This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          2XCYAJgKYLQk2jwGD2UJBhGdtbv3SYHIfyeOGC7Dgiw=
Subject key identifier:   E7:55:E9:60:6E:81:B2:69:DA:01:1C:E8:69:1B:37:0B:C1:40:0F:15
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       019C1E716166397DB5F4ECF6858C01513076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          1803
Signing time:             Mon 02 Feb 2026 13:01:12 +0000
Manifest this update:     Mon 02 Feb 2026 13:01:12 +0000
Manifest next update:     Tue 03 Feb 2026 13:01:12 +0000
Files and hashes:         1: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: yk6p33S681FegSVo6A6Bh0sllrECqSwTWtFEq3d5uMQ=)
                          2: AdZDptogFPfZkzR5C2w7ewUy5fM.roa (hash: eY6m5Pfp09t+29CrdJcppfTJAkMyMsubBMzfDZuh9Pg=)
                          3: Mhow_zubVnvAcwQbBcXt37SkVbo.roa (hash: 6hC28liE87/PAEstEfDeR9v3wr68y7o5n3aUzo7i9jo=)
                          4: lyKU2cRz1rwVy67EiMdpJEVU-uw.roa (hash: MyEdGCpP2vsnLyoMOlKjt9pc63D/h3XJBUfmhnb515g=)
                          5: qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa (hash: nyRJgnJF5E43/9qDPBbeFHXa4kSfjJ0ENxyk0mTysYQ=)
                          6: uBEokvW7aAgryoMWD6Cv0elcFmo.roa (hash: H/a3hMppgWLont3KdCAnRpO2zISV9Otu71OhQuyZUU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:71:61:66:39:7d:b5:f4:ec:f6:85:8c:01:51:30:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Feb  2 13:01:12 2026 GMT
            Not After : Feb  3 13:01:12 2026 GMT
        Subject: CN=e755e9606e81b269da011ce8691b370bc1400f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:11:d4:89:37:46:5c:58:a8:46:46:c3:52:
                    b1:32:7f:c0:e8:97:fa:df:a1:41:88:0d:00:57:8f:
                    6c:0c:c1:19:96:fc:45:cb:81:da:ac:ee:7d:d2:28:
                    9b:01:b8:e1:41:14:7c:13:50:ea:3d:14:9f:10:5f:
                    4b:64:2a:ee:06:ff:83:be:a6:af:34:8a:b7:2b:72:
                    e4:ac:af:e2:b5:44:0e:5d:e1:ed:80:25:c8:0b:98:
                    d6:e9:8a:06:56:5f:df:f7:12:6f:51:a4:45:bf:35:
                    87:a2:36:45:ac:fe:8a:77:35:09:25:db:d4:b7:05:
                    0c:46:5a:9e:11:28:e4:3a:78:f8:e8:f5:3b:e9:a1:
                    f2:fd:0a:c3:37:9f:b8:c2:ee:c1:50:ee:dd:24:1a:
                    3c:7b:d6:e1:4c:c2:dc:f8:02:d2:be:d9:82:f2:ab:
                    68:db:3e:06:fa:4e:cb:a2:38:c9:ae:2f:45:6e:94:
                    92:a4:ea:ce:ee:a7:a3:8c:bd:02:d0:4c:c0:23:aa:
                    a6:8f:bc:f1:14:a5:3a:94:71:1a:7c:b7:a1:63:97:
                    15:38:f6:bd:1a:29:26:ea:9a:6a:bc:0d:f7:45:b0:
                    37:4f:c8:2d:52:00:d1:78:f2:48:a7:2d:25:a0:8d:
                    dd:db:a4:94:5c:44:38:bf:ce:f7:8e:de:36:48:f9:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:55:E9:60:6E:81:B2:69:DA:01:1C:E8:69:1B:37:0B:C1:40:0F:15
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:81:50:8f:1c:ee:03:eb:df:49:e3:17:d0:01:ed:f5:7b:
         b1:f8:81:8d:f6:43:ef:6e:21:38:91:c9:75:b3:cc:91:2b:e6:
         f3:98:cb:ca:45:f8:16:32:77:e2:54:9c:b4:f4:ed:79:57:d3:
         69:ed:6e:dc:2f:7f:2b:4a:23:51:42:51:e7:5d:42:db:a2:f1:
         60:0d:c3:fc:28:1f:2e:1b:b9:87:3c:77:1d:3e:f0:26:c5:5f:
         e9:17:95:5f:42:57:c0:7b:bd:df:ae:b7:b6:22:29:4b:eb:37:
         eb:df:27:aa:d2:92:84:64:48:cb:4a:27:3f:50:52:ef:2d:c7:
         67:8e:f3:eb:1a:8f:bc:5f:dc:79:15:12:01:84:56:d9:a3:7a:
         2f:12:06:34:9f:d4:e1:44:9e:97:dd:fc:cd:2c:44:b0:d7:e6:
         85:ad:d1:7f:5b:5d:c4:35:a3:b2:38:b5:f9:1a:36:8b:b5:5c:
         89:fa:e6:d5:d5:d7:e0:aa:ed:24:a0:71:63:28:b1:56:db:dc:
         da:05:0b:3a:a2:38:55:77:3b:a9:04:da:62:8c:21:92:d8:39:
         e9:1d:30:ec:c3:0e:a5:16:03:5b:61:cd:4e:ac:62:19:e3:46:
         d6:61:61:4f:0c:ed:8e:71:42:2f:b0:ab:53:33:a6:fc:65:d3:
         9a:92:03:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwecWFmOX219Oz2hYwBUTB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWEwMzliODg2YjIyNjU3OGJkYjZhNDI3ODFiZjU5MDQ0
YmIxMzgwHhcNMjYwMjAyMTMwMTEyWhcNMjYwMjAzMTMwMTEyWjAzMTEwLwYDVQQD
EyhlNzU1ZTk2MDZlODFiMjY5ZGEwMTFjZTg2OTFiMzcwYmMxNDAwZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaMR1Ik3RlxYqEZGw1KxMn/A6Jf6
36FBiA0AV49sDMEZlvxFy4HarO590iibAbjhQRR8E1DqPRSfEF9LZCruBv+Dvqav
NIq3K3LkrK/itUQOXeHtgCXIC5jW6YoGVl/f9xJvUaRFvzWHojZFrP6KdzUJJdvU
twUMRlqeESjkOnj46PU76aHy/QrDN5+4wu7BUO7dJBo8e9bhTMLc+ALSvtmC8qto
2z4G+k7LojjJri9FbpSSpOrO7qejjL0C0EzAI6qmj7zxFKU6lHEafLehY5cVOPa9
Gikm6ppqvA33RbA3T8gtUgDRePJIpy0loI3d26SUXEQ4v873jt42SPl/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdV6WBugbJp2gEc6GkbNwvBQA8VMB8GA1UdIwQY
MBaAFPeqA5uIayJleL22pCeBv1kES7E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWIt
NmY2MjFkNzM2YWZmLzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWItNmY2MjFkNzM2YWZm
LzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnG2BUI8c
7gPr30njF9AB7fV7sfiBjfZD724hOJHJdbPMkSvm85jLykX4FjJ34lSctPTteVfT
ae1u3C9/K0ojUUJR511C26LxYA3D/CgfLhu5hzx3HT7wJsVf6ReVX0JXwHu93663
tiIpS+s3698nqtKShGRIy0onP1BS7y3HZ47z6xqPvF/ceRUSAYRW2aN6LxIGNJ/U
4USel938zSxEsNfmha3Rf1tdxDWjsji1+Ro2i7Vcifrm1dXX4KrtJKBxYyixVtvc
2gULOqI4VXc7qQTaYowhktg56R0w7MMOpRYDW2HNTqxiGeNG1mFhTwztjnFCL7Cr
UzOm/GXTmpIDhA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 15:52:33 2026 by rpki-client