This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File:                     sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier:          v4EDUk3oWtM9zM4orhqmDhI6cVZu1xPv4GZ2ppzfA+w=
Subject key identifier:   28:33:52:FF:19:93:EB:FE:91:A5:AA:27:51:C8:36:38:49:B7:F7:C6
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer:       /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial:       019C26162223A901E08F8D645CA3A740F604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number:          0122
Signing time:             Wed 04 Feb 2026 00:38:30 +0000
Manifest this update:     Wed 04 Feb 2026 00:38:30 +0000
Manifest next update:     Thu 05 Feb 2026 00:38:30 +0000
Files and hashes:         1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
                          2: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
                          3: VgN5SCIxaqT2YrW4NVQD1Q6pVzk.roa (hash: SJQuTw8O9qkUCxSEiNfs6LBZOFotSEeUcuV9MrfWwyM=)
                          4: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: l/nU1vDXPG9tAYRVJe/NB5pVhpoGGxcC/Do3uNhleO4=)
                          5: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
                          6: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:26:16:22:23:a9:01:e0:8f:8d:64:5c:a3:a7:40:f6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
        Validity
            Not Before: Feb  4 00:38:30 2026 GMT
            Not After : Feb  5 00:38:30 2026 GMT
        Subject: CN=283352ff1993ebfe91a5aa2751c8363849b7f7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:6d:3d:0d:1d:bc:26:70:8c:d7:3a:97:5c:
                    63:92:13:e7:60:b3:76:e3:ea:5d:6d:7f:01:2f:0e:
                    f0:f6:f5:37:ca:99:60:cd:97:2b:04:55:63:e3:3f:
                    e2:2a:a6:c0:1e:54:5e:50:c5:bc:4b:65:51:71:a9:
                    e4:78:e3:e8:80:85:17:55:ac:73:3f:c0:b5:fa:46:
                    2f:56:ef:49:f3:f4:3c:b9:ce:b3:d4:f5:d3:a3:2e:
                    47:68:da:14:ba:91:e0:34:b8:a9:d9:e5:fe:ff:b4:
                    04:b3:1c:5a:ef:1d:2b:2f:e9:86:8c:39:e5:45:e7:
                    8a:b6:0a:50:c0:cd:26:91:4c:1d:95:f2:bc:62:5d:
                    59:e5:84:1a:27:8c:43:66:c3:ac:a2:36:fb:5c:16:
                    93:e8:3d:c4:b4:5f:7d:27:e3:bf:b8:11:2a:a2:00:
                    89:42:2b:2a:73:3f:f2:b2:f0:bb:43:86:3e:53:84:
                    e4:93:99:ac:c0:be:ea:0f:8a:2a:09:c6:55:1b:0c:
                    63:a4:21:18:f3:1c:42:5e:42:c3:a0:4d:cc:79:45:
                    cd:f8:a1:ee:a5:09:01:9d:b4:17:f2:e8:62:e3:ee:
                    76:45:24:06:cb:92:84:52:f5:f2:14:3f:b5:05:02:
                    d0:d4:7e:88:12:66:91:e3:71:72:c1:75:bf:1e:31:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:33:52:FF:19:93:EB:FE:91:A5:AA:27:51:C8:36:38:49:B7:F7:C6
            X509v3 Authority Key Identifier:
                keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:11:a9:4c:35:ec:c4:cf:26:e5:71:ed:f3:b8:36:b9:b6:5a:
         96:93:db:e3:3b:6f:b7:ef:7e:f4:cf:a0:bd:8f:b6:3f:c6:b3:
         0c:da:84:bf:46:27:7e:b0:11:47:99:a5:34:fe:f5:8d:40:bf:
         03:ef:d9:9f:72:ba:f7:c4:85:de:5c:e0:71:e7:bd:65:ca:cf:
         98:42:ae:d2:9f:5a:4f:3f:a9:b7:c2:2d:00:c0:42:89:bd:f8:
         3c:2f:37:e1:3b:37:8e:ce:ea:06:cd:a0:93:f8:91:2b:5a:c4:
         8b:a5:c8:43:29:3d:77:db:46:bb:2b:91:15:f6:ff:86:3a:48:
         dd:56:f2:63:61:b5:f4:5d:14:6b:89:1c:f9:a0:30:eb:ff:3c:
         46:ad:36:8a:1c:50:5e:8b:a5:c0:cd:e6:24:78:fe:47:10:30:
         a7:40:67:8e:21:68:e7:a7:72:4b:b7:d7:80:21:7d:1d:4b:4f:
         3f:99:44:a1:bb:6c:98:fe:03:02:51:47:79:f5:06:48:7b:f6:
         90:72:92:d6:d3:0b:35:43:ef:83:56:85:c8:5c:8b:53:ff:5f:
         f1:eb:9a:1a:70:d2:1e:7d:5d:9d:60:1e:f8:dd:da:2c:a0:77:
         b1:ef:48:8d:2d:3a:3e:36:81:b7:9b:8c:61:aa:7a:72:9f:42:
         fa:0a:ce:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwmFiIjqQHgj41kXKOnQPYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0
ODM5NzQwHhcNMjYwMjA0MDAzODMwWhcNMjYwMjA1MDAzODMwWjAzMTEwLwYDVQQD
EygyODMzNTJmZjE5OTNlYmZlOTFhNWFhMjc1MWM4MzYzODQ5YjdmN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso9tPQ0dvCZwjNc6l1xjkhPnYLN2
4+pdbX8BLw7w9vU3yplgzZcrBFVj4z/iKqbAHlReUMW8S2VRcankeOPogIUXVaxz
P8C1+kYvVu9J8/Q8uc6z1PXToy5HaNoUupHgNLip2eX+/7QEsxxa7x0rL+mGjDnl
ReeKtgpQwM0mkUwdlfK8Yl1Z5YQaJ4xDZsOsojb7XBaT6D3EtF99J+O/uBEqogCJ
Qisqcz/ysvC7Q4Y+U4Tkk5mswL7qD4oqCcZVGwxjpCEY8xxCXkLDoE3MeUXN+KHu
pQkBnbQX8uhi4+52RSQGy5KEUvXyFD+1BQLQ1H6IEmaR43FywXW/HjFx7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgzUv8Zk+v+kaWqJ1HINjhJt/fGMB8GA1UdIwQY
MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct
NDQzZTRiYWI3ZGU2LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2
LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBGpTDXs
xM8m5XHt87g2ubZalpPb4ztvt+9+9M+gvY+2P8azDNqEv0YnfrARR5mlNP71jUC/
A+/Zn3K698SF3lzgcee9ZcrPmEKu0p9aTz+pt8ItAMBCib34PC834Ts3js7qBs2g
k/iRK1rEi6XIQyk9d9tGuyuRFfb/hjpI3VbyY2G19F0Ua4kc+aAw6/88Rq02ihxQ
XoulwM3mJHj+RxAwp0BnjiFo56dyS7fXgCF9HUtPP5lEobtsmP4DAlFHefUGSHv2
kHKS1tMLNUPvg1aFyFyLU/9f8euaGnDSHn1dnWAe+N3aLKB3se9IjS06PjaBt5uM
Yap6cp9C+grO7A==
-----END CERTIFICATE-----
Generated at Wed Feb 4 08:29:36 2026 by rpki-client