This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File:                     aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier:          ygw1GILmmyzbys37ZfKTKHRA/5wvurhRYPal6czytWo=
Subject key identifier:   27:CC:DB:8C:9A:A8:5E:FA:B8:FF:D5:80:70:0A:5D:37:3A:B1:B2:7F
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer:       /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial:       019C1D5EE498A0BE1BCA2E59996A0A233B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number:          03CD
Signing time:             Mon 02 Feb 2026 08:01:24 +0000
Manifest this update:     Mon 02 Feb 2026 08:01:24 +0000
Manifest next update:     Tue 03 Feb 2026 08:01:24 +0000
Files and hashes:         1: PK2HVjD3GmdLB06ij0s7w3X0wCo.roa (hash: 1RKfa7PhpjR33QDEm1HWDfBtwC3Ch5Bq/qvovHpolJ0=)
                          2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: ks6UGcmxpUuZBge5Y0BImSvWGyYZOIDCfPCDGA3Se9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:5e:e4:98:a0:be:1b:ca:2e:59:99:6a:0a:23:3b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
        Validity
            Not Before: Feb  2 08:01:24 2026 GMT
            Not After : Feb  3 08:01:24 2026 GMT
        Subject: CN=27ccdb8c9aa85efab8ffd580700a5d373ab1b27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:cd:ba:cf:74:7a:b3:6e:3a:fa:a4:ad:e4:
                    4d:e1:45:73:02:a0:a9:73:61:40:45:17:34:17:58:
                    56:95:f9:0a:43:ba:4f:53:27:47:78:07:9d:58:36:
                    e5:8b:e8:f0:c4:6f:27:fe:07:90:01:fa:03:db:62:
                    45:bf:9d:c8:12:69:6a:b1:1b:66:31:ce:06:3e:80:
                    9e:d9:dd:a6:51:cb:c1:7e:73:be:18:0c:39:9c:d1:
                    47:53:ff:3e:a0:0d:fc:24:f5:53:c8:42:38:92:98:
                    6c:01:4e:3b:ba:71:1c:6a:a0:c5:f3:6d:9d:a4:3a:
                    23:e8:f9:05:22:71:53:d0:3a:5e:9f:ab:2b:ed:49:
                    6d:eb:96:e2:27:84:e0:ad:a4:1e:a1:08:7d:05:eb:
                    19:52:b2:3e:cd:34:48:9a:73:8d:36:c1:b6:48:ca:
                    f1:85:85:7b:28:93:74:97:a7:09:61:3c:e4:33:f7:
                    8c:aa:35:e2:6c:bb:24:2d:30:2d:2d:ad:c2:80:40:
                    3a:65:5d:7e:73:20:64:5e:27:10:92:94:31:c5:af:
                    55:9c:71:b0:a4:b4:cf:d8:54:a4:ea:0b:f1:d6:d8:
                    76:b7:37:ec:bc:09:c1:2a:42:2a:38:1b:06:50:9f:
                    b4:0a:7f:8c:70:21:6d:07:97:d2:4c:46:36:d4:8f:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CC:DB:8C:9A:A8:5E:FA:B8:FF:D5:80:70:0A:5D:37:3A:B1:B2:7F
            X509v3 Authority Key Identifier:
                keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6b:84:cf:fd:97:b2:b6:b4:71:69:98:8d:eb:9e:87:4d:33:
         41:1d:6b:ca:13:d9:a9:e3:e0:0d:99:19:44:6b:d0:08:bb:f6:
         f9:47:7b:1c:97:6d:f0:a4:8f:ca:5f:7e:98:42:6c:1d:10:f4:
         75:f9:a3:3a:03:21:1e:dc:10:42:1e:43:d2:90:51:94:d8:5b:
         11:b8:df:a8:84:06:13:d1:51:af:5f:96:08:ca:be:fe:36:13:
         58:bd:3f:02:93:36:14:43:c3:e1:f5:b9:b8:2a:fd:c3:57:36:
         81:db:ea:ea:36:40:3d:6c:fd:11:a8:61:f2:26:35:8b:22:6c:
         f3:de:bf:e2:f5:b3:b6:61:a2:3f:a3:e1:9c:d8:75:94:17:da:
         43:a8:e1:95:24:f7:3e:b7:b2:a3:43:18:84:1b:68:6c:68:3e:
         1f:31:ba:20:e6:21:7a:05:6e:e0:c1:a7:c9:12:7e:63:40:57:
         88:eb:31:cd:53:be:10:69:5d:2d:60:8c:92:ae:cc:06:6f:cb:
         c5:e5:b1:29:9c:cb:0a:cd:ad:81:4e:ed:6d:ef:2f:f7:9d:4a:
         1d:ae:b5:66:f9:8c:0a:5a:18:a3:ae:9a:86:af:d2:62:3b:4c:
         bb:0e:c4:44:3d:07:09:ec:95:af:87:0b:e3:a5:e3:88:e1:a0:
         ae:2a:65:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdXuSYoL4byi5ZmWoKIzsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTlkYjgxYjQ5YWJhMTJiMTgxMGNiM2EyOTllZWU0NjMy
ZGQ3MjAwHhcNMjYwMjAyMDgwMTI0WhcNMjYwMjAzMDgwMTI0WjAzMTEwLwYDVQQD
EygyN2NjZGI4YzlhYTg1ZWZhYjhmZmQ1ODA3MDBhNWQzNzNhYjFiMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTHNus90erNuOvqkreRN4UVzAqCp
c2FARRc0F1hWlfkKQ7pPUydHeAedWDbli+jwxG8n/geQAfoD22JFv53IEmlqsRtm
Mc4GPoCe2d2mUcvBfnO+GAw5nNFHU/8+oA38JPVTyEI4kphsAU47unEcaqDF822d
pDoj6PkFInFT0Dpen6sr7Ult65biJ4TgraQeoQh9BesZUrI+zTRImnONNsG2SMrx
hYV7KJN0l6cJYTzkM/eMqjXibLskLTAtLa3CgEA6ZV1+cyBkXicQkpQxxa9VnHGw
pLTP2FSk6gvx1th2tzfsvAnBKkIqOBsGUJ+0Cn+McCFtB5fSTEY21I/igwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfM24yaqF76uP/VgHAKXTc6sbJ/MB8GA1UdIwQY
MBaAFGgZ24G0mroSsYEMs6KZ7uRjLdcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUt
OTAzNWIwODM2MjQzLzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUtOTAzNWIwODM2MjQz
LzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmuEz/2X
sra0cWmYjeueh00zQR1ryhPZqePgDZkZRGvQCLv2+Ud7HJdt8KSPyl9+mEJsHRD0
dfmjOgMhHtwQQh5D0pBRlNhbEbjfqIQGE9FRr1+WCMq+/jYTWL0/ApM2FEPD4fW5
uCr9w1c2gdvq6jZAPWz9Eahh8iY1iyJs896/4vWztmGiP6PhnNh1lBfaQ6jhlST3
Preyo0MYhBtobGg+HzG6IOYhegVu4MGnyRJ+Y0BXiOsxzVO+EGldLWCMkq7MBm/L
xeWxKZzLCs2tgU7tbe8v951KHa61ZvmMCloYo66ahq/SYjtMuw7ERD0HCeyVr4cL
46XjiOGgriplQw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:57:25 2026 by rpki-client