This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File:                     jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier:          e5lef01hEtV/1o++FeihVp8Hce0o/+QUJCkBtj7NHGA=
Subject key identifier:   97:B8:1F:05:87:EF:AE:9C:CE:E8:C4:22:84:E7:20:F0:D5:B0:6C:E6
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer:       /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial:       019C1C14AB90D3920BE58976556BE86ECD40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number:          0583
Signing time:             Mon 02 Feb 2026 02:00:42 +0000
Manifest this update:     Mon 02 Feb 2026 02:00:42 +0000
Manifest next update:     Tue 03 Feb 2026 02:00:42 +0000
Files and hashes:         1: Ev84dzr99BkEprLlsKv-9iCyhPY.asa (hash: A4Hylllyzq6B6OAjJOwRb/t7tAR+6RCdPmT8bW5GCjg=)
                          2: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
                          3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: gkTWgyg/mdcXdMhAndV1C9s4N/I9HV6JZrezxtFN6fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:14:ab:90:d3:92:0b:e5:89:76:55:6b:e8:6e:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
        Validity
            Not Before: Feb  2 02:00:42 2026 GMT
            Not After : Feb  3 02:00:42 2026 GMT
        Subject: CN=97b81f0587efae9ccee8c42284e720f0d5b06ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:fb:27:1b:4d:e4:eb:d4:4a:fb:45:4d:2d:
                    94:51:39:76:13:03:ec:21:57:bd:86:6c:01:5b:d3:
                    35:8f:2d:47:eb:e5:ca:bd:d4:af:c5:bb:ba:4d:70:
                    7d:47:bf:ad:dd:66:f8:91:9b:03:18:ab:c9:0a:9f:
                    3d:1f:54:d5:5d:bb:e2:f8:e2:01:b3:1e:0c:d2:7f:
                    5e:d0:f7:65:e5:af:cd:20:8c:12:90:60:9a:aa:ee:
                    05:aa:7e:85:f2:40:1b:a0:3c:a6:99:98:13:4c:76:
                    de:7f:4b:47:22:21:ba:1a:db:b0:f4:d6:2e:7c:b4:
                    0e:9d:3f:ed:88:1d:76:09:e1:c9:a7:7d:b9:34:df:
                    4b:6d:99:0f:9c:71:0f:9e:60:0d:b8:bf:79:c3:f8:
                    de:97:17:4c:95:ec:8f:2b:95:b0:50:02:af:75:64:
                    50:3a:95:82:88:97:56:3b:4c:41:2b:bb:39:b4:8c:
                    91:b5:2f:90:0d:45:df:54:6a:35:d3:52:ce:03:85:
                    0f:ae:02:4e:32:81:98:69:22:4c:cb:a0:da:49:38:
                    9f:11:f5:01:d0:66:9e:0f:90:7f:a3:ad:e4:2b:01:
                    76:21:2a:f4:dd:34:d6:26:0a:60:02:27:88:fb:37:
                    b0:aa:52:02:57:00:1f:54:46:06:68:1c:77:b1:75:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B8:1F:05:87:EF:AE:9C:CE:E8:C4:22:84:E7:20:F0:D5:B0:6C:E6
            X509v3 Authority Key Identifier:
                keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:7b:28:f7:6a:f5:24:10:94:14:6c:18:1f:2f:06:05:03:f4:
         c4:8e:92:d5:1b:4f:11:7c:1f:42:7a:ef:d3:8b:52:b8:bf:56:
         17:12:9d:f1:19:23:e8:70:3f:8c:4c:ad:fb:1d:e9:ab:19:da:
         0c:bc:06:ef:b4:2b:bc:1c:b7:67:d6:23:f3:62:27:2f:95:ef:
         a8:4f:cf:e1:7d:68:44:74:74:d7:b1:93:10:23:c5:9e:dd:c5:
         11:b7:ad:5b:71:fd:19:b1:7d:dd:c5:66:e6:96:b4:54:8b:f1:
         31:0e:4e:f3:6b:0c:f3:2f:eb:58:fa:96:79:35:36:48:1c:00:
         a1:5e:4a:13:59:b5:34:02:05:8d:ef:fa:43:c0:63:a6:03:34:
         6d:fd:50:4f:a4:e4:f5:c5:85:62:49:e5:29:80:7c:64:e6:9b:
         66:c8:53:9a:0b:81:92:8b:45:33:26:c3:2c:ec:e4:29:04:96:
         c9:12:2c:de:46:23:eb:80:d0:ca:0c:d7:d0:c5:05:f6:da:9a:
         52:fb:bd:0f:d3:aa:69:09:3b:90:c8:20:4b:b0:78:ab:48:f8:
         ac:35:5a:c5:e9:4d:d0:f6:be:fc:ec:63:26:2d:3c:79:14:c6:
         69:48:cf:86:37:f8:28:9e:ba:d9:4c:f0:b5:5b:03:72:71:d9:
         29:85:c3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcFKuQ05IL5Yl2VWvobs1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZmRlZmVjZWQ1Y2VlOGYxYTZjOTM3OThlNWEzNGI2MjFm
NmRjMGIwHhcNMjYwMjAyMDIwMDQyWhcNMjYwMjAzMDIwMDQyWjAzMTEwLwYDVQQD
Eyg5N2I4MWYwNTg3ZWZhZTljY2VlOGM0MjI4NGU3MjBmMGQ1YjA2Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr77JxtN5OvUSvtFTS2UUTl2EwPs
IVe9hmwBW9M1jy1H6+XKvdSvxbu6TXB9R7+t3Wb4kZsDGKvJCp89H1TVXbvi+OIB
sx4M0n9e0Pdl5a/NIIwSkGCaqu4Fqn6F8kAboDymmZgTTHbef0tHIiG6Gtuw9NYu
fLQOnT/tiB12CeHJp325NN9LbZkPnHEPnmANuL95w/jelxdMleyPK5WwUAKvdWRQ
OpWCiJdWO0xBK7s5tIyRtS+QDUXfVGo101LOA4UPrgJOMoGYaSJMy6DaSTifEfUB
0GaeD5B/o63kKwF2ISr03TTWJgpgAieI+zewqlICVwAfVEYGaBx3sXUw8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe4HwWH766czujEIoTnIPDVsGzmMB8GA1UdIwQY
MBaAFIz97+ztXO6PGmyTeY5aNLYh9twLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS85ZmI3YWItZjNjYi00N2ZjLTlhMTQt
MDZjZGViMzhmN2I2LzEvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS85ZmI3YWItZjNjYi00N2ZjLTlhMTQtMDZjZGViMzhmN2I2
LzEvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHso92r1
JBCUFGwYHy8GBQP0xI6S1RtPEXwfQnrv04tSuL9WFxKd8Rkj6HA/jEyt+x3pqxna
DLwG77QrvBy3Z9Yj82InL5XvqE/P4X1oRHR017GTECPFnt3FEbetW3H9GbF93cVm
5pa0VIvxMQ5O82sM8y/rWPqWeTU2SBwAoV5KE1m1NAIFje/6Q8BjpgM0bf1QT6Tk
9cWFYknlKYB8ZOabZshTmguBkotFMybDLOzkKQSWyRIs3kYj64DQygzX0MUF9tqa
Uvu9D9OqaQk7kMggS7B4q0j4rDVaxelN0Pa+/OxjJi08eRTGaUjPhjf4KJ662Uzw
tVsDcnHZKYXDZQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:57 2026 by rpki-client