This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File:                     soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier:          2XcYrjDqYvFFz0//s23VodEASqdb4oPdPQhgwZf2atE=
Subject key identifier:   B8:03:E3:4A:95:EB:A7:EB:CF:DD:9F:CA:0B:36:63:D2:59:51:92:C4
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer:       /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial:       019C29D06C7507A382A09E9274341EBCF477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number:          180A
Signing time:             Wed 04 Feb 2026 18:00:50 +0000
Manifest this update:     Wed 04 Feb 2026 18:00:50 +0000
Manifest next update:     Thu 05 Feb 2026 18:00:50 +0000
Files and hashes:         1: _oMe5r1pVk1eWmBM0xQjlQQMYoA.roa (hash: vP6cRMyhx+tL5mecHizDEMHQb47lEApjkAoW42mWOaI=)
                          2: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: ml64DFq8lfKZ088jzWS4fuc4B7jw6bNJkUeU79JEJWA=)
                          3: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (hash: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:29:d0:6c:75:07:a3:82:a0:9e:92:74:34:1e:bc:f4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
        Validity
            Not Before: Feb  4 18:00:50 2026 GMT
            Not After : Feb  5 18:00:50 2026 GMT
        Subject: CN=b803e34a95eba7ebcfdd9fca0b3663d2595192c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:03:85:d7:b4:a8:97:0d:0a:87:99:c6:55:
                    17:78:7c:dc:c9:79:f3:b2:ea:04:d8:b4:fc:a8:1f:
                    f1:a5:7f:0e:f4:74:04:cd:aa:cd:10:96:5b:a1:ba:
                    df:c8:fc:c8:6b:f7:00:6a:c5:00:89:10:c9:58:08:
                    55:20:d7:52:9c:79:42:90:ad:6e:5e:e8:df:2f:0c:
                    84:63:89:c5:4e:45:54:9b:b7:e4:f6:fa:11:71:bd:
                    bc:64:92:2e:f0:cd:71:ef:78:60:ab:19:4f:5c:ae:
                    82:cb:76:50:82:37:32:9c:0d:c4:92:79:28:12:5a:
                    06:f9:78:22:c3:7c:00:31:fb:8f:fd:ed:fe:ba:c4:
                    93:f1:f2:1b:4f:38:e4:2a:03:28:da:37:b3:fc:a0:
                    6c:c5:79:79:c3:83:99:b4:41:e6:cc:8b:74:a0:92:
                    7b:da:0b:3f:04:32:70:a2:5a:07:e8:3e:6e:19:2d:
                    c1:fa:0e:15:96:cb:b4:96:ef:89:e8:08:af:43:3e:
                    b2:20:f6:2d:b9:96:d4:4e:09:cd:c6:94:db:c0:7a:
                    75:a3:30:30:4c:1c:42:0e:2a:68:fe:77:cc:0c:c4:
                    9a:9f:22:14:61:cc:3b:38:14:e8:5e:c7:4f:b2:20:
                    17:16:72:6f:62:c1:f5:c4:f0:66:3b:c6:9d:f4:30:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:03:E3:4A:95:EB:A7:EB:CF:DD:9F:CA:0B:36:63:D2:59:51:92:C4
            X509v3 Authority Key Identifier:
                keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c5:d8:ae:23:a2:7c:ae:9c:83:78:46:fb:13:5e:4e:03:77:
         0f:ba:3c:44:aa:fc:1f:7a:b4:e2:96:a9:53:c3:6d:f3:95:12:
         01:0c:d2:d6:36:d7:52:ae:e7:e4:97:73:14:31:0d:25:79:22:
         b0:fe:c2:86:83:be:d2:41:3d:1c:69:b9:9e:8a:dc:8f:0b:cb:
         f8:26:71:ec:89:ec:33:7c:c2:c2:75:a3:8d:2c:98:61:b9:40:
         8b:79:99:9a:3d:e0:ff:b6:f3:00:e3:0e:b2:28:82:ae:de:a6:
         8f:23:5d:61:be:e3:c1:9b:06:68:ab:80:88:11:92:ef:1d:2a:
         51:85:91:9a:7c:bb:ac:9c:69:a9:e3:1e:c8:24:88:02:d3:f0:
         16:6e:1a:4e:87:b9:51:9d:ca:7a:75:a3:43:a1:57:99:70:2b:
         b5:32:c0:2d:5f:51:76:7a:22:6b:5f:f3:6b:a6:b8:7d:09:3e:
         16:1c:94:2a:88:83:83:84:85:2a:37:42:77:82:b9:70:3e:a5:
         5c:64:25:49:fd:72:8b:55:08:57:ff:d7:8b:ed:78:d8:a0:a2:
         45:3b:43:85:d0:aa:c6:79:82:fb:19:f9:5f:a7:70:b7:eb:11:
         26:01:15:90:0a:e5:2b:de:8c:26:9b:12:c4:61:3d:38:3c:77:
         b1:5f:85:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwp0Gx1B6OCoJ6SdDQevPR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm
MTZlZGYwHhcNMjYwMjA0MTgwMDUwWhcNMjYwMjA1MTgwMDUwWjAzMTEwLwYDVQQD
EyhiODAzZTM0YTk1ZWJhN2ViY2ZkZDlmY2EwYjM2NjNkMjU5NTE5MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKEDhde0qJcNCoeZxlUXeHzcyXnz
suoE2LT8qB/xpX8O9HQEzarNEJZbobrfyPzIa/cAasUAiRDJWAhVINdSnHlCkK1u
XujfLwyEY4nFTkVUm7fk9voRcb28ZJIu8M1x73hgqxlPXK6Cy3ZQgjcynA3Eknko
EloG+Xgiw3wAMfuP/e3+usST8fIbTzjkKgMo2jez/KBsxXl5w4OZtEHmzIt0oJJ7
2gs/BDJwoloH6D5uGS3B+g4Vlsu0lu+J6AivQz6yIPYtuZbUTgnNxpTbwHp1ozAw
TBxCDipo/nfMDMSanyIUYcw7OBToXsdPsiAXFnJvYsH1xPBmO8ad9DDA4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgD40qV66frz92fygs2Y9JZUZLEMB8GA1UdIwQY
MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt
ZjJiODEwNzliNzQ2LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2
LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsXYriOi
fK6cg3hG+xNeTgN3D7o8RKr8H3q04papU8Nt85USAQzS1jbXUq7n5JdzFDENJXki
sP7ChoO+0kE9HGm5norcjwvL+CZx7InsM3zCwnWjjSyYYblAi3mZmj3g/7bzAOMO
siiCrt6mjyNdYb7jwZsGaKuAiBGS7x0qUYWRmny7rJxpqeMeyCSIAtPwFm4aToe5
UZ3KenWjQ6FXmXArtTLALV9Rdnoia1/za6a4fQk+FhyUKoiDg4SFKjdCd4K5cD6l
XGQlSf1yi1UIV//Xi+142KCiRTtDhdCqxnmC+xn5X6dwt+sRJgEVkArlK96MJpsS
xGE9ODx3sV+FhQ==
-----END CERTIFICATE-----
Generated at Wed Feb 4 21:58:17 2026 by rpki-client