This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File:                     mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier:          SwVYYue+YmMvikq9Q2uf30T5B5bctCBZWLR0IRmZX1o=
Subject key identifier:   AC:FB:E1:15:CA:B4:84:79:D9:16:F7:5B:54:47:FF:C1:BB:33:F5:E3
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer:       /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial:       019C1BDE503B3B2CAE4AB35FE644ACA7A0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number:          17FE
Signing time:             Mon 02 Feb 2026 01:01:20 +0000
Manifest this update:     Mon 02 Feb 2026 01:01:20 +0000
Manifest next update:     Tue 03 Feb 2026 01:01:20 +0000
Files and hashes:         1: 1-hSBct9w7V_v2aJj7OfoONMoQtc.roa (hash: 8Rt7WyNoryQAHJMpDa6SeX8TdTMr+iEX/3ANZvJf5vE=)
                          2: 5MZBnWU5gNxUVds2GS_ctx40VqM.roa (hash: QG6wEupT4WWEY6cienEgpE1K7AnWp3lnUif0PehHGFE=)
                          3: eCDlzK7WYx2wyI-MhH3sYue8XDg.roa (hash: 98RRinAUWzlpQnMjZqJmjkePB1/6O3taw25GtrD0NQY=)
                          4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: YsaKJSTn6mQgYybE5hf3asRDau/4gxAp17rW9ed9458=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:de:50:3b:3b:2c:ae:4a:b3:5f:e6:44:ac:a7:a0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
        Validity
            Not Before: Feb  2 01:01:20 2026 GMT
            Not After : Feb  3 01:01:20 2026 GMT
        Subject: CN=acfbe115cab48479d916f75b5447ffc1bb33f5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:b5:58:20:71:ba:e1:5d:01:7b:86:10:ef:
                    36:3e:0f:dc:cf:f3:c3:67:ba:69:49:10:73:75:49:
                    f9:c9:66:23:09:eb:fd:44:12:63:a1:88:dd:4c:c6:
                    8e:80:b0:7d:12:d5:d0:fb:2c:c2:6a:40:ae:0e:4f:
                    4c:13:55:ee:ac:cb:3c:2c:7f:ab:e0:13:5d:da:ab:
                    78:94:91:95:0a:81:f0:7a:10:e9:62:49:a6:45:5f:
                    1a:88:a3:43:31:2f:95:e6:74:32:f7:fa:1d:71:a2:
                    e1:bc:85:7b:92:9b:92:98:ca:7c:bf:4a:51:3d:af:
                    1a:48:cc:a8:b8:ca:34:c3:2a:97:e2:4d:84:37:05:
                    25:4d:f6:50:be:bd:05:0a:2d:44:be:77:3a:c6:46:
                    31:7c:75:e0:f1:95:ff:7b:cc:18:d9:fd:50:3b:8c:
                    f6:9f:53:67:fa:7a:6c:97:11:5c:7f:4a:1e:ef:6a:
                    d8:33:5f:73:19:92:0b:04:ac:4a:1c:0d:72:96:8d:
                    4b:7d:5a:d5:35:63:b3:c9:42:58:d1:02:7a:b0:ad:
                    81:f1:21:0c:42:3f:2a:30:7e:4e:0d:60:40:9e:1d:
                    93:aa:35:8d:98:b9:e8:bf:ee:f2:4d:fc:3b:36:40:
                    f4:12:e4:6c:91:5d:9d:1d:15:8b:87:9b:51:fa:5d:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FB:E1:15:CA:B4:84:79:D9:16:F7:5B:54:47:FF:C1:BB:33:F5:E3
            X509v3 Authority Key Identifier:
                keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:f5:e3:46:4c:53:b3:3f:55:ff:82:ae:45:2c:ed:ee:f4:
         22:73:3b:a8:e5:41:95:40:67:d3:f6:fc:2d:63:c8:59:85:01:
         0d:f2:6a:03:c2:4b:a8:fb:c4:f3:13:b7:60:59:a5:b5:82:94:
         8b:b0:c5:ab:1a:5e:53:b4:11:79:26:42:cd:97:6a:b1:8e:cc:
         f9:1d:41:62:12:72:52:81:ad:31:36:3c:78:40:6d:d6:c5:2e:
         df:27:b2:92:07:9f:49:aa:44:f6:74:9e:d5:ac:55:35:ba:ca:
         ae:24:9e:95:59:32:78:f3:6d:27:ad:65:f6:98:1d:35:63:e1:
         68:2e:02:c1:e8:d8:f0:f1:89:7a:fd:45:5d:e3:d6:ec:32:22:
         f8:35:17:07:a4:b7:5c:a6:c1:7d:07:dd:d5:95:0c:43:d4:d9:
         a0:b6:68:e1:94:fa:e7:42:56:87:8a:10:f2:01:fb:05:53:fd:
         c2:88:f4:5c:d9:2c:ff:fd:da:d8:60:12:48:5a:c0:9e:80:97:
         e9:a8:9c:8b:63:6d:e4:48:6d:b0:77:dc:b5:14:58:d7:6e:82:
         2c:f5:15:c5:a2:7a:10:8f:84:ee:a8:19:73:eb:bc:10:a3:f8:
         1f:e5:12:16:4b:19:01:0d:8a:0d:3f:a6:18:d1:86:1e:e8:0b:
         b5:b2:ec:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwb3lA7OyyuSrNf5kSsp6DSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi
Yzk5OTEwHhcNMjYwMjAyMDEwMTIwWhcNMjYwMjAzMDEwMTIwWjAzMTEwLwYDVQQD
EyhhY2ZiZTExNWNhYjQ4NDc5ZDkxNmY3NWI1NDQ3ZmZjMWJiMzNmNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyei1WCBxuuFdAXuGEO82Pg/cz/PD
Z7ppSRBzdUn5yWYjCev9RBJjoYjdTMaOgLB9EtXQ+yzCakCuDk9ME1XurMs8LH+r
4BNd2qt4lJGVCoHwehDpYkmmRV8aiKNDMS+V5nQy9/odcaLhvIV7kpuSmMp8v0pR
Pa8aSMyouMo0wyqX4k2ENwUlTfZQvr0FCi1Evnc6xkYxfHXg8ZX/e8wY2f1QO4z2
n1Nn+npslxFcf0oe72rYM19zGZILBKxKHA1ylo1LfVrVNWOzyUJY0QJ6sK2B8SEM
Qj8qMH5ODWBAnh2TqjWNmLnov+7yTfw7NkD0EuRskV2dHRWLh5tR+l1eKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKz74RXKtIR52Rb3W1RH/8G7M/XjMB8GA1UdIwQY
MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt
ZTNhYjkwODdkNDAzLzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQtZTNhYjkwODdkNDAz
LzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFD140ZM
U7M/Vf+CrkUs7e70InM7qOVBlUBn0/b8LWPIWYUBDfJqA8JLqPvE8xO3YFmltYKU
i7DFqxpeU7QReSZCzZdqsY7M+R1BYhJyUoGtMTY8eEBt1sUu3yeykgefSapE9nSe
1axVNbrKriSelVkyePNtJ61l9pgdNWPhaC4CwejY8PGJev1FXePW7DIi+DUXB6S3
XKbBfQfd1ZUMQ9TZoLZo4ZT650JWh4oQ8gH7BVP9woj0XNks//3a2GASSFrAnoCX
6aici2Nt5EhtsHfctRRY126CLPUVxaJ6EI+E7qgZc+u8EKP4H+USFksZAQ2KDT+m
GNGGHugLtbLsEw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:28:55 2026 by rpki-client