M2MxMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ5mIYv74hQo+UBqg4hnCP103jyx
8IPFtUpr2i6pwmgKzfSrD+gduvdclMv/DjlvvvvUei2hEwDNRKqCid/yikBBlcMG
fnQAKMbxz2pXrkOWxMYL3gPuCQqTvWORxdK9s9XDQK+rkV8DWQAZJB8At78BfAPc
SyIVX8Nn8on1GHRVwUmZj/94dT9LkVUAOc2FhXsRO56FoagoNiZCTSz5VPmJvEwk
F+etd70dWS/q9lq4Du0nUq7KQ0ai/VqPMWzoeSjygyNgbUmHj4fG7dT1bJ4Q4f5A
Dxm/9AO5CheF/JywXNLG/e1WDSlfUnDjpNXyxoKi7zNglbqbpOGn2prvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkLNBfhaY2hALLnLxeIcLJHPBMIMB8GA1UdIwQY
MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt
ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy
LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHx/UJaB
A78xJdscH1iPViR7TKqngYVXBkT/kXbHXR2YR4zSwF0MKrpoHV6k+OVDRAWXtHlE
zfbxOn0xERuA2dhLvGfa1yPSvD6mpmT57OPv1BTvYWoKbfMaeaNDKDipcNROth81
rRIe/tWfusA/Bjv7MuyLylwozohtScIrCpyrQo7iY++Awv59OWDn9BtBSAiYZVpQ
/MuO0FTOeA4b5dGjEkzaXza4BGxxS+RRdKHIMQxOi6cYqLk6cOYC7NS/ZAaRTrrS
VFmqxmvhpn7qr2NUS2JSXxWNfQnmd67ktK46A68Qmpr3haLHVBANgHbeyuTdb7BC
ooqKa8KlRHzDDQ==
-----END CERTIFICATE-----
Generated at Thu Feb 5 13:39:57 2026 by rpki-client