This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File:                     z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier:          D8FZ84ZFTCJu7PwBwKq+E6mL9Ai9UTiOxRgm/z62qE8=
Subject key identifier:   D0:12:37:DA:BD:DB:66:A0:64:93:DB:39:C2:DD:2C:E6:1E:1A:69:2B
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer:       /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial:       019C2699152A539DBBC99AF4DAAE1DA80D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number:          0F78
Signing time:             Wed 04 Feb 2026 03:01:32 +0000
Manifest this update:     Wed 04 Feb 2026 03:01:32 +0000
Manifest next update:     Thu 05 Feb 2026 03:01:32 +0000
Files and hashes:         1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
                          2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
                          3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: Idl+/cuXz9k8cH5wRUfxASko6tFtE4HlegQpexGZiQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:26:99:15:2a:53:9d:bb:c9:9a:f4:da:ae:1d:a8:0d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
        Validity
            Not Before: Feb  4 03:01:32 2026 GMT
            Not After : Feb  5 03:01:32 2026 GMT
        Subject: CN=d01237dabddb66a06493db39c2dd2ce61e1a692b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:1d:8f:63:ff:88:38:2f:0b:59:c4:7e:5e:
                    1e:5b:5f:76:a6:02:8b:f3:5b:ea:c6:92:b8:3c:8c:
                    2a:e5:15:bd:16:ed:ac:01:98:14:42:6b:9a:62:83:
                    85:cf:ec:fa:6b:0d:6b:02:d3:fb:0a:81:e6:07:00:
                    31:cc:16:aa:86:20:ff:f2:c0:53:d3:3d:10:74:3c:
                    36:18:03:b1:e8:ba:6d:f7:a8:fb:91:11:a8:d4:69:
                    48:ff:53:f9:4c:cb:af:03:ff:b3:71:2f:2d:28:1a:
                    5c:94:c0:bd:cc:7f:e0:f9:dd:86:39:72:48:3d:93:
                    61:6e:97:ad:05:ac:f8:f5:28:de:31:ec:56:03:b0:
                    3a:39:54:d5:94:20:19:eb:05:ac:1b:b2:a0:01:df:
                    8e:0c:a5:d2:6a:72:53:9f:20:42:e9:7f:43:18:9b:
                    43:39:50:87:11:a5:cf:05:05:89:5c:90:aa:e0:bd:
                    d0:72:ab:d4:85:ed:92:46:d4:2d:ba:13:fa:12:57:
                    b7:7f:c9:9a:83:5a:48:2c:53:11:8f:7f:df:23:31:
                    7c:a4:0b:5d:49:df:2f:8a:c8:22:bd:d5:ad:3a:17:
                    7f:46:bd:a7:e5:f5:c9:c7:cd:5a:25:51:51:83:b3:
                    5f:d4:55:48:56:f0:61:8c:65:46:a7:98:9a:22:e2:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:12:37:DA:BD:DB:66:A0:64:93:DB:39:C2:DD:2C:E6:1E:1A:69:2B
            X509v3 Authority Key Identifier:
                keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:09:2c:1a:75:46:e1:bb:af:df:aa:e0:ff:95:88:a2:14:
         f7:21:5b:ec:2e:8d:4b:4a:ba:13:7f:c4:66:7f:13:b1:49:6c:
         48:ad:30:63:68:bf:4d:fa:bb:4f:e9:18:e3:c7:58:fc:8e:21:
         1b:07:f8:4b:e4:4b:69:0d:35:7b:b8:6a:46:76:7e:5f:0c:82:
         52:64:c5:64:87:8c:cc:66:2f:bd:51:9b:2a:dd:f5:5f:3d:7a:
         9b:22:f5:17:34:8c:aa:88:59:74:63:92:59:72:f3:50:88:82:
         dc:a1:24:b1:f3:6c:03:0c:ac:f7:c2:9a:d1:8f:33:71:90:8c:
         76:b8:9c:b6:40:ae:0c:83:e4:e6:32:1a:38:2f:e6:36:3b:be:
         04:87:72:3f:9c:05:14:7d:bd:7e:08:c9:7d:40:50:18:f5:21:
         f3:b9:df:34:b2:b8:2d:ae:bb:3e:ee:23:b4:46:a9:9f:3e:24:
         10:8a:7a:2a:f2:44:9b:a8:98:18:66:dd:64:6b:c0:bf:d9:18:
         d2:5f:5f:ee:1c:4d:5c:f2:4a:f9:3f:47:5d:d8:4e:fa:a7:91:
         c7:cf:80:c5:c0:ac:a9:43:a1:0e:ed:28:44:2c:99:a6:ae:73:
         8f:b2:c1:db:45:76:14:a8:bb:cf:33:19:27:ee:c2:29:fc:de:
         8f:98:0e:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwmmRUqU527yZr02q4dqA05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh
ZGVhZWMwHhcNMjYwMjA0MDMwMTMyWhcNMjYwMjA1MDMwMTMyWjAzMTEwLwYDVQQD
EyhkMDEyMzdkYWJkZGI2NmEwNjQ5M2RiMzljMmRkMmNlNjFlMWE2OTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Edj2P/iDgvC1nEfl4eW192pgKL
81vqxpK4PIwq5RW9Fu2sAZgUQmuaYoOFz+z6aw1rAtP7CoHmBwAxzBaqhiD/8sBT
0z0QdDw2GAOx6Lpt96j7kRGo1GlI/1P5TMuvA/+zcS8tKBpclMC9zH/g+d2GOXJI
PZNhbpetBaz49SjeMexWA7A6OVTVlCAZ6wWsG7KgAd+ODKXSanJTnyBC6X9DGJtD
OVCHEaXPBQWJXJCq4L3QcqvUhe2SRtQtuhP6Ele3f8mag1pILFMRj3/fIzF8pAtd
Sd8visgivdWtOhd/Rr2n5fXJx81aJVFRg7Nf1FVIVvBhjGVGp5iaIuJxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNASN9q922agZJPbOcLdLOYeGmkrMB8GA1UdIwQY
MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt
ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj
LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQEJLBp1
RuG7r9+q4P+ViKIU9yFb7C6NS0q6E3/EZn8TsUlsSK0wY2i/Tfq7T+kY48dY/I4h
Gwf4S+RLaQ01e7hqRnZ+XwyCUmTFZIeMzGYvvVGbKt31Xz16myL1FzSMqohZdGOS
WXLzUIiC3KEksfNsAwys98Ka0Y8zcZCMdrictkCuDIPk5jIaOC/mNju+BIdyP5wF
FH29fgjJfUBQGPUh87nfNLK4La67Pu4jtEapnz4kEIp6KvJEm6iYGGbdZGvAv9kY
0l9f7hxNXPJK+T9HXdhO+qeRx8+AxcCsqUOhDu0oRCyZpq5zj7LB20V2FKi7zzMZ
J+7CKfzej5gOSw==
-----END CERTIFICATE-----
Generated at Wed Feb 4 10:58:15 2026 by rpki-client