This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File:                     AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier:          594/R5ozWQS8Nx81oRQZem7LdyrdwlzUO5rYGc+f3oA=
Subject key identifier:   ED:A5:55:C6:02:74:3D:FC:31:71:05:52:3B:02:F3:54:62:99:06:30
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer:       /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial:       019C1D5E78B9D0767BD4CF56865B0C6A4D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number:          01BA
Signing time:             Mon 02 Feb 2026 08:00:56 +0000
Manifest this update:     Mon 02 Feb 2026 08:00:56 +0000
Manifest next update:     Tue 03 Feb 2026 08:00:56 +0000
Files and hashes:         1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: 2FfXzNwguGNXictMrLidDQxHdvp+gM4/UZHEaLXwLQU=)
                          2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
                          3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:5e:78:b9:d0:76:7b:d4:cf:56:86:5b:0c:6a:4d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
        Validity
            Not Before: Feb  2 08:00:56 2026 GMT
            Not After : Feb  3 08:00:56 2026 GMT
        Subject: CN=eda555c602743dfc317105523b02f35462990630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:7a:40:eb:1e:cb:7b:c6:2a:05:f6:0f:1c:
                    e8:76:66:b1:91:b1:40:37:d0:3a:bc:e7:83:c2:7d:
                    97:6e:ff:06:f7:68:66:08:0d:00:fe:58:3d:67:4d:
                    6f:e9:22:b5:f3:c8:e9:9b:79:2b:39:fd:7a:b2:2d:
                    f9:94:cf:47:61:37:ba:49:36:53:09:cd:37:cb:5e:
                    f9:16:5d:4c:47:2e:8b:a1:de:ba:67:67:c8:d2:2a:
                    44:48:0b:82:39:e1:f3:c9:43:c8:a2:77:34:ad:46:
                    2b:e1:f1:d2:dd:b9:d0:72:6b:8e:2b:08:54:01:f7:
                    31:8a:86:a5:10:de:ad:1a:21:f6:b8:8d:64:72:16:
                    b5:e4:59:68:88:fa:d1:19:db:cb:4a:1a:77:5a:f3:
                    a8:73:00:8e:20:bd:f5:9b:f5:df:20:61:2c:a9:a6:
                    6f:14:11:ce:4a:cb:cb:b9:87:c2:c8:15:45:72:1c:
                    44:d8:33:5e:a8:9f:aa:9d:e1:20:74:fa:f0:dc:dd:
                    80:51:11:8e:5c:b6:55:7a:b0:78:b3:56:f9:2d:fc:
                    8d:56:66:72:40:27:0e:36:f3:77:59:4c:d5:3a:52:
                    48:bd:da:6c:57:3f:c7:5e:5f:da:53:ea:2c:75:cb:
                    67:53:19:ec:be:b8:d0:70:02:ad:5e:cd:3a:75:f4:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:55:C6:02:74:3D:FC:31:71:05:52:3B:02:F3:54:62:99:06:30
            X509v3 Authority Key Identifier:
                keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ac:91:3e:53:5b:8e:50:2f:b1:99:b6:2b:bd:93:68:b1:e8:
         a3:f0:9c:27:f7:9d:4f:27:46:95:50:b6:55:93:7f:38:4c:a5:
         02:ff:9b:6c:cd:da:1e:b8:fc:1a:7e:0f:08:1c:12:5d:14:b0:
         5d:f8:00:1c:ed:c9:6e:98:e5:9e:6c:54:4c:f0:5b:95:a3:f2:
         ed:6c:1e:00:a1:62:e0:5c:58:c7:92:ab:e6:ff:d3:80:80:62:
         30:d9:4f:70:d0:1e:3c:17:c2:36:4c:f7:26:4b:63:e8:d6:08:
         88:cc:25:3e:20:76:79:65:6b:a0:28:00:b5:e7:80:df:34:49:
         5b:4e:fc:5d:73:24:bd:83:33:8f:60:2b:5e:e1:5c:6d:00:03:
         3b:65:92:42:91:18:69:c7:52:f4:79:15:63:9b:c5:c1:43:08:
         f3:70:d9:be:e2:88:e6:cb:b9:27:94:33:4b:c8:45:fe:5f:be:
         f3:e1:f5:72:61:e8:76:45:71:a7:03:60:08:7d:e4:cc:eb:80:
         ca:c9:8e:f8:8b:b2:58:7b:b2:18:94:be:8b:71:6d:81:fe:9d:
         9d:0b:f0:d0:a6:e5:ab:47:41:65:e5:6f:96:b2:7e:6f:a8:7e:
         9f:86:d4:ca:eb:f5:74:8c:7d:7b:4e:57:34:7f:af:db:14:28:
         22:e7:2a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdXni50HZ71M9WhlsMak0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2FkYzVjN2JhMjYyYTlhNWIxZDA4NzM2OWRhNWJlNzk3
ZmJhMTYwHhcNMjYwMjAyMDgwMDU2WhcNMjYwMjAzMDgwMDU2WjAzMTEwLwYDVQQD
EyhlZGE1NTVjNjAyNzQzZGZjMzE3MTA1NTIzYjAyZjM1NDYyOTkwNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKp6QOsey3vGKgX2DxzodmaxkbFA
N9A6vOeDwn2Xbv8G92hmCA0A/lg9Z01v6SK188jpm3krOf16si35lM9HYTe6STZT
Cc03y175Fl1MRy6Lod66Z2fI0ipESAuCOeHzyUPIonc0rUYr4fHS3bnQcmuOKwhU
AfcxioalEN6tGiH2uI1kcha15FloiPrRGdvLShp3WvOocwCOIL31m/XfIGEsqaZv
FBHOSsvLuYfCyBVFchxE2DNeqJ+qneEgdPrw3N2AURGOXLZVerB4s1b5LfyNVmZy
QCcONvN3WUzVOlJIvdpsVz/HXl/aU+osdctnUxnsvrjQcAKtXs06dfT+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2lVcYCdD38MXEFUjsC81RimQYwMB8GA1UdIwQY
MBaAFADK3Fx7omKppbHQhzadpb55f7oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU1yY1hIdWlZcW1sc2RDSE5wMmx2bmxfdWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMmRhYmEtMTZhMC00MThhLWI3YzUt
MzRhNDg0NWMxZDhjLzEvQU1yY1hIdWlZcW1sc2RDSE5wMmx2bmxfdWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lMmRhYmEtMTZhMC00MThhLWI3YzUtMzRhNDg0NWMxZDhj
LzEvQU1yY1hIdWlZcW1sc2RDSE5wMmx2bmxfdWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6yRPlNb
jlAvsZm2K72TaLHoo/CcJ/edTydGlVC2VZN/OEylAv+bbM3aHrj8Gn4PCBwSXRSw
XfgAHO3JbpjlnmxUTPBblaPy7WweAKFi4FxYx5Kr5v/TgIBiMNlPcNAePBfCNkz3
Jktj6NYIiMwlPiB2eWVroCgAteeA3zRJW078XXMkvYMzj2ArXuFcbQADO2WSQpEY
acdS9HkVY5vFwUMI83DZvuKI5su5J5QzS8hF/l++8+H1cmHodkVxpwNgCH3kzOuA
ysmO+IuyWHuyGJS+i3Ftgf6dnQvw0Kblq0dBZeVvlrJ+b6h+n4bUyuv1dIx9e05X
NH+v2xQoIucqfg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:16 2026 by rpki-client