This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
File:                     ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft (raw, json)
Hash identifier:          0JktmxOrrjdRT9zdzzvZlMwgDJX8kUrAifw2AaH/HCk=
Subject key identifier:   57:A6:E2:93:F9:40:C5:A5:C2:B4:40:A4:79:92:C3:6B:57:64:49:CB
Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
Certificate issuer:       /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Certificate serial:       019C1BA6ECEB8C2F3144F8C423F81E360B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
Manifest number:          5D
Signing time:             Mon 02 Feb 2026 00:00:50 +0000
Manifest this update:     Mon 02 Feb 2026 00:00:50 +0000
Manifest next update:     Tue 03 Feb 2026 00:00:50 +0000
Files and hashes:         1: ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl (hash: Jt7siOZoM+07lihGjmtqxcARTXv3i5CkU2PMCE9+qiY=)
                          2: UpKRjChH7E6XgVm5AEhCKw9xUVI.asa (hash: itl4/7Ulh3ulcNHslb/7i9V8CSJ2eDVPnXoQqeOhRyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a6:ec:eb:8c:2f:31:44:f8:c4:23:f8:1e:36:0b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
        Validity
            Not Before: Feb  2 00:00:50 2026 GMT
            Not After : Feb  3 00:00:50 2026 GMT
        Subject: CN=57a6e293f940c5a5c2b440a47992c36b576449cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:bd:f4:62:6b:a6:5b:70:1c:d5:93:bb:0c:13:
                    a0:ce:c8:bc:bf:d0:6e:d3:ed:bc:65:2a:72:d2:82:
                    1c:c1:a0:a6:b8:df:1f:5c:93:1d:d2:51:3d:93:99:
                    98:73:7e:0f:67:38:b0:82:1a:85:df:b5:05:cb:df:
                    ae:75:a3:f8:d2:99:9b:c3:46:3c:5e:6f:cd:15:83:
                    8f:a7:c3:53:74:af:4b:72:e2:09:41:d5:1f:0b:86:
                    7b:54:47:8e:bf:ce:35:71:36:5c:1e:15:e8:b5:66:
                    ee:a1:c5:eb:cd:8e:82:76:f9:5e:77:57:5f:49:f0:
                    52:16:02:9e:0c:8c:bb:e1:02:72:44:01:19:5d:01:
                    cb:b0:25:9d:09:2b:1f:79:e7:a5:5f:c5:e1:15:27:
                    a4:c9:ef:25:7f:61:da:8d:ba:cb:fa:7e:2d:80:04:
                    ce:e3:b0:f6:a8:7c:53:45:b7:3b:a3:e1:30:e8:4e:
                    29:6d:7d:f3:ac:93:dd:4f:e6:af:94:e4:c0:43:95:
                    9c:b1:fd:17:4c:92:6f:af:d6:13:47:af:4d:6d:e4:
                    d5:6d:bd:f2:5f:99:01:bb:24:03:4b:26:34:19:0c:
                    29:b7:74:31:59:d6:3d:68:63:a5:2f:df:a6:44:1f:
                    3e:5b:dc:ce:f7:bd:e8:2c:7a:65:2b:06:b7:f5:d1:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:E2:93:F9:40:C5:A5:C2:B4:40:A4:79:92:C3:6B:57:64:49:CB
            X509v3 Authority Key Identifier:
                keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:9e:41:88:c3:77:a1:66:5a:55:2f:d8:a5:6b:cb:10:0f:
         b7:f3:45:dd:b7:51:04:43:67:be:dc:f8:a1:f6:3f:6f:3f:25:
         f7:f0:93:19:2f:9f:1c:e0:fc:bf:88:9a:0a:4d:c3:b5:8d:06:
         52:72:96:32:ae:98:5d:fa:bf:6f:80:b4:fe:bb:3f:a1:d0:77:
         05:18:7e:1e:07:d8:15:c9:d5:8b:0c:46:c0:8f:5b:e7:ea:c1:
         0e:dd:6d:9c:fe:f3:f4:2b:71:d6:03:20:8c:b6:57:c3:dd:95:
         7c:13:7e:c8:a4:d0:91:77:cc:e4:ee:62:73:46:3e:48:88:97:
         c7:72:94:3d:62:23:53:00:55:78:32:6d:09:2f:59:cb:b7:62:
         3c:03:b1:1c:78:23:e6:d6:73:e4:b2:30:fe:c0:2e:78:0a:01:
         e2:7c:4a:ae:f4:97:af:fb:21:2e:2a:86:dc:7c:d3:e4:33:50:
         39:11:2a:34:30:d6:b6:33:fe:e2:99:94:71:f4:39:7f:2a:c0:
         e7:36:a5:39:88:db:9c:26:26:1f:ea:07:f6:84:9e:0a:96:ea:
         7e:2f:dd:4f:c3:7e:0c:b0:59:38:3c:3b:17:81:13:89:93:87:
         cb:fe:e0:96:52:fb:f5:2e:fc:17:ea:21:26:6d:9a:80:7d:4d:
         72:14:11:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwbpuzrjC8xRPjEI/geNgtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2JiYzgxNzk2MTUxOWNhNWEzMThlODRlNzVhZDliYjNk
Y2M3ZTYwHhcNMjYwMjAyMDAwMDUwWhcNMjYwMjAzMDAwMDUwWjAzMTEwLwYDVQQD
Eyg1N2E2ZTI5M2Y5NDBjNWE1YzJiNDQwYTQ3OTkyYzM2YjU3NjQ0OWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9r30YmumW3Ac1ZO7DBOgzsi8v9Bu
0+28ZSpy0oIcwaCmuN8fXJMd0lE9k5mYc34PZziwghqF37UFy9+udaP40pmbw0Y8
Xm/NFYOPp8NTdK9LcuIJQdUfC4Z7VEeOv841cTZcHhXotWbuocXrzY6Cdvled1df
SfBSFgKeDIy74QJyRAEZXQHLsCWdCSsfeeelX8XhFSekye8lf2HajbrL+n4tgATO
47D2qHxTRbc7o+Ew6E4pbX3zrJPdT+avlOTAQ5Wcsf0XTJJvr9YTR69NbeTVbb3y
X5kBuyQDSyY0GQwpt3QxWdY9aGOlL9+mRB8+W9zO973oLHplKwa39dGjuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFem4pP5QMWlwrRApHmSw2tXZEnLMB8GA1UdIwQY
MBaAFAA7vIF5YVGcpaMY6E51rZuz3MfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTkt
MTQyMWQ3YzU0ZmE1LzEvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTktMTQyMWQ3YzU0ZmE1
LzEvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOa2eQYjD
d6FmWlUv2KVryxAPt/NF3bdRBENnvtz4ofY/bz8l9/CTGS+fHOD8v4iaCk3DtY0G
UnKWMq6YXfq/b4C0/rs/odB3BRh+HgfYFcnViwxGwI9b5+rBDt1tnP7z9Ctx1gMg
jLZXw92VfBN+yKTQkXfM5O5ic0Y+SIiXx3KUPWIjUwBVeDJtCS9Zy7diPAOxHHgj
5tZz5LIw/sAueAoB4nxKrvSXr/shLiqG3HzT5DNQOREqNDDWtjP+4pmUcfQ5fyrA
5zalOYjbnCYmH+oH9oSeCpbqfi/dT8N+DLBZODw7F4ETiZOHy/7gllL79S78F+oh
Jm2agH1NchQR0w==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:09:26 2026 by rpki-client