This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
File:                     CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json)
Hash identifier:          YkyAbbeIqSy+/F246z8zefDyi/tS0TFBMTLHumTojhg=
Subject key identifier:   3C:DF:6A:E2:D0:91:57:71:9B:AB:93:8B:7F:E9:29:D2:0F:1D:79:81
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Certificate issuer:       /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial:       019C359DCE019F7E2129ABC538A761B5E13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
Manifest number:          1818
Signing time:             Sat 07 Feb 2026 01:01:00 +0000
Manifest this update:     Sat 07 Feb 2026 01:01:00 +0000
Manifest next update:     Sun 08 Feb 2026 01:01:00 +0000
Files and hashes:         1: 7rv6k5uVuhGjktrsjUOGcYvC-9k.roa (hash: s1LhNqbDkaJJk+ypgLty0IbjHOS1lXZfumV3rSK/rSs=)
                          2: 8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa (hash: qjo2XQhlUpcTFQYk1pT4XcjJ3LBYMkU4WLGqBPqO4mU=)
                          3: A1Mk8aLvUIYkXCPbeSuDU3Hli4Y.roa (hash: 6HTRUzOZM9L9Wg/uHA0I0KF3U5ylm2c/kJX/463Szd4=)
                          4: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: sCVMeKT3pudHkXJibCYaQx2jqnDZXX3eDMw5sfgQagQ=)
                          5: HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa (hash: HMoC4HbqEHwkb4dO3/C2FUOmIHSy3Jpy2ww8Kfj1GLQ=)
                          6: ICdi3Xclm2LMQx68Q6etVXL0KFc.roa (hash: vjU1GcA1cFFndt3wwSI4VfmzP+VMXEKnzNIVU0wZIsQ=)
                          7: JTLXgLzRLUbBBSRVTWms-KrY030.roa (hash: Zz6+CVIeJzHTwZbXpV9f3Jk2ToknnGjWiBUQP/bGQYw=)
                          8: MPfZa80zx8JD19B0YvKo1B-KyMs.roa (hash: hWxzkpQob8nqa1qn5tGNwr5NCD7Lovv8X8P0foxw+GY=)
                          9: XTs5NFI5GGPmdILyJoe1UZermoY.roa (hash: Y8Lo2YH8sWKxYhv5OE189NboWo9z7HM5q1eUAOyY79s=)
                          10: aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa (hash: FE2nN2ZVDrPMPN1fblBP/Z17brnB7Kwxa7lfUoyA7Ak=)
                          11: lHfae3UMrtkbZl9pwmHCG7QPKCs.roa (hash: uTooVNNQdT2Xp41rPldHjXa4GM+toHNemDQJjp4UhfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:35:9d:ce:01:9f:7e:21:29:ab:c5:38:a7:61:b5:e1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
        Validity
            Not Before: Feb  7 01:01:00 2026 GMT
            Not After : Feb  8 01:01:00 2026 GMT
        Subject: CN=3cdf6ae2d09157719bab938b7fe929d20f1d7981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:c1:bd:57:c6:e7:fb:27:bf:14:5e:b3:2f:
                    4b:b9:3d:29:76:a2:eb:43:14:52:40:e8:b0:bd:f9:
                    91:ca:b6:db:20:ab:d9:2a:aa:61:c5:7b:c3:b5:7b:
                    88:96:42:b6:3e:dc:b0:7b:95:4e:a4:0a:6e:40:31:
                    d3:90:bb:ae:89:d4:ea:de:a2:ac:53:51:21:ab:60:
                    af:5d:bf:b4:e4:b4:cf:e9:0c:80:30:b1:8e:4f:b8:
                    03:29:97:0a:d6:45:2b:16:63:4f:bb:01:ac:f0:fa:
                    d6:4b:b3:4d:05:4f:d4:0e:fe:76:c7:fc:a2:79:f8:
                    7b:94:20:20:e0:19:19:3a:e5:f4:1a:28:14:7a:10:
                    ea:1b:9d:3f:01:21:b5:4b:3e:65:35:71:66:68:18:
                    84:9b:9f:5e:4d:9a:41:44:c1:87:00:8c:45:9c:9a:
                    66:09:d3:de:b9:e2:0e:d8:e2:c7:17:48:5d:e5:b7:
                    20:cb:12:54:7e:61:5e:48:52:05:77:6c:23:c4:a2:
                    30:b0:13:8a:b4:96:4f:6d:aa:92:bb:7d:0b:1c:f1:
                    87:c1:66:f0:2a:21:8c:7c:0e:46:77:d9:23:13:3c:
                    ca:c2:a6:18:0b:ca:b1:27:4a:3c:6f:01:22:f6:05:
                    58:c1:92:17:5c:82:33:21:c9:54:cc:bf:d8:20:15:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DF:6A:E2:D0:91:57:71:9B:AB:93:8B:7F:E9:29:D2:0F:1D:79:81
            X509v3 Authority Key Identifier:
                keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:d4:d6:69:4f:57:1d:0d:c8:70:f5:be:30:6c:37:4a:55:
         fa:76:6e:f3:99:62:d8:04:ab:f8:d9:eb:47:b5:0b:db:78:e5:
         61:cf:46:8f:6d:6b:3b:4b:45:48:4f:a8:24:5d:3d:cc:4f:6b:
         6b:eb:6f:6b:99:37:35:6d:a4:0c:a4:14:22:29:88:b7:21:27:
         16:9f:98:48:1f:af:7e:32:8c:e4:79:d4:ea:7a:8e:6c:80:2c:
         f5:a9:d3:f5:40:1e:31:2c:54:0c:b0:74:3f:6f:62:90:a7:eb:
         70:42:0e:bd:56:4d:b2:ad:a5:2d:64:58:ea:ab:7b:34:a1:bc:
         21:17:7d:27:0e:05:01:37:89:62:f3:8f:8d:bb:77:89:1c:f0:
         e3:fd:15:25:8c:e6:5f:f5:da:c5:dd:d4:01:b2:6a:86:bc:9d:
         88:17:f3:f2:7b:a7:7f:2f:0b:f2:86:fe:f0:fc:e9:c9:23:54:
         25:e1:f7:47:e5:0e:a8:5c:11:1d:66:72:01:81:01:9b:76:68:
         c4:4a:b0:bb:38:02:97:18:c3:db:b7:7a:86:d6:71:62:34:c7:
         a0:a2:37:a1:8f:32:7a:33:ed:b0:0f:06:46:96:d6:c5:51:b0:
         ab:c9:b4:e1:42:17:d3:af:75:6b:5a:f7:62:36:d6:5d:93:ce:
         37:b8:8f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZw1nc4Bn34hKavFOKdhteE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2
MDkwZjEwHhcNMjYwMjA3MDEwMTAwWhcNMjYwMjA4MDEwMTAwWjAzMTEwLwYDVQQD
EygzY2RmNmFlMmQwOTE1NzcxOWJhYjkzOGI3ZmU5MjlkMjBmMWQ3OTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m3BvVfG5/snvxResy9LuT0pdqLr
QxRSQOiwvfmRyrbbIKvZKqphxXvDtXuIlkK2Ptywe5VOpApuQDHTkLuuidTq3qKs
U1Ehq2CvXb+05LTP6QyAMLGOT7gDKZcK1kUrFmNPuwGs8PrWS7NNBU/UDv52x/yi
efh7lCAg4BkZOuX0GigUehDqG50/ASG1Sz5lNXFmaBiEm59eTZpBRMGHAIxFnJpm
CdPeueIO2OLHF0hd5bcgyxJUfmFeSFIFd2wjxKIwsBOKtJZPbaqSu30LHPGHwWbw
KiGMfA5Gd9kjEzzKwqYYC8qxJ0o8bwEi9gVYwZIXXIIzIclUzL/YIBXSUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzfauLQkVdxm6uTi3/pKdIPHXmBMB8GA1UdIwQY
MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt
ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2
LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjDU1mlP
Vx0NyHD1vjBsN0pV+nZu85li2ASr+NnrR7UL23jlYc9Gj21rO0tFSE+oJF09zE9r
a+tva5k3NW2kDKQUIimItyEnFp+YSB+vfjKM5HnU6nqObIAs9anT9UAeMSxUDLB0
P29ikKfrcEIOvVZNsq2lLWRY6qt7NKG8IRd9Jw4FATeJYvOPjbt3iRzw4/0VJYzm
X/Xaxd3UAbJqhrydiBfz8nunfy8L8ob+8PzpySNUJeH3R+UOqFwRHWZyAYEBm3Zo
xEqwuzgClxjD27d6htZxYjTHoKI3oY8yejPtsA8GRpbWxVGwq8m04UIX0691a1r3
YjbWXZPON7iPpg==
-----END CERTIFICATE-----
Generated at Sat Feb 7 05:46:01 2026 by rpki-client