This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File:                     riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier:          V3IdfHSWJOBn5JJ68kkw68b3Ohhbr558P2yYuPtHT6g=
Subject key identifier:   4D:B3:A0:9D:CD:DC:C2:E0:FE:E0:E6:36:94:58:72:89:B1:23:62:E7
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer:       /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial:       019C4358FEEB583172B283015125C703CD68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number:          060E
Signing time:             Mon 09 Feb 2026 17:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:31 +0000
Files and hashes:         1: i8H3aU5bgW18uYHhOOBfWZ7EJh8.roa (hash: R7V99BPh2gSY158u1xq56jjcC0ccD7ZBtCrVoXgm5mE=)
                          2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: UUdFTDhx9GA7dfZnHNIipqOQdlYQtx/yns2nLNZJuSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:fe:eb:58:31:72:b2:83:01:51:25:c7:03:cd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
        Validity
            Not Before: Feb  9 17:00:31 2026 GMT
            Not After : Feb 10 17:00:31 2026 GMT
        Subject: CN=4db3a09dcddcc2e0fee0e63694587289b12362e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:81:60:ad:69:dc:57:22:ee:cc:9e:55:b1:
                    d9:b3:dc:e5:eb:f1:91:51:20:58:e7:21:5e:1f:92:
                    22:e5:ee:58:26:75:af:63:65:0c:0c:a4:c7:f0:dd:
                    f4:4b:11:cd:79:48:e6:2a:86:81:82:93:1e:8c:ea:
                    48:8c:2d:77:76:3b:c4:84:7a:3a:6b:8b:c0:34:39:
                    77:0f:97:52:fd:b3:b7:d7:1e:3e:59:6f:fb:18:70:
                    63:c7:c8:28:22:d7:38:cf:0d:eb:eb:41:6b:cb:b4:
                    b1:50:25:3b:34:2d:0e:97:6a:ad:62:f4:72:50:87:
                    d8:4b:a5:85:38:33:d6:a3:01:0c:48:fe:5d:cc:64:
                    cf:34:de:05:e3:a2:41:a0:78:ca:8f:51:bc:3e:57:
                    6b:17:a6:05:00:07:94:62:9e:a1:e5:80:ec:ec:91:
                    d2:8d:f9:8d:8d:75:ff:a6:8a:bd:30:c0:45:6d:7f:
                    72:d6:95:be:88:2f:dc:b1:45:ab:b5:ab:b1:8b:36:
                    ec:43:4c:f8:ed:50:f0:ee:b0:2e:13:26:53:2e:4b:
                    50:3d:9c:98:a3:4f:02:eb:3e:8c:6d:3d:9d:66:18:
                    28:64:27:9f:d6:e5:5e:fb:75:12:35:31:5c:98:47:
                    64:b2:a8:1a:8b:b4:16:fc:58:3b:51:98:00:06:5c:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B3:A0:9D:CD:DC:C2:E0:FE:E0:E6:36:94:58:72:89:B1:23:62:E7
            X509v3 Authority Key Identifier:
                keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:16:ec:2e:49:c2:90:13:8a:69:eb:89:c5:10:b6:ad:b6:
         6c:8a:27:d5:72:98:86:fb:7d:52:97:a7:8c:5a:51:80:11:f8:
         5c:21:d0:45:c6:b9:97:d9:ac:f1:80:f6:75:81:71:67:82:62:
         05:c3:77:68:50:74:4d:82:bd:44:5e:bf:96:39:ff:a4:a0:69:
         54:03:14:24:ef:a8:9c:88:db:ff:25:ff:06:b3:c4:af:76:86:
         bf:fb:ab:5c:02:4e:68:76:23:e9:30:47:75:dc:06:ac:8b:37:
         6a:26:bc:48:02:eb:ae:c3:40:a4:b4:05:b4:fc:a5:0f:1d:c5:
         8a:58:cb:4a:b1:df:98:0b:46:c9:c3:aa:8b:0e:87:e5:46:9e:
         a3:c4:d7:79:dc:a4:2a:c7:84:41:12:75:06:44:11:a4:d7:89:
         d8:da:73:a5:74:9d:e8:16:a0:f8:03:f8:af:28:82:0a:a8:e6:
         49:e7:a5:ae:2c:4c:3a:a9:90:81:9b:8c:3c:01:01:e4:5b:a0:
         b7:39:64:21:cc:60:36:5b:92:0f:95:1d:30:2e:a7:99:a4:4b:
         9a:20:24:40:97:f7:20:3a:cc:be:0f:11:c8:6c:04:c1:65:64:
         ad:3c:2c:9e:af:08:cb:f3:b6:0f:57:82:7e:a0:3e:e3:1e:a3:
         74:20:c9:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWP7rWDFysoMBUSXHA81oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjU1YWZmZTA4NDMxMWI2ZWEwMmZiZTQ2ODZiNzk0NTM1
OTg2MWMwHhcNMjYwMjA5MTcwMDMxWhcNMjYwMjEwMTcwMDMxWjAzMTEwLwYDVQQD
Eyg0ZGIzYTA5ZGNkZGNjMmUwZmVlMGU2MzY5NDU4NzI4OWIxMjM2MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5OBYK1p3Fci7syeVbHZs9zl6/GR
USBY5yFeH5Ii5e5YJnWvY2UMDKTH8N30SxHNeUjmKoaBgpMejOpIjC13djvEhHo6
a4vANDl3D5dS/bO31x4+WW/7GHBjx8goItc4zw3r60Fry7SxUCU7NC0Ol2qtYvRy
UIfYS6WFODPWowEMSP5dzGTPNN4F46JBoHjKj1G8PldrF6YFAAeUYp6h5YDs7JHS
jfmNjXX/poq9MMBFbX9y1pW+iC/csUWrtauxizbsQ0z47VDw7rAuEyZTLktQPZyY
o08C6z6MbT2dZhgoZCef1uVe+3USNTFcmEdksqgai7QW/Fg7UZgABlwE3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2zoJ3N3MLg/uDmNpRYcomxI2LnMB8GA1UdIwQY
MBaAFK4lWv/ghDEbbqAvvkaGt5RTWYYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jM2ZmZGQtYjM3Ni00ZGNiLTk4NDEt
MTQxNWY4YzcwMzhlLzEvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jM2ZmZGQtYjM3Ni00ZGNiLTk4NDEtMTQxNWY4YzcwMzhl
LzEvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnMW7C5J
wpATimnricUQtq22bIon1XKYhvt9UpenjFpRgBH4XCHQRca5l9ms8YD2dYFxZ4Ji
BcN3aFB0TYK9RF6/ljn/pKBpVAMUJO+onIjb/yX/BrPEr3aGv/urXAJOaHYj6TBH
ddwGrIs3aia8SALrrsNApLQFtPylDx3FiljLSrHfmAtGycOqiw6H5Uaeo8TXedyk
KseEQRJ1BkQRpNeJ2NpzpXSd6Bag+AP4ryiCCqjmSeelrixMOqmQgZuMPAEB5Fug
tzlkIcxgNluSD5UdMC6nmaRLmiAkQJf3IDrMvg8RyGwEwWVkrTwsnq8Iy/O2D1eC
fqA+4x6jdCDJmA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:09 2026 by rpki-client