This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File:                     eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier:          Ie+4xJQxnEbMZwKt/M3rrG+tbcGZYod1hbpSy0Clqwk=
Subject key identifier:   2A:F3:18:00:E6:66:FD:3B:5B:4F:4A:EF:DC:8F:80:B8:E4:04:76:66
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer:       /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial:       019C3754F02CBA9F45441F0831970F6375B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number:          180D
Signing time:             Sat 07 Feb 2026 09:00:39 +0000
Manifest this update:     Sat 07 Feb 2026 09:00:39 +0000
Manifest next update:     Sun 08 Feb 2026 09:00:39 +0000
Files and hashes:         1: 1CoDti7UyWuABXfzaLp-v2yW2HA.roa (hash: E0ry/JWuGn8+ExPO+znV4eEnxCmGw1JlXLAD1xMsn3M=)
                          2: CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa (hash: vqRJimrGP27MPdv4zjttCm0+Djwer+Zrgp7ip8OhqNI=)
                          3: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: pzT9HUlgmAy0prXYV31GespPuwS9U/I/xwqjs4U/bdQ=)
                          4: vrHxDQdDvD5FkJJ9HXKxIeXSD6g.roa (hash: 6/LxhvXlOR/ty2sj2ZAK5GVcT8Qr18RlIGwO+dZwois=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:37:54:f0:2c:ba:9f:45:44:1f:08:31:97:0f:63:75:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
        Validity
            Not Before: Feb  7 09:00:39 2026 GMT
            Not After : Feb  8 09:00:39 2026 GMT
        Subject: CN=2af31800e666fd3b5b4f4aefdc8f80b8e4047666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7b:88:8d:66:c5:70:f7:f6:a5:d6:19:24:d6:
                    1a:50:62:6b:ce:81:af:1f:97:94:b7:59:84:ad:a4:
                    ee:da:a2:7a:b9:03:35:29:27:1f:54:1b:76:ec:bd:
                    39:b0:94:8e:f2:ea:d9:0a:f0:3e:c8:9f:68:4c:c8:
                    2a:53:1a:95:7d:31:d4:ee:88:fa:df:2a:bd:a6:3e:
                    4f:ed:20:c5:6f:7c:6c:9c:0b:70:fd:8f:85:5a:bc:
                    cb:53:f1:01:d7:b5:6e:23:4d:bb:ab:a8:49:ac:83:
                    52:bf:7c:c6:20:2f:4e:3d:26:73:12:c2:e9:58:f0:
                    ce:2e:65:41:b1:17:31:c5:54:51:99:32:bb:e6:0c:
                    8d:71:92:ba:6c:91:d9:d2:2b:b2:d4:34:6d:f5:f5:
                    59:63:fd:b9:0e:ea:1d:d1:12:9d:1a:3a:2e:75:fd:
                    e1:85:01:eb:d7:3a:68:21:a4:ae:8e:aa:ff:4a:ed:
                    65:c0:0b:99:5f:cf:b6:0c:88:84:b2:e5:0b:39:8b:
                    a3:3c:43:cc:3a:7a:44:7b:82:a4:03:65:e4:44:32:
                    07:62:29:ee:c6:6e:3f:3d:10:a3:2f:9c:b7:ba:e4:
                    2c:f8:aa:d4:4f:ff:4c:87:96:23:78:1e:21:0a:6d:
                    1e:68:8b:71:bb:44:dc:65:98:61:cb:81:cd:e3:b8:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F3:18:00:E6:66:FD:3B:5B:4F:4A:EF:DC:8F:80:B8:E4:04:76:66
            X509v3 Authority Key Identifier:
                keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:55:91:06:dc:ea:8c:89:99:0d:b9:24:21:fe:3e:18:11:30:
         1f:15:21:1d:92:5f:dd:de:7e:85:44:f6:04:b0:8d:83:f0:5c:
         83:54:16:7f:37:f0:ff:11:49:7e:4d:d8:fc:eb:31:c6:00:17:
         0e:98:60:38:5d:49:ef:69:c2:4a:24:bc:02:b2:9e:0b:81:fc:
         9d:40:0c:04:c3:16:3c:90:c3:6b:a3:0c:40:8b:6c:36:a3:e8:
         f5:fd:83:be:5f:83:9f:41:8b:a5:ad:42:23:57:ab:57:97:64:
         2c:f6:72:21:34:3c:c2:20:af:4c:f3:d5:eb:6a:73:8f:72:93:
         af:ce:44:5f:aa:5c:fe:c3:d4:0c:fd:82:d7:aa:f1:16:c4:89:
         46:a0:43:0c:41:d9:93:7c:42:6a:c6:b9:53:be:77:24:cb:87:
         31:39:45:4f:55:12:7f:b9:85:05:46:c3:51:a8:30:c1:06:18:
         a1:30:7c:8b:d9:ef:ce:b2:47:46:4f:7c:29:75:e8:a0:85:2a:
         13:d4:1e:47:e3:3c:88:02:ed:55:ac:a5:ba:b3:88:e8:91:56:
         41:6a:f4:d4:b3:cd:bd:a0:aa:9e:d6:41:34:13:94:72:72:64:
         a4:ab:16:a5:2b:0a:4b:00:a5:ae:92:a1:ce:f2:c2:de:c4:29:
         1b:c2:73:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZw3VPAsup9FRB8IMZcPY3WzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5N2E0OGNjMTNlMjAwZTJkM2YzOGFmODMzMThkMWJjYWY2
ZjYzMzEwHhcNMjYwMjA3MDkwMDM5WhcNMjYwMjA4MDkwMDM5WjAzMTEwLwYDVQQD
EygyYWYzMTgwMGU2NjZmZDNiNWI0ZjRhZWZkYzhmODBiOGU0MDQ3NjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHuIjWbFcPf2pdYZJNYaUGJrzoGv
H5eUt1mEraTu2qJ6uQM1KScfVBt27L05sJSO8urZCvA+yJ9oTMgqUxqVfTHU7oj6
3yq9pj5P7SDFb3xsnAtw/Y+FWrzLU/EB17VuI027q6hJrINSv3zGIC9OPSZzEsLp
WPDOLmVBsRcxxVRRmTK75gyNcZK6bJHZ0iuy1DRt9fVZY/25Duod0RKdGjoudf3h
hQHr1zpoIaSujqr/Su1lwAuZX8+2DIiEsuULOYujPEPMOnpEe4KkA2XkRDIHYinu
xm4/PRCjL5y3uuQs+KrUT/9Mh5YjeB4hCm0eaItxu0TcZZhhy4HN47giewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrzGADmZv07W09K79yPgLjkBHZmMB8GA1UdIwQY
MBaAFHl6SMwT4gDi0/OK+DMY0byvb2MxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEt
N2Q3ZjRiNjM0ODQ5LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEtN2Q3ZjRiNjM0ODQ5
LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1VWRBtzq
jImZDbkkIf4+GBEwHxUhHZJf3d5+hUT2BLCNg/Bcg1QWfzfw/xFJfk3Y/OsxxgAX
DphgOF1J72nCSiS8ArKeC4H8nUAMBMMWPJDDa6MMQItsNqPo9f2Dvl+Dn0GLpa1C
I1erV5dkLPZyITQ8wiCvTPPV62pzj3KTr85EX6pc/sPUDP2C16rxFsSJRqBDDEHZ
k3xCasa5U753JMuHMTlFT1USf7mFBUbDUagwwQYYoTB8i9nvzrJHRk98KXXooIUq
E9QeR+M8iALtVaylurOI6JFWQWr01LPNvaCqntZBNBOUcnJkpKsWpSsKSwClrpKh
zvLC3sQpG8JzTw==
-----END CERTIFICATE-----
Generated at Sat Feb 7 13:10:03 2026 by rpki-client