This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File:                     c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier:          g7yUikmUkbI8gzjAD76f4AdliUxNh1wqzGpltg+hPPg=
Subject key identifier:   48:AD:13:FE:0C:C0:86:53:D4:6B:04:68:F4:5C:39:2B:3F:91:99:67
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer:       /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial:       019C4246BBE70BF324FC57A5FD0A9EA3137A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number:          0CB5
Signing time:             Mon 09 Feb 2026 12:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:57 +0000
Files and hashes:         1: JLdoGMzQo3AeuLJQfRuR1G4NdBc.roa (hash: Vl0xLqESsMyxlanXnevOLg/LtIR0/LLBMgnk3RuFu6Q=)
                          2: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: dcKKkbNDF950EhpNdwVoy50BJs3+FKNrFvLn02WH5Jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:bb:e7:0b:f3:24:fc:57:a5:fd:0a:9e:a3:13:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
        Validity
            Not Before: Feb  9 12:00:57 2026 GMT
            Not After : Feb 10 12:00:57 2026 GMT
        Subject: CN=48ad13fe0cc08653d46b0468f45c392b3f919967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:ce:21:19:df:c0:2c:fd:74:9b:ae:aa:6a:
                    68:dc:3d:73:39:3d:31:aa:94:6b:4e:0e:de:9c:2d:
                    ea:a5:91:a3:e7:c5:07:b8:70:d6:07:4f:25:e8:c9:
                    10:8d:d9:5f:62:dc:18:67:27:d1:e7:63:1c:2a:43:
                    5f:3c:54:06:25:5c:0f:99:9a:b6:5e:4f:2b:9c:bb:
                    66:15:6b:71:15:9e:82:83:9f:dd:59:e1:fe:41:65:
                    a2:35:17:4b:57:b4:07:6f:ad:ea:fb:5d:bd:c7:0c:
                    da:d8:91:7c:61:dc:e1:b2:7a:6e:6c:7f:ae:f6:2f:
                    08:f0:86:84:6e:9d:78:81:7e:7b:96:e9:ad:e7:d5:
                    4a:7e:67:ac:fd:c4:1e:ac:68:4b:44:58:f1:5b:2a:
                    9e:1b:a4:56:1f:38:13:42:6d:e2:bc:c7:43:b4:71:
                    a0:91:7d:17:96:35:fa:ca:77:9e:dc:4f:85:97:47:
                    39:d4:c8:fa:49:a1:23:67:b9:2c:4a:f6:01:cb:3c:
                    95:2a:ce:76:85:eb:0b:8e:4f:d7:93:95:29:37:83:
                    03:8f:ff:ab:57:bb:54:19:fc:1a:06:b3:34:3f:3c:
                    05:e5:4c:ed:b9:cd:29:0a:e8:a8:44:93:7f:62:a1:
                    bc:70:41:5b:7f:74:d6:8a:b8:35:9c:a0:7d:3a:60:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AD:13:FE:0C:C0:86:53:D4:6B:04:68:F4:5C:39:2B:3F:91:99:67
            X509v3 Authority Key Identifier:
                keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:d8:74:08:e2:e4:4b:41:1c:25:3e:7b:68:8d:6e:f4:bb:
         d7:47:0e:67:4e:92:c4:ac:04:af:98:7e:d4:90:98:7f:1f:45:
         23:b1:08:c1:a3:d4:d7:54:7c:3f:6d:e9:f0:ae:33:b5:26:18:
         2c:4f:69:d2:e6:4b:18:82:4a:75:aa:2b:e1:a1:1a:47:83:7e:
         c2:d7:60:fa:03:74:97:62:c4:eb:f9:f1:8d:58:99:6e:64:ca:
         ef:7a:f5:3f:c7:8d:52:93:2d:c4:19:ea:aa:16:9c:fa:70:a0:
         6a:2f:42:de:96:40:99:5d:a4:f0:f7:21:60:97:7f:bd:9f:1c:
         5e:f2:61:65:0a:15:34:54:b9:a4:03:e5:18:86:2a:de:94:70:
         b6:1c:0c:53:58:e8:fa:fa:3e:32:67:be:a6:a9:34:6f:2e:4b:
         e3:ef:f6:b3:5d:65:33:30:db:41:28:01:c6:73:64:dc:79:51:
         16:b7:7c:af:2b:88:07:c1:b3:03:4a:ab:c9:ee:2e:37:30:c2:
         07:78:a9:3a:e2:06:8c:ad:7f:e4:f2:f7:6d:44:01:79:e8:2f:
         07:46:fb:95:1a:7c:91:36:8a:b7:49:7e:9a:75:0c:ee:54:69:
         85:d4:45:a5:9f:e0:26:4d:f2:84:1a:b4:bb:cc:b7:57:7a:4b:
         50:ca:7a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRrvnC/Mk/Fel/QqeoxN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODNmYTQzOGE2ZmFlNjJiMzVmOTA5MTg3NmM0NGRlZGI5
YzBkYTMwHhcNMjYwMjA5MTIwMDU3WhcNMjYwMjEwMTIwMDU3WjAzMTEwLwYDVQQD
Eyg0OGFkMTNmZTBjYzA4NjUzZDQ2YjA0NjhmNDVjMzkyYjNmOTE5OTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nbOIRnfwCz9dJuuqmpo3D1zOT0x
qpRrTg7enC3qpZGj58UHuHDWB08l6MkQjdlfYtwYZyfR52McKkNfPFQGJVwPmZq2
Xk8rnLtmFWtxFZ6Cg5/dWeH+QWWiNRdLV7QHb63q+129xwza2JF8YdzhsnpubH+u
9i8I8IaEbp14gX57lumt59VKfmes/cQerGhLRFjxWyqeG6RWHzgTQm3ivMdDtHGg
kX0XljX6ynee3E+Fl0c51Mj6SaEjZ7ksSvYByzyVKs52hesLjk/Xk5UpN4MDj/+r
V7tUGfwaBrM0PzwF5Uztuc0pCuioRJN/YqG8cEFbf3TWirg1nKB9OmB7DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEitE/4MwIZT1GsEaPRcOSs/kZlnMB8GA1UdIwQY
MBaAFHOD+kOKb65is1+QkYdsRN7bnA2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWVkYTgtYjc1Yy00YmJiLThlN2Qt
OGZlYWFmYWM3ZTg5LzEvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YWVkYTgtYjc1Yy00YmJiLThlN2QtOGZlYWFmYWM3ZTg5
LzEvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPnYdAji
5EtBHCU+e2iNbvS710cOZ06SxKwEr5h+1JCYfx9FI7EIwaPU11R8P23p8K4ztSYY
LE9p0uZLGIJKdaor4aEaR4N+wtdg+gN0l2LE6/nxjViZbmTK73r1P8eNUpMtxBnq
qhac+nCgai9C3pZAmV2k8PchYJd/vZ8cXvJhZQoVNFS5pAPlGIYq3pRwthwMU1jo
+vo+Mme+pqk0by5L4+/2s11lMzDbQSgBxnNk3HlRFrd8ryuIB8GzA0qrye4uNzDC
B3ipOuIGjK1/5PL3bUQBeegvB0b7lRp8kTaKt0l+mnUM7lRphdRFpZ/gJk3yhBq0
u8y3V3pLUMp6vQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:37 2026 by rpki-client