This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File:                     xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier:          MIdzjPTKyJJfQu+W614nRT7wUHH5RLnDt+uVxh4z45s=
Subject key identifier:   F4:C0:31:D7:EB:01:09:B7:4A:8B:96:C1:F3:C6:12:F0:C5:EE:FF:9A
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer:       /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial:       019C254F1D9BCC69DAEA2400E580BC769205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number:          13BF
Signing time:             Tue 03 Feb 2026 21:01:07 +0000
Manifest this update:     Tue 03 Feb 2026 21:01:07 +0000
Manifest next update:     Wed 04 Feb 2026 21:01:07 +0000
Files and hashes:         1: IXA5NTfyPmX-NcYymUYHoZqq10U.roa (hash: aV0Y8kWeg0x50q3D9prRP0W1mgyRSrG19k/0B7ej/F0=)
                          2: ueAFixVmYFJiD-Pjjc9ASXBfU1A.roa (hash: H5ZlbNWM33UZohORBQr6iFvv7D9rUkB4F6O6kRx61Cw=)
                          3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: UGycc8cLSdO+NhZBv5LGBg4n8JfrBFTKHJ15s5molys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:25:4f:1d:9b:cc:69:da:ea:24:00:e5:80:bc:76:92:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
        Validity
            Not Before: Feb  3 21:01:07 2026 GMT
            Not After : Feb  4 21:01:07 2026 GMT
        Subject: CN=f4c031d7eb0109b74a8b96c1f3c612f0c5eeff9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:bd:18:d2:fc:7f:a9:50:e4:5a:06:cc:46:
                    e1:cb:63:c5:cb:e3:63:96:44:a5:f6:34:c9:74:05:
                    ca:dc:3d:4d:fa:52:53:6f:83:8e:09:2f:5d:8d:50:
                    aa:9c:dd:ba:2d:cf:5f:bc:dc:0c:27:21:84:85:f0:
                    46:81:2e:50:32:3f:5d:12:ec:3e:02:59:49:6c:26:
                    c4:80:85:77:b2:b1:d8:20:1f:b4:d0:d9:8a:43:23:
                    fa:14:ed:fe:e9:a7:4d:85:9f:67:ec:1c:99:fd:2c:
                    e7:c0:67:f5:56:22:20:c7:0f:1b:6c:32:fe:8c:02:
                    e3:25:d1:25:63:6f:6f:b9:8b:ec:0b:63:b5:5d:18:
                    d2:fc:93:25:2d:52:64:2d:21:91:66:5e:9f:0d:54:
                    cd:05:2b:8b:a8:9d:ca:c7:9a:79:05:0b:bd:1b:c4:
                    49:f3:20:cb:09:51:7b:c5:a8:4e:05:d1:78:04:3b:
                    da:cf:7a:18:c1:75:e9:91:98:de:9a:c3:38:5c:9c:
                    67:3f:28:87:2e:ab:43:85:41:6b:db:0b:9d:16:f9:
                    dc:c2:66:1b:60:9c:39:87:92:a1:7b:7f:f2:0a:0b:
                    8e:2a:4f:20:df:8c:55:e2:ad:3e:67:0b:c7:10:63:
                    4a:ca:e1:a6:76:28:6e:69:fd:4b:e3:9e:0c:9f:f3:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C0:31:D7:EB:01:09:B7:4A:8B:96:C1:F3:C6:12:F0:C5:EE:FF:9A
            X509v3 Authority Key Identifier:
                keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:f4:16:a2:b2:43:3c:db:77:3e:cc:a4:b2:00:e4:cf:bf:
         b5:fc:69:f4:0f:69:61:23:7b:0c:80:2a:e6:5d:ca:4b:18:33:
         e3:0c:8c:bd:bb:3e:26:1d:eb:c3:0c:f9:98:22:6f:74:ac:e0:
         cd:a6:bd:31:ec:0a:b1:ec:5c:d3:34:a2:34:0f:6c:8f:6a:78:
         66:d7:c2:f3:78:e0:0d:12:fa:f7:22:69:a4:86:a7:bc:a1:7c:
         23:c8:b0:5e:98:a2:c5:5f:42:50:0d:72:8f:9d:70:63:98:6e:
         b3:4e:4e:3c:5d:7b:f9:6e:85:ef:e4:2c:34:91:77:df:b3:81:
         61:73:ea:ed:21:72:3e:92:c3:20:5d:d9:68:e6:1a:98:a3:ab:
         8e:44:8d:27:4b:7c:e9:0f:78:5c:2c:ce:27:5b:51:cf:43:fb:
         c5:56:95:d4:01:b5:c4:71:37:5b:55:42:8d:c9:b1:33:39:ec:
         3c:2c:9c:ff:25:e7:97:c4:67:12:02:47:c3:67:44:36:dc:bd:
         1f:12:08:20:8a:09:e8:01:dd:1d:7a:b2:9f:6b:10:7d:e4:57:
         3b:28:9a:c9:d4:93:0f:39:2d:d3:92:a4:3d:f7:91:cc:eb:8d:
         e4:08:b8:ff:72:dd:44:4d:ee:ec:94:78:01:ab:01:2c:70:bb:
         fe:0f:a8:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwlTx2bzGna6iQA5YC8dpIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTZiY2NiZGM5ZjJlNGJhZGMwYTA1N2VhMDhmN2M3NDgx
ODhiMWYwHhcNMjYwMjAzMjEwMTA3WhcNMjYwMjA0MjEwMTA3WjAzMTEwLwYDVQQD
EyhmNGMwMzFkN2ViMDEwOWI3NGE4Yjk2YzFmM2M2MTJmMGM1ZWVmZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua69GNL8f6lQ5FoGzEbhy2PFy+Nj
lkSl9jTJdAXK3D1N+lJTb4OOCS9djVCqnN26Lc9fvNwMJyGEhfBGgS5QMj9dEuw+
AllJbCbEgIV3srHYIB+00NmKQyP6FO3+6adNhZ9n7ByZ/SznwGf1ViIgxw8bbDL+
jALjJdElY29vuYvsC2O1XRjS/JMlLVJkLSGRZl6fDVTNBSuLqJ3Kx5p5BQu9G8RJ
8yDLCVF7xahOBdF4BDvaz3oYwXXpkZjemsM4XJxnPyiHLqtDhUFr2wudFvncwmYb
YJw5h5Khe3/yCguOKk8g34xV4q0+ZwvHEGNKyuGmdihuaf1L454Mn/NTTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTAMdfrAQm3SouWwfPGEvDF7v+aMB8GA1UdIwQY
MBaAFMVWvMvcny5LrcCgV+oI98dIGIsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYt
NDJlYTU1MTRlNzIyLzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYtNDJlYTU1MTRlNzIy
LzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKt/0FqKy
Qzzbdz7MpLIA5M+/tfxp9A9pYSN7DIAq5l3KSxgz4wyMvbs+Jh3rwwz5mCJvdKzg
zaa9MewKsexc0zSiNA9sj2p4ZtfC83jgDRL69yJppIanvKF8I8iwXpiixV9CUA1y
j51wY5hus05OPF17+W6F7+QsNJF337OBYXPq7SFyPpLDIF3ZaOYamKOrjkSNJ0t8
6Q94XCzOJ1tRz0P7xVaV1AG1xHE3W1VCjcmxMznsPCyc/yXnl8RnEgJHw2dENty9
HxIIIIoJ6AHdHXqyn2sQfeRXOyiaydSTDzkt05KkPfeRzOuN5Ai4/3LdRE3u7JR4
AasBLHC7/g+ofQ==
-----END CERTIFICATE-----
Generated at Wed Feb 4 03:49:49 2026 by rpki-client