This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File:                     rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier:          i4ihrwXodcbXcLfsdgU4SG+v4EYhSjmu1AnJcI6OhLA=
Subject key identifier:   34:76:6F:B4:06:2B:94:4C:48:EE:09:1A:D5:82:8F:57:45:3E:4D:8C
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer:       /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial:       019C28F5A6AA27C5A14783513E4E15037A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number:          094E
Signing time:             Wed 04 Feb 2026 14:01:53 +0000
Manifest this update:     Wed 04 Feb 2026 14:01:53 +0000
Manifest next update:     Thu 05 Feb 2026 14:01:53 +0000
Files and hashes:         1: 0r_UE69prseODZzygBvCxia-3X0.roa (hash: gkr4fLf/h/n+t25YUpdj0dN1J2aUCJ0sU9K4sKPOSZA=)
                          2: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (hash: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU=)
                          3: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (hash: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw=)
                          4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: BBK+EYbwyNxN14t40r7f8EPZf2olBruh+Z6p13hpajo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 14:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:f5:a6:aa:27:c5:a1:47:83:51:3e:4e:15:03:7a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
        Validity
            Not Before: Feb  4 14:01:53 2026 GMT
            Not After : Feb  5 14:01:53 2026 GMT
        Subject: CN=34766fb4062b944c48ee091ad5828f57453e4d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:36:42:79:b6:6a:eb:d4:e4:ae:ea:ee:b3:
                    ae:03:33:96:f0:86:e8:a6:b8:2d:23:7b:4b:7b:73:
                    ce:8f:98:19:6d:9b:e9:e3:14:36:e2:01:2a:91:61:
                    25:83:ce:f0:71:e8:3b:5a:49:f9:c6:99:05:0b:16:
                    55:21:d6:d2:94:b4:92:00:47:94:53:e5:43:8b:8c:
                    81:30:e9:2e:82:01:5d:69:39:58:1b:3d:27:82:f0:
                    d6:d6:66:6a:af:af:f7:d3:44:d9:b2:7a:9a:19:e8:
                    88:61:04:16:3a:51:f8:68:8e:a3:06:d9:5d:13:d0:
                    a7:2f:7c:14:7a:be:0f:91:d6:6c:04:9f:ea:02:27:
                    2a:26:c2:9a:41:9f:3a:62:db:e6:20:54:de:00:fe:
                    de:67:23:6d:12:44:ea:34:f9:b6:65:a0:6c:15:12:
                    f2:72:0d:52:19:e8:2c:e0:1b:99:a6:8b:e6:12:b3:
                    1b:87:e2:f2:b4:46:65:cc:a6:84:f5:9a:bd:bc:c0:
                    2e:a9:a3:96:ec:86:d5:58:67:19:fe:e7:6b:4b:66:
                    70:22:87:53:7d:c9:57:b7:4a:94:59:8d:b7:fd:f7:
                    41:74:97:d9:7d:0c:b9:66:b8:c1:03:ea:c1:e0:2f:
                    a7:44:eb:57:80:b9:1d:ea:70:b2:a9:c5:71:e7:7a:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:6F:B4:06:2B:94:4C:48:EE:09:1A:D5:82:8F:57:45:3E:4D:8C
            X509v3 Authority Key Identifier:
                keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:66:ad:9e:9a:14:35:1a:fb:43:b4:08:34:83:27:ab:80:
         84:59:07:ba:48:e4:88:1d:91:df:6e:3f:75:fa:27:ab:ba:74:
         a2:89:2c:4b:09:18:a2:81:85:a0:bf:13:e6:87:6e:20:b6:51:
         59:24:50:b2:0d:0b:8f:84:24:ab:ab:1c:98:55:62:a4:05:48:
         ce:12:8c:ac:54:26:43:8e:4e:cd:dc:2e:e0:ed:a4:67:9f:06:
         66:82:03:37:98:7a:7d:2c:22:ef:ce:bd:62:40:22:fa:39:ab:
         6c:3b:f7:32:16:c3:58:31:f6:06:36:52:42:1d:4a:6d:eb:bc:
         6f:0d:d5:94:69:f6:64:86:f8:f4:d7:37:f0:b6:8b:ee:be:49:
         a2:63:ac:52:4f:01:06:28:04:d3:e9:56:66:43:41:8b:17:11:
         4c:56:b1:c8:62:c1:ec:5b:96:32:0c:92:cf:f8:85:b6:0a:59:
         8c:29:4a:a2:17:cb:89:88:34:2c:98:0d:fd:1d:a5:40:6d:00:
         b3:e3:76:cd:9b:a2:ef:b8:e5:c3:e1:58:ab:6d:bf:6b:36:9b:
         ec:a7:77:94:10:6d:d8:5b:c6:af:0b:08:2e:21:cc:8d:92:56:
         97:8a:bf:99:cf:66:bd:22:9c:eb:95:da:42:13:ed:e0:6e:0e:
         ba:f7:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 21:28:47 2026 by rpki-client