This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          LSLgik5fqS5zquUzhBq0oOkHDqRU/ajB7iIoUtcV+DI=
Subject key identifier:   1D:EE:C7:D2:EF:43:7F:F7:17:FB:C9:38:72:A9:40:97:97:3F:71:4A
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019C1BA6A3A3A97CE9D3F3E3D05C93DE4DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          17FF
Signing time:             Mon 02 Feb 2026 00:00:31 +0000
Manifest this update:     Mon 02 Feb 2026 00:00:31 +0000
Manifest next update:     Tue 03 Feb 2026 00:00:31 +0000
Files and hashes:         1: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (hash: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk=)
                          2: DPfDzK5MIgt9uCqb-OzrjnTt0XE.asa (hash: xVJ7dS76yV9K4GLx/NHqZB5JP3AMDX7XWVpGOyoTdvQ=)
                          3: I9YhkXL4_92lYMiJza_GlL1PdnA.roa (hash: lMZ99O89kjhiz5I4kqtb1qY19GvOflbfo65zzKkcDAE=)
                          4: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: srOiittIWq7oSH8Cpxruo4OWSugSnuZGkUvqsU83LBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a6:a3:a3:a9:7c:e9:d3:f3:e3:d0:5c:93:de:4d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Feb  2 00:00:31 2026 GMT
            Not After : Feb  3 00:00:31 2026 GMT
        Subject: CN=1deec7d2ef437ff717fbc93872a94097973f714a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:60:e2:5b:41:83:47:f9:d2:fd:f3:d7:4a:
                    8f:15:bb:35:16:0e:85:1a:32:32:9a:ba:b5:52:80:
                    4b:ba:da:b9:9d:60:29:85:65:9c:9c:5d:8e:fe:b0:
                    91:68:c7:98:84:f9:33:43:ee:49:1e:f0:96:33:60:
                    b5:1e:61:ee:7a:70:2c:eb:bb:41:d4:48:b0:ae:37:
                    2f:9a:0b:7b:71:8d:29:eb:59:c1:a4:20:dc:3d:1e:
                    48:1d:c6:e9:b0:77:4c:76:0d:8f:23:65:a2:dc:92:
                    56:a1:80:5f:e8:d5:26:1b:d1:ba:df:21:3c:75:e2:
                    82:37:63:e6:42:1a:6c:04:7d:fa:79:0f:a1:17:3e:
                    bd:a8:f7:18:67:6a:4f:a6:f9:76:2d:35:d4:81:5e:
                    8d:74:69:aa:5f:5e:d4:35:20:d5:85:bc:c7:27:d7:
                    1a:d6:63:b0:50:75:cf:f9:d4:98:f2:95:cf:c9:a3:
                    8c:58:69:67:95:38:2a:42:2b:a1:39:5a:67:91:d7:
                    8f:e1:2a:01:d4:ba:dc:bf:83:09:df:7c:1e:03:29:
                    6b:16:38:2c:27:d5:cf:80:14:d6:f9:06:ff:b3:ae:
                    85:4a:a9:ca:d4:c0:37:62:ac:d3:29:5d:ac:0d:53:
                    11:cb:44:52:65:69:cd:0c:9c:5d:f7:47:04:41:bd:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EE:C7:D2:EF:43:7F:F7:17:FB:C9:38:72:A9:40:97:97:3F:71:4A
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:e8:fe:2f:9c:ba:42:64:fb:81:44:16:4e:46:ee:09:59:
         ce:7e:48:8e:1c:b0:49:dc:61:c9:6b:b5:bb:19:ed:97:1e:db:
         a9:71:5f:d4:d7:71:65:d2:6b:c2:3d:bf:45:cd:6e:45:ce:ff:
         68:6a:00:8b:5f:e2:8c:82:73:d8:82:ad:ed:c4:b2:b2:7b:8c:
         e5:f3:35:8b:f2:1a:64:8a:ba:46:03:68:28:b8:e1:0f:68:b9:
         88:ea:11:76:ec:36:87:9e:e6:bb:3e:11:57:3a:e8:8d:4d:ab:
         06:16:b0:ce:39:b5:6c:f4:e1:09:4a:11:c0:99:08:ea:29:f4:
         09:1d:6d:32:09:85:6d:8f:62:c5:fd:d3:f3:7e:3f:14:85:97:
         30:d5:60:73:dd:41:9e:16:37:4b:f7:5c:b6:67:a5:5d:c2:43:
         0f:bb:2b:b1:75:d8:d7:f3:91:fe:83:84:2a:f1:f2:0b:86:ff:
         4a:b2:20:24:c8:33:43:2e:a8:74:ca:b5:c8:64:28:60:4a:ba:
         58:a7:7f:ae:7d:fb:b2:b4:59:51:b7:f1:16:50:72:50:12:b9:
         12:d3:75:dd:c7:3a:a9:3f:c5:47:cf:e1:8c:28:a0:b0:9e:9f:
         25:d2:f9:2e:04:83:a7:f2:3a:e3:a7:2d:02:0b:d4:68:a2:79:
         74:7e:c6:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwbpqOjqXzp0/Pj0FyT3k2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0
M2YxNzQwHhcNMjYwMjAyMDAwMDMxWhcNMjYwMjAzMDAwMDMxWjAzMTEwLwYDVQQD
EygxZGVlYzdkMmVmNDM3ZmY3MTdmYmM5Mzg3MmE5NDA5Nzk3M2Y3MTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsclg4ltBg0f50v3z10qPFbs1Fg6F
GjIymrq1UoBLutq5nWAphWWcnF2O/rCRaMeYhPkzQ+5JHvCWM2C1HmHuenAs67tB
1Eiwrjcvmgt7cY0p61nBpCDcPR5IHcbpsHdMdg2PI2Wi3JJWoYBf6NUmG9G63yE8
deKCN2PmQhpsBH36eQ+hFz69qPcYZ2pPpvl2LTXUgV6NdGmqX17UNSDVhbzHJ9ca
1mOwUHXP+dSY8pXPyaOMWGlnlTgqQiuhOVpnkdeP4SoB1Lrcv4MJ33weAylrFjgs
J9XPgBTW+Qb/s66FSqnK1MA3YqzTKV2sDVMRy0RSZWnNDJxd90cEQb1OLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3ux9LvQ3/3F/vJOHKpQJeXP3FKMB8GA1UdIwQY
MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt
ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh
LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy/o/i+c
ukJk+4FEFk5G7glZzn5IjhywSdxhyWu1uxntlx7bqXFf1NdxZdJrwj2/Rc1uRc7/
aGoAi1/ijIJz2IKt7cSysnuM5fM1i/IaZIq6RgNoKLjhD2i5iOoRduw2h57muz4R
VzrojU2rBhawzjm1bPThCUoRwJkI6in0CR1tMgmFbY9ixf3T834/FIWXMNVgc91B
nhY3S/dctmelXcJDD7srsXXY1/OR/oOEKvHyC4b/SrIgJMgzQy6odMq1yGQoYEq6
WKd/rn37srRZUbfxFlByUBK5EtN13cc6qT/FR8/hjCigsJ6fJdL5LgSDp/I646ct
AgvUaKJ5dH7GIA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:31 2026 by rpki-client