This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File:                     mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier:          E/CBzF47t3dFV423HpzCAHRFIDojVk0B+RsWN7mIgyk=
Subject key identifier:   6C:32:18:21:06:22:16:C2:C5:17:72:9B:6C:74:9D:EC:A2:C8:F0:7F
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer:       /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial:       019C1CF081B307BAA463CB4FF1B0F8B5C571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number:          17FE
Signing time:             Mon 02 Feb 2026 06:00:49 +0000
Manifest this update:     Mon 02 Feb 2026 06:00:49 +0000
Manifest next update:     Tue 03 Feb 2026 06:00:49 +0000
Files and hashes:         1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
                          2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: z1LhuGHy/LgA1NfOgfMFqYU0H2Hqm7FAju69eDidpag=)
                          3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f0:81:b3:07:ba:a4:63:cb:4f:f1:b0:f8:b5:c5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
        Validity
            Not Before: Feb  2 06:00:49 2026 GMT
            Not After : Feb  3 06:00:49 2026 GMT
        Subject: CN=6c321821062216c2c517729b6c749deca2c8f07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:d0:c7:a1:62:ec:46:86:8a:7e:cd:53:b7:
                    59:8b:c1:00:3f:3f:c5:5d:10:90:90:3e:60:1e:a2:
                    cc:ed:b8:50:e0:7d:22:4e:22:ed:72:72:c7:b2:ff:
                    5b:9b:68:ca:b4:d9:cf:a6:df:53:96:f4:97:5b:09:
                    9b:5a:e6:2c:25:c6:53:1c:09:c2:b5:5b:c7:98:59:
                    ba:ce:4e:9f:88:22:d4:da:36:cc:a1:01:f5:1e:92:
                    ee:d5:16:14:e2:34:3d:3a:2a:b2:0c:8c:78:eb:62:
                    8d:12:6c:42:3f:2f:db:50:1d:05:55:3c:73:5f:02:
                    80:8d:ab:e5:01:59:51:ff:a7:84:25:5f:84:08:73:
                    7b:be:44:e0:ec:8c:89:a4:fa:c0:24:1d:ac:1e:9a:
                    9a:49:c9:e0:32:69:d8:86:fa:33:73:b7:f2:5e:b6:
                    ce:e6:70:dd:1a:e0:5b:0a:93:ac:7c:3e:c5:1e:c3:
                    bf:67:5f:f0:ef:90:e3:74:43:93:d0:59:95:24:7e:
                    32:b9:27:f5:77:ef:0a:86:ab:16:40:dd:70:6a:bb:
                    16:9b:bd:81:4b:ee:0f:54:e9:e9:1f:8e:ce:ad:24:
                    65:1d:9a:f8:5b:61:61:10:72:01:ca:02:c4:37:e1:
                    91:76:ca:af:55:05:af:2d:b6:ca:6d:01:6a:9b:39:
                    7f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:32:18:21:06:22:16:C2:C5:17:72:9B:6C:74:9D:EC:A2:C8:F0:7F
            X509v3 Authority Key Identifier:
                keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:97:2c:e4:85:74:ae:d2:c9:ba:53:30:9c:a1:dd:ec:b8:
         50:2d:0d:1c:94:4d:30:4b:a5:7c:36:67:c8:39:bd:65:4a:a0:
         d2:02:33:12:9a:d7:ca:0d:69:32:3e:20:a2:3e:67:00:41:91:
         30:ab:3b:a3:00:c2:cf:56:b0:7c:2c:21:53:01:9c:8f:9d:69:
         68:39:2a:d3:2b:8d:b6:9c:25:53:cc:38:d1:f2:86:8e:c5:33:
         d4:4f:6d:12:75:05:51:39:3b:e5:c7:89:29:15:f5:f6:39:96:
         30:e7:07:33:1b:3f:f3:51:95:48:c8:96:bc:39:a0:19:fb:2f:
         ef:e7:4f:8e:91:32:b7:95:3a:ad:44:bb:07:1a:d4:aa:06:9b:
         31:de:13:54:ff:85:a0:38:94:bb:19:67:93:5e:62:36:4c:98:
         bf:a8:5e:9c:d4:d7:8c:d6:8e:40:84:bc:9a:5e:e5:e7:d1:ee:
         b9:38:b3:d1:31:9a:fe:3e:67:4b:e6:c7:1b:2e:fe:d9:84:08:
         c2:f6:2c:49:ed:0c:c8:f6:57:df:76:b0:18:eb:fa:f8:a4:1d:
         73:90:d7:09:f1:40:cb:50:6b:c9:0a:29:31:b6:d2:67:1b:76:
         ac:ba:24:2e:23:01:b8:c5:78:81:e5:f4:d3:6e:05:a0:3c:a3:
         7b:1d:83:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwc8IGzB7qkY8tP8bD4tcVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjgyZDc3YzY2MmU2OGJiODdlODMzMzhiNzZhZDZiZWFk
OTMxODUwHhcNMjYwMjAyMDYwMDQ5WhcNMjYwMjAzMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg2YzMyMTgyMTA2MjIxNmMyYzUxNzcyOWI2Yzc0OWRlY2EyYzhmMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qXQx6Fi7EaGin7NU7dZi8EAPz/F
XRCQkD5gHqLM7bhQ4H0iTiLtcnLHsv9bm2jKtNnPpt9TlvSXWwmbWuYsJcZTHAnC
tVvHmFm6zk6fiCLU2jbMoQH1HpLu1RYU4jQ9OiqyDIx462KNEmxCPy/bUB0FVTxz
XwKAjavlAVlR/6eEJV+ECHN7vkTg7IyJpPrAJB2sHpqaScngMmnYhvozc7fyXrbO
5nDdGuBbCpOsfD7FHsO/Z1/w75DjdEOT0FmVJH4yuSf1d+8KhqsWQN1warsWm72B
S+4PVOnpH47OrSRlHZr4W2FhEHIBygLEN+GRdsqvVQWvLbbKbQFqmzl/MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwyGCEGIhbCxRdym2x0neyiyPB/MB8GA1UdIwQY
MBaAFJkoLXfGYuaLuH6DM4t2rWvq2TGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGIt
MDU2YjljMjMxZjM0LzEvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGItMDU2YjljMjMxZjM0
LzEvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFeXLOSF
dK7SybpTMJyh3ey4UC0NHJRNMEulfDZnyDm9ZUqg0gIzEprXyg1pMj4goj5nAEGR
MKs7owDCz1awfCwhUwGcj51paDkq0yuNtpwlU8w40fKGjsUz1E9tEnUFUTk75ceJ
KRX19jmWMOcHMxs/81GVSMiWvDmgGfsv7+dPjpEyt5U6rUS7BxrUqgabMd4TVP+F
oDiUuxlnk15iNkyYv6henNTXjNaOQIS8ml7l59HuuTiz0TGa/j5nS+bHGy7+2YQI
wvYsSe0MyPZX33awGOv6+KQdc5DXCfFAy1BryQopMbbSZxt2rLokLiMBuMV4geX0
024FoDyjex2DaQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:39 2026 by rpki-client