This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
File:                     T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json)
Hash identifier:          HDlTSq5CqdGJPR19NCsXudY+LhcufEfmvFt7tOx8YGY=
Subject key identifier:   6B:36:9E:DE:35:97:10:AE:49:93:1F:F3:C4:87:B3:83:0F:34:76:18
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Certificate issuer:       /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial:       019C1C836771BE13E947D1FE0A6365D40DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
Manifest number:          1C
Signing time:             Mon 02 Feb 2026 04:01:39 +0000
Manifest this update:     Mon 02 Feb 2026 04:01:39 +0000
Manifest next update:     Tue 03 Feb 2026 04:01:39 +0000
Files and hashes:         1: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=)
                          2: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: bVG4aY5GYITjeSmwj1WgIw9n3c1qus0T4xpe4AJ+a4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 04:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:83:67:71:be:13:e9:47:d1:fe:0a:63:65:d4:0d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
        Validity
            Not Before: Feb  2 04:01:39 2026 GMT
            Not After : Feb  3 04:01:39 2026 GMT
        Subject: CN=6b369ede359710ae49931ff3c487b3830f347618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:a0:93:0b:9c:1d:16:4f:69:cc:c9:ec:40:
                    15:82:d9:99:17:9d:02:7d:d3:5f:d2:84:1f:50:ab:
                    05:61:89:98:88:07:82:36:6c:fd:1f:0c:f6:c9:86:
                    ef:a6:8c:9b:0e:45:40:b1:82:77:ba:0a:8b:dd:84:
                    0e:97:3d:1d:0c:67:c6:95:4c:a2:67:35:6e:37:06:
                    eb:b7:3e:4a:cf:36:43:40:08:c0:95:df:39:3c:c8:
                    91:ce:27:0e:6e:80:a0:21:5b:ac:35:d0:3a:12:8a:
                    03:8b:10:45:0a:2d:30:2f:21:4f:2e:83:fa:b9:4c:
                    c9:68:75:72:24:bd:21:3e:ed:81:e2:9d:2b:74:58:
                    50:de:a3:66:86:ef:c3:2e:9d:df:7a:d4:a6:dd:d6:
                    77:3b:81:aa:d7:3a:b3:ab:41:ae:fe:82:f6:21:85:
                    52:e1:a4:ad:59:10:f6:c0:f4:c3:23:72:43:08:09:
                    65:b0:dd:55:ab:0e:90:61:e3:d3:59:43:d4:55:33:
                    3c:e4:67:78:94:c0:29:9a:30:00:c5:01:8a:93:55:
                    80:5e:ba:23:81:fb:cd:e1:e4:aa:29:64:7f:96:65:
                    ec:85:7e:0f:bd:5a:85:e7:49:fb:c3:26:b1:61:9f:
                    f0:1b:dc:09:a0:42:b4:af:5d:c6:61:08:46:b6:d2:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:36:9E:DE:35:97:10:AE:49:93:1F:F3:C4:87:B3:83:0F:34:76:18
            X509v3 Authority Key Identifier:
                keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:76:50:ae:bd:00:fc:30:96:ea:b3:26:14:85:b8:14:ee:c5:
         c5:57:14:7f:ec:cf:35:eb:0a:e4:f6:5d:40:18:bf:b0:2a:40:
         f5:56:74:05:44:02:2f:df:26:3b:5a:8e:fc:4d:29:e3:a4:98:
         44:4c:5d:3a:99:f2:3a:e8:bf:94:49:92:e3:41:67:db:f9:58:
         1c:90:d1:0b:d7:81:68:96:50:dc:cf:15:9d:7c:a1:90:85:f2:
         e2:0e:16:96:d1:b3:7d:54:a0:27:83:36:24:42:09:c6:41:06:
         11:1b:08:b6:d3:8d:70:ce:e1:82:25:b8:fa:e6:eb:17:c3:cd:
         8c:b1:72:78:e6:21:d6:fd:6e:74:4b:b8:36:e8:5d:a0:81:1b:
         9d:c1:ba:08:f5:6a:2f:06:87:df:6a:17:8a:f1:71:8a:89:09:
         80:d3:bc:f3:f3:f4:09:62:71:cc:55:70:04:24:f3:18:69:74:
         43:c3:f1:c8:3f:e1:1c:b5:24:ef:d3:c2:a1:3e:8c:45:09:72:
         fd:1f:c9:4c:1f:f7:4c:db:9b:4a:ca:06:25:00:fd:2e:ea:39:
         56:f7:f5:c5:a4:c2:92:8a:b7:22:68:68:66:80:e4:1f:e2:30:
         67:01:29:aa:36:c9:b4:84:ec:e1:0b:26:09:6a:2d:19:82:21:
         8a:21:7b:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcg2dxvhPpR9H+CmNl1A3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0
Y2FmZWIwHhcNMjYwMjAyMDQwMTM5WhcNMjYwMjAzMDQwMTM5WjAzMTEwLwYDVQQD
Eyg2YjM2OWVkZTM1OTcxMGFlNDk5MzFmZjNjNDg3YjM4MzBmMzQ3NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBOgkwucHRZPaczJ7EAVgtmZF50C
fdNf0oQfUKsFYYmYiAeCNmz9Hwz2yYbvpoybDkVAsYJ3ugqL3YQOlz0dDGfGlUyi
ZzVuNwbrtz5KzzZDQAjAld85PMiRzicOboCgIVusNdA6EooDixBFCi0wLyFPLoP6
uUzJaHVyJL0hPu2B4p0rdFhQ3qNmhu/DLp3fetSm3dZ3O4Gq1zqzq0Gu/oL2IYVS
4aStWRD2wPTDI3JDCAllsN1Vqw6QYePTWUPUVTM85Gd4lMApmjAAxQGKk1WAXroj
gfvN4eSqKWR/lmXshX4PvVqF50n7wyaxYZ/wG9wJoEK0r13GYQhGttL2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs2nt41lxCuSZMf88SHs4MPNHYYMB8GA1UdIwQY
MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt
Zjk0MWNjMzlhNzFlLzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl
LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3ZQrr0A
/DCW6rMmFIW4FO7FxVcUf+zPNesK5PZdQBi/sCpA9VZ0BUQCL98mO1qO/E0p46SY
RExdOpnyOui/lEmS40Fn2/lYHJDRC9eBaJZQ3M8VnXyhkIXy4g4WltGzfVSgJ4M2
JEIJxkEGERsIttONcM7hgiW4+ubrF8PNjLFyeOYh1v1udEu4NuhdoIEbncG6CPVq
LwaH32oXivFxiokJgNO88/P0CWJxzFVwBCTzGGl0Q8PxyD/hHLUk79PCoT6MRQly
/R/JTB/3TNubSsoGJQD9Luo5Vvf1xaTCkoq3ImhoZoDkH+IwZwEpqjbJtITs4Qsm
CWotGYIhiiF7jA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:40:34 2026 by rpki-client