This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File:                     T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier:          x++kG3c1D6DsBXFJMpw6PsiiPjOI63ci95ntDAcUfQ4=
Subject key identifier:   27:BE:20:D3:0F:88:EE:35:B3:F6:37:70:EF:3C:B6:4F:35:4E:D5:E7
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer:       /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial:       019C420FC9CB3A28087B337BD2E7B200511A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number:          15DE
Signing time:             Mon 09 Feb 2026 11:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:56 +0000
Files and hashes:         1: NEc8aQqyyaN5WZ6pcMTuIn3QMww.roa (hash: Nlhcphc0V2UOaAJaYdUoZGpKtvarMlBWXD4y4ZO7raA=)
                          2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: 6qMMIsOLaiLSC4rfFd4FRXiV7df3NmBfS1Myu+zo7tU=)
                          3: h1mmEmquZ99o6cDHP1Sk61I_DC0.roa (hash: zGPSsDsxw4pForFMNU0mmMEvIvjun+XXzgIsgxxZKWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:c9:cb:3a:28:08:7b:33:7b:d2:e7:b2:00:51:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
        Validity
            Not Before: Feb  9 11:00:56 2026 GMT
            Not After : Feb 10 11:00:56 2026 GMT
        Subject: CN=27be20d30f88ee35b3f63770ef3cb64f354ed5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:21:11:0a:a1:d8:35:d6:51:09:5c:d9:02:
                    59:20:b0:dc:78:3c:98:36:d5:ab:45:cf:92:e1:e4:
                    5e:0f:0a:4c:d3:87:00:eb:02:1f:0e:e0:5b:0f:b0:
                    ef:1d:6e:9f:9d:9e:5a:a0:87:5d:fc:95:69:d9:53:
                    44:df:bc:4b:89:b4:51:15:e6:b1:08:74:b3:38:70:
                    f6:fe:34:bd:fa:e7:05:61:eb:61:6f:9f:00:0b:0d:
                    16:ea:d3:b9:e0:83:e2:25:76:21:77:36:d4:e5:02:
                    22:4c:ae:16:3a:ab:ee:22:c4:8c:e7:ce:ce:01:88:
                    cb:70:8a:24:f5:74:5c:bc:5a:9d:6e:87:95:43:67:
                    2c:d1:cd:29:83:40:91:2c:5c:70:34:8d:2c:97:7f:
                    e7:36:7c:fa:c9:0d:f6:2f:7d:68:a5:0a:f0:d8:f2:
                    8d:b7:5b:af:59:31:03:ec:98:0b:44:ac:ec:e1:0e:
                    11:33:e0:5f:b2:af:a8:11:d8:25:46:0e:52:5b:be:
                    77:d0:bb:ad:b3:10:2f:9c:27:20:84:52:f9:34:5a:
                    8e:40:69:b7:d6:00:9f:ca:ea:6c:32:ba:56:74:0a:
                    89:0d:7b:b9:b2:a0:57:b4:87:5e:82:00:10:a7:78:
                    75:ee:ed:81:8b:a9:63:b5:e4:7b:cf:43:1e:6b:1f:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BE:20:D3:0F:88:EE:35:B3:F6:37:70:EF:3C:B6:4F:35:4E:D5:E7
            X509v3 Authority Key Identifier:
                keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:76:3d:43:e2:20:41:af:a6:26:08:a2:5a:ff:6c:42:80:aa:
         82:12:68:c0:3d:66:46:58:93:54:4b:8b:c2:8b:12:47:4c:ca:
         ab:8d:3f:2e:99:62:07:79:b7:a3:4f:fc:ed:31:d8:57:c4:62:
         77:88:ba:1a:ed:4c:f5:c2:4c:fc:3c:57:c0:50:80:3e:bf:5b:
         bf:86:a1:15:28:f7:26:7c:5f:b1:4a:0f:2d:eb:6b:4c:2e:ce:
         e5:b3:e6:e8:6e:a0:6b:dc:92:15:42:6d:93:64:bb:98:d4:7b:
         20:96:63:97:e1:b6:bb:c5:75:99:05:24:fa:e9:01:82:1f:27:
         ac:2f:a6:bd:43:72:b0:9f:33:4e:5a:99:af:d2:9f:68:72:83:
         94:7f:b5:58:f6:6a:27:28:25:90:99:4a:25:a7:76:a5:77:4d:
         c8:35:d6:0c:d7:8d:f8:f1:b5:33:a8:92:26:62:cf:83:af:af:
         58:79:66:ec:ce:ba:e7:cd:2a:93:22:e0:d8:4a:d1:25:c5:55:
         c3:b9:74:7e:18:2a:64:b3:4c:85:fb:3b:ca:03:8c:3d:36:4f:
         5f:7b:fd:6e:a4:84:81:41:19:2c:dd:6b:7b:6d:b0:0f:77:64:
         f0:ad:6a:0e:5f:5e:7a:0a:6a:20:ab:c3:db:c4:e9:47:00:09:
         24:d2:70:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD8nLOigIezN70ueyAFEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmN2Q4ODUzOTNiMzJiNWVlZTNhMGJmNDMzOGUwZmFhZWYz
Yzc1M2MwHhcNMjYwMjA5MTEwMDU2WhcNMjYwMjEwMTEwMDU2WjAzMTEwLwYDVQQD
EygyN2JlMjBkMzBmODhlZTM1YjNmNjM3NzBlZjNjYjY0ZjM1NGVkNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp4hEQqh2DXWUQlc2QJZILDceDyY
NtWrRc+S4eReDwpM04cA6wIfDuBbD7DvHW6fnZ5aoIdd/JVp2VNE37xLibRRFeax
CHSzOHD2/jS9+ucFYethb58ACw0W6tO54IPiJXYhdzbU5QIiTK4WOqvuIsSM587O
AYjLcIok9XRcvFqdboeVQ2cs0c0pg0CRLFxwNI0sl3/nNnz6yQ32L31opQrw2PKN
t1uvWTED7JgLRKzs4Q4RM+Bfsq+oEdglRg5SW7530LutsxAvnCcghFL5NFqOQGm3
1gCfyupsMrpWdAqJDXu5sqBXtIdeggAQp3h17u2Bi6ljteR7z0Meax+15wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCe+INMPiO41s/Y3cO88tk81TtXnMB8GA1UdIwQY
MBaAFE99iFOTsyte7joL9DOOD6rvPHU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEt
YjE4ZGFjMmQyNTliLzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mMmEzN2MtYTEyOS00YzBiLTllZDEtYjE4ZGFjMmQyNTli
LzEvVDMySVU1T3pLMTd1T2d2ME00NFBxdTg4ZFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHY9Q+Ig
Qa+mJgiiWv9sQoCqghJowD1mRliTVEuLwosSR0zKq40/LpliB3m3o0/87THYV8Ri
d4i6Gu1M9cJM/DxXwFCAPr9bv4ahFSj3JnxfsUoPLetrTC7O5bPm6G6ga9ySFUJt
k2S7mNR7IJZjl+G2u8V1mQUk+ukBgh8nrC+mvUNysJ8zTlqZr9KfaHKDlH+1WPZq
JyglkJlKJad2pXdNyDXWDNeN+PG1M6iSJmLPg6+vWHlm7M66580qkyLg2ErRJcVV
w7l0fhgqZLNMhfs7ygOMPTZPX3v9bqSEgUEZLN1re22wD3dk8K1qDl9eegpqIKvD
28TpRwAJJNJwTw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:01 2026 by rpki-client