This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File:                     tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier:          YSMVDLyYWpRbUnkshTLfh6c1U5TKCMT9OvNDAhD6sX8=
Subject key identifier:   76:39:BC:BB:28:97:D3:61:DD:37:D0:8C:93:3A:82:26:C0:0D:04:94
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       019C23974F8C6E352CAC83137F5C2D499BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number:          0FF8
Signing time:             Tue 03 Feb 2026 13:00:44 +0000
Manifest this update:     Tue 03 Feb 2026 13:00:44 +0000
Manifest next update:     Wed 04 Feb 2026 13:00:44 +0000
Files and hashes:         1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=)
                          2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=)
                          3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=)
                          4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=)
                          5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=)
                          6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=)
                          7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: 4dTXEWsQsgIrWWKDlBDi72nU89zkjEZ6uvfrRCy2tOM=)
                          8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=)
                          9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=)
                          10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:23:97:4f:8c:6e:35:2c:ac:83:13:7f:5c:2d:49:9b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: Feb  3 13:00:44 2026 GMT
            Not After : Feb  4 13:00:44 2026 GMT
        Subject: CN=7639bcbb2897d361dd37d08c933a8226c00d0494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:df:01:b2:39:80:c4:4d:80:f8:2a:f2:05:
                    12:df:cd:4f:91:6d:aa:4e:ca:c9:91:10:b3:9b:3e:
                    e5:f0:29:58:e1:b4:68:da:b6:bd:bc:19:34:37:bf:
                    0b:88:1a:92:e9:9f:12:26:c8:75:1e:67:df:d1:e0:
                    83:ea:17:27:3c:2e:86:00:36:5f:4e:d8:53:10:f6:
                    5e:9e:eb:16:ed:c0:6f:6b:27:63:af:e6:95:66:99:
                    2a:a2:bc:85:3e:b6:bc:72:a8:fb:05:de:1c:40:7b:
                    bd:b7:23:ec:17:5a:96:fc:d0:5c:7d:31:f6:78:9f:
                    c8:eb:23:93:23:2a:1a:25:14:00:1b:3a:8c:50:0f:
                    96:9b:1b:d6:ec:dd:bd:9a:c0:f9:2e:8b:e2:30:33:
                    ea:af:87:26:ae:bf:41:9a:14:44:b4:7a:17:86:2c:
                    83:35:fa:b2:b3:4b:8c:8b:fe:f2:9d:cd:5b:be:fa:
                    d8:7d:0b:4d:d1:2e:08:66:c6:b8:ee:9a:7a:7a:06:
                    e2:a6:12:ee:2b:65:18:31:c0:f7:de:6f:88:ec:3c:
                    94:3d:4c:93:be:2a:15:d5:86:34:d4:fd:85:88:83:
                    35:87:87:92:d8:3b:61:8c:8b:ac:85:40:9c:6f:30:
                    c9:a5:86:2f:07:e5:4c:3c:ad:93:40:1c:63:f2:35:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:39:BC:BB:28:97:D3:61:DD:37:D0:8C:93:3A:82:26:C0:0D:04:94
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cb:02:10:72:d4:1a:5a:57:e7:b3:80:37:cb:01:a1:e8:1b:
         48:7c:cf:d6:35:2a:d2:9d:fc:dd:2d:da:f2:6d:c7:e7:b3:80:
         0b:88:9d:ba:d9:b8:76:a2:74:7b:e0:9f:af:0c:33:ed:93:83:
         96:b2:bc:7f:56:8e:8d:95:f7:d4:8a:09:f8:cc:a7:79:48:12:
         f7:c6:7a:f1:5b:e3:22:4c:ce:85:44:6b:0d:92:27:b2:12:82:
         49:cf:57:e3:df:78:ba:dc:44:b1:18:8c:a8:da:1d:fa:f4:6e:
         1f:c2:f2:09:98:34:7e:25:0a:c6:f1:cd:d8:42:f2:c4:f2:c9:
         29:c8:ff:35:7f:be:65:4e:71:e0:92:ac:a4:34:33:d1:46:e0:
         33:d5:e5:8a:77:7e:9d:32:76:fc:9d:cc:d6:df:36:4e:b0:81:
         c0:eb:c9:20:62:a3:71:ac:0b:f2:5d:cf:72:8a:7a:c1:6b:9a:
         86:94:79:b8:1c:9b:59:98:8c:46:ac:36:6a:de:31:9e:7c:f7:
         49:ae:74:1e:a6:b2:09:41:60:8f:39:69:d7:d5:8a:f3:90:93:
         07:f0:ce:2f:48:24:3f:64:a8:4e:58:7f:d0:83:5d:5a:07:d5:
         4d:1d:be:f1:7d:84:a1:de:76:32:48:5a:09:7a:0c:70:59:a6:
         24:cf:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 20:57:21 2026 by rpki-client