This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File:                     jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier:          QTynCQqISAZd2fzOzAsqev1qpQtPRko2wJoO288PNeM=
Subject key identifier:   00:45:B9:AA:D8:60:45:14:71:20:60:90:6B:06:18:9C:42:CE:0A:72
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer:       /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial:       019C1DCCC346AAC2589906674A208E93211F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number:          05AF
Signing time:             Mon 02 Feb 2026 10:01:24 +0000
Manifest this update:     Mon 02 Feb 2026 10:01:24 +0000
Manifest next update:     Tue 03 Feb 2026 10:01:24 +0000
Files and hashes:         1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
                          2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: V/EB+EPtzdzahGR0eUVfcv0Jw64MKh95Mi3W8uKcxHM=)
                          3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:cc:c3:46:aa:c2:58:99:06:67:4a:20:8e:93:21:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
        Validity
            Not Before: Feb  2 10:01:24 2026 GMT
            Not After : Feb  3 10:01:24 2026 GMT
        Subject: CN=0045b9aad8604514712060906b06189c42ce0a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:2c:a1:71:39:2f:68:fa:36:45:94:52:ea:
                    25:3b:74:02:de:dd:15:2c:84:a8:02:ab:5b:48:3d:
                    ab:3b:50:94:9a:13:96:7e:fd:17:66:45:10:ec:97:
                    29:de:42:31:8b:d2:7d:3e:a2:5e:b3:1d:45:6d:03:
                    f6:61:8c:6e:45:c3:19:4d:d7:33:1d:47:13:bd:3d:
                    ef:d8:70:22:bf:6d:23:5d:70:1e:53:0d:92:90:83:
                    21:28:de:43:3e:a2:75:02:44:08:9e:e2:b2:75:d0:
                    3e:9c:8a:87:55:f6:cf:f9:58:7a:79:c5:33:c1:c6:
                    cc:e3:d0:f5:9b:b7:cb:75:dd:df:9b:8a:0b:b6:fa:
                    2b:ee:99:41:80:ae:a9:d6:f4:b8:8b:02:8b:5d:40:
                    ad:19:84:85:40:b4:52:34:6d:90:74:d7:b6:a3:22:
                    cc:61:a0:26:83:86:21:5c:57:60:d0:81:b0:c5:71:
                    45:35:0c:2b:d0:9f:43:ab:09:1d:fd:8b:e1:97:02:
                    04:25:58:9c:89:da:7c:65:f7:fc:e1:29:67:ac:c9:
                    97:d0:e8:d8:12:b8:79:82:4f:79:7d:a7:d3:63:32:
                    87:7c:74:c9:49:9c:ea:08:f9:ec:d2:c0:c9:9f:37:
                    e7:88:82:16:ea:35:b6:0a:a8:c8:44:bc:6c:93:31:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:45:B9:AA:D8:60:45:14:71:20:60:90:6B:06:18:9C:42:CE:0A:72
            X509v3 Authority Key Identifier:
                keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:66:95:af:af:6e:3f:9a:ef:57:3f:7e:cc:d0:32:f2:71:
         a3:ad:5d:4c:40:ce:a9:48:df:41:57:a1:a2:06:3c:8d:e6:66:
         2e:7e:56:cb:6d:18:30:bb:e3:10:9c:51:47:95:09:c5:a0:40:
         98:da:80:f1:a0:a7:44:30:91:e3:bc:99:19:79:75:5d:16:8a:
         59:ae:4f:bd:7c:01:97:46:78:1b:9b:d8:f5:29:5d:dc:7f:3e:
         d4:db:d9:b2:d6:a1:b2:bb:7b:a7:6b:69:90:a1:57:3c:53:3b:
         36:ea:ba:e7:5d:0a:2a:ac:6e:41:ab:7d:c8:a1:01:f8:f1:58:
         c9:b6:9f:d5:db:20:be:05:7f:8e:e7:2c:c4:c2:a7:44:86:8e:
         b6:fb:09:7b:ef:2c:f6:fc:22:be:b9:e6:94:07:c6:ac:a3:ae:
         38:32:7f:e4:34:bf:f5:08:8e:2e:50:ac:c4:f6:b9:ff:6a:f2:
         13:dc:41:70:40:9c:9b:b5:df:84:f8:57:ea:c7:7b:23:4f:b8:
         56:02:7b:df:c0:b6:b9:a6:70:89:eb:6f:a8:cd:27:47:e9:11:
         ff:97:6e:6d:12:5f:11:1f:5e:b3:88:87:08:1e:e4:e8:02:b5:
         02:f5:3e:81:59:19:e8:99:94:fb:ab:ca:d7:80:a0:a6:72:00:
         c6:96:48:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdzMNGqsJYmQZnSiCOkyEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm
MTcwOWEwHhcNMjYwMjAyMTAwMTI0WhcNMjYwMjAzMTAwMTI0WjAzMTEwLwYDVQQD
EygwMDQ1YjlhYWQ4NjA0NTE0NzEyMDYwOTA2YjA2MTg5YzQyY2UwYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolosoXE5L2j6NkWUUuolO3QC3t0V
LISoAqtbSD2rO1CUmhOWfv0XZkUQ7Jcp3kIxi9J9PqJesx1FbQP2YYxuRcMZTdcz
HUcTvT3v2HAiv20jXXAeUw2SkIMhKN5DPqJ1AkQInuKyddA+nIqHVfbP+Vh6ecUz
wcbM49D1m7fLdd3fm4oLtvor7plBgK6p1vS4iwKLXUCtGYSFQLRSNG2QdNe2oyLM
YaAmg4YhXFdg0IGwxXFFNQwr0J9Dqwkd/YvhlwIEJVicidp8Zff84SlnrMmX0OjY
Erh5gk95fafTYzKHfHTJSZzqCPns0sDJnzfniIIW6jW2CqjIRLxskzEq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABFuarYYEUUcSBgkGsGGJxCzgpyMB8GA1UdIwQY
MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct
YTc5MmE4OGJhZjEwLzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw
LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9dmla+v
bj+a71c/fszQMvJxo61dTEDOqUjfQVehogY8jeZmLn5Wy20YMLvjEJxRR5UJxaBA
mNqA8aCnRDCR47yZGXl1XRaKWa5PvXwBl0Z4G5vY9Sld3H8+1NvZstahsrt7p2tp
kKFXPFM7Nuq6510KKqxuQat9yKEB+PFYybaf1dsgvgV/jucsxMKnRIaOtvsJe+8s
9vwivrnmlAfGrKOuODJ/5DS/9QiOLlCsxPa5/2ryE9xBcECcm7XfhPhX6sd7I0+4
VgJ738C2uaZwietvqM0nR+kR/5dubRJfER9es4iHCB7k6AK1AvU+gVkZ6JmU+6vK
14CgpnIAxpZIZQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 15:59:18 2026 by rpki-client