This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          FVYSK6+uua7azFCxdGm5x7YVDS31n/Fs8aTVO8JmMZM=
Subject key identifier:   46:FE:66:79:6E:F0:96:10:6A:F5:C7:B1:5A:F8:B6:18:FD:8E:14:16
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       019C247321F243455AC4B9F0EF9AB9E97EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          1826
Signing time:             Tue 03 Feb 2026 17:00:50 +0000
Manifest this update:     Tue 03 Feb 2026 17:00:50 +0000
Manifest next update:     Wed 04 Feb 2026 17:00:50 +0000
Files and hashes:         1: 1-w6BP38irc8ikwIFmua621R4fsA.roa (hash: 04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=)
                          2: 1kWLQqjzDqKCBYLisG3Mmfema5k.roa (hash: hVqG2tcrXz55RsvzkU7NiBB4offN7X8Rc/q0zicjVfU=)
                          3: BpdGbagGv2_-Y3TyelIg9iJMEKo.roa (hash: l3T/M5x9/uGHTqM8Mx88SLVI1m/1mGk3r20lwOBjOe8=)
                          4: VlwwTSoRiE5X0lO1YkSOmqRJH_8.roa (hash: tELQUfXy5jxakYPvXfDeQLNFwxD9VNjFTkL9svhczLc=)
                          5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: KSvb0VpFjQp8GIe8oA6A5kjhAP43Y3UqwAgU3jaL7jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 15:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:73:21:f2:43:45:5a:c4:b9:f0:ef:9a:b9:e9:7e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Feb  3 17:00:50 2026 GMT
            Not After : Feb  4 17:00:50 2026 GMT
        Subject: CN=46fe66796ef096106af5c7b15af8b618fd8e1416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:91:da:2a:df:e7:2f:5e:0f:72:e7:29:07:
                    29:b7:67:f9:3c:6c:8e:28:84:60:3d:1a:9a:59:f4:
                    87:05:2f:15:f9:72:87:57:87:47:aa:2a:a4:e5:2b:
                    b6:98:26:e2:98:39:fc:d2:28:b5:a4:11:45:cc:70:
                    d8:5a:dd:8d:72:11:33:c7:85:b6:b3:c6:73:70:67:
                    29:6d:4e:fb:cb:ac:bb:22:49:a6:a2:87:11:10:58:
                    6e:b6:d6:4a:e7:c6:3d:f3:0f:39:ae:b0:c4:f0:ce:
                    68:0d:77:21:3e:ba:22:db:9d:fa:1f:75:c1:6e:ac:
                    27:22:ed:c4:0a:18:f9:69:0b:ce:4a:3c:62:9d:24:
                    76:c5:7f:10:56:92:99:9b:1e:f4:f1:8a:be:2a:a0:
                    20:9b:0f:fb:e9:e4:03:68:02:40:31:dd:1a:e5:99:
                    fc:e4:57:f6:51:64:ed:ff:3d:0a:a1:aa:ff:49:53:
                    41:89:0e:c9:b9:a4:2d:b9:e4:bf:ef:bb:c7:67:dc:
                    9e:ec:d3:f6:79:87:b8:6c:39:8a:05:f8:8d:bf:ed:
                    73:a4:82:4c:29:a9:2f:3c:82:ec:c1:85:ab:74:c4:
                    b6:a6:b0:62:15:a0:2b:20:33:12:9d:8c:7e:b7:82:
                    0f:53:d2:ea:dc:27:d7:d5:62:17:f7:e5:b5:8f:66:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FE:66:79:6E:F0:96:10:6A:F5:C7:B1:5A:F8:B6:18:FD:8E:14:16
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b6:2f:8f:26:5e:6d:7d:47:42:da:eb:33:e2:1d:78:26:99:
         95:0d:57:01:b3:f2:ba:c8:97:dc:f3:e1:37:c0:4a:27:bf:ad:
         3e:9f:bd:45:2d:65:ed:80:19:0a:0c:77:ff:38:f3:0c:73:00:
         cc:7c:17:b8:ed:dc:cb:92:e0:c3:93:3a:f0:17:d9:09:0b:f9:
         84:e6:ed:fc:6c:30:b5:b1:78:af:b1:89:5b:01:64:b1:a0:d9:
         c4:fc:db:67:56:a7:89:7f:97:3d:2f:a0:9b:b8:44:8c:74:92:
         0b:22:59:1f:9e:3b:c6:04:78:12:43:9a:6c:6a:96:5c:20:a0:
         5c:6d:44:da:1b:5c:06:0e:a5:f4:4f:3c:95:60:df:c2:a4:83:
         6a:56:03:a7:20:d5:85:69:05:c7:b7:55:cc:63:da:85:6d:fd:
         b5:6e:63:cd:91:3e:1c:b2:fa:45:06:83:12:fa:db:a6:d1:05:
         a4:6b:c6:c0:52:47:c8:ad:3f:64:d8:bf:d1:c4:1e:c2:8a:c7:
         5b:04:29:75:8c:6e:cd:18:79:bf:bd:57:c3:d1:9c:b2:d0:64:
         d0:42:65:67:47:61:a8:fc:4f:1a:ac:ab:10:6c:05:d8:58:5c:
         b1:fe:d2:51:d1:fe:a8:3f:16:81:39:a6:4f:34:db:0a:00:a3:
         be:58:d0:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwkcyHyQ0VaxLnw75q56X7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk
NGM5ZTcwHhcNMjYwMjAzMTcwMDUwWhcNMjYwMjA0MTcwMDUwWjAzMTEwLwYDVQQD
Eyg0NmZlNjY3OTZlZjA5NjEwNmFmNWM3YjE1YWY4YjYxOGZkOGUxNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuquR2irf5y9eD3LnKQcpt2f5PGyO
KIRgPRqaWfSHBS8V+XKHV4dHqiqk5Su2mCbimDn80ii1pBFFzHDYWt2NchEzx4W2
s8ZzcGcpbU77y6y7IkmmoocREFhuttZK58Y98w85rrDE8M5oDXchProi2536H3XB
bqwnIu3EChj5aQvOSjxinSR2xX8QVpKZmx708Yq+KqAgmw/76eQDaAJAMd0a5Zn8
5Ff2UWTt/z0Koar/SVNBiQ7JuaQtueS/77vHZ9ye7NP2eYe4bDmKBfiNv+1zpIJM
KakvPILswYWrdMS2prBiFaArIDMSnYx+t4IPU9Lq3CfX1WIX9+W1j2axxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb+Znlu8JYQavXHsVr4thj9jhQWMB8GA1UdIwQY
MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt
OTk4Mjc4ZjRmYmIyLzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy
LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrYvjyZe
bX1HQtrrM+IdeCaZlQ1XAbPyusiX3PPhN8BKJ7+tPp+9RS1l7YAZCgx3/zjzDHMA
zHwXuO3cy5Lgw5M68BfZCQv5hObt/GwwtbF4r7GJWwFksaDZxPzbZ1aniX+XPS+g
m7hEjHSSCyJZH547xgR4EkOabGqWXCCgXG1E2htcBg6l9E88lWDfwqSDalYDpyDV
hWkFx7dVzGPahW39tW5jzZE+HLL6RQaDEvrbptEFpGvGwFJHyK0/ZNi/0cQeworH
WwQpdYxuzRh5v71Xw9GcstBk0EJlZ0dhqPxPGqyrEGwF2Fhcsf7SUdH+qD8WgTmm
TzTbCgCjvljQYA==
-----END CERTIFICATE-----
Generated at Tue Feb 3 22:57:10 2026 by rpki-client