This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          agN/eg5hXrBFY4g81Zxi9WWJBMrEUxC/sLN0dxzf44Q=
Subject key identifier:   00:05:06:6A:A5:63:20:28:84:92:95:8D:C4:DB:8B:56:97:4D:13:D3
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019C30ADABE52EFA3580CB5C636E78861585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          070B
Signing time:             Fri 06 Feb 2026 02:00:13 +0000
Manifest this update:     Fri 06 Feb 2026 02:00:13 +0000
Manifest next update:     Sat 07 Feb 2026 02:00:13 +0000
Files and hashes:         1: 0fOlVdIS1WEADHFx-rX9EuojXD0.roa (hash: HVN1Ks0lRzr25kk3tVqnsRKtbl6GiFv09oBIP/8lLHs=)
                          2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
                          3: 2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa (hash: Gkxl6cgCKu5SSnDSK3cxhOt4JBhAs9jevpskTltEVbU=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
                          7: Bf358XzVOCmbbEn7ZE1rj59zZFM.roa (hash: oICJJDfivGZGj4XuE1SPmjbdZ4Qz6CEaL70oSwkDw2M=)
                          8: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          9: EwPzuIXXAY5u8_S6Cn0AasfKr5Y.roa (hash: ZLQXJBiU/cJ5PgC0zxsFgBpflI2UY+bKrzKvcAF0V1M=)
                          10: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          11: K-khbksQ-2sabX4zr3q8PxzSit0.roa (hash: xDFWiYoyDY13IMLCQNkMrZzkvNnytsrYJpcMXHkSwMs=)
                          12: KrdFE5qbZm0BsnHIJgKBhkCYfMg.roa (hash: yJaF+ZPQzdElslhHHeiCzNPSim47QJWyqmLoPAq0ci0=)
                          13: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          14: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          15: QRmycAO-pHfT7FsE99BsqZ0Jl18.roa (hash: pDVrAH7IIAQbYj9HezybCfvc4KXVjiS/nu2UCu/rDRY=)
                          16: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          17: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          18: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
                          19: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
                          20: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          21: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          22: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: CFBcJ/PsCwrPwBlYGpXGAe/P3ZGtfTPND9T+oc11rDc=)
                          23: h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa (hash: W51bGgmV1Q00x0gxca0kLqnlV5L62pIb8f8ybi2p/SU=)
                          24: hh3l1mlaeA5W2ptSjPEVg_Bu1kY.roa (hash: fKzTMhRl/y/AWHaTSp1Gf9SPCYT2knRS4XSazW6HvU4=)
                          25: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          26: jzMXxS2jlpqCit2HCTxuk8M9Mcg.roa (hash: CVU3cGMeqVTpk9Sa0TKIeRuBjXSXQzYNiMapztDyxoQ=)
                          27: kLlSZbzpmsYIvWwfO8jg_8rW4tQ.roa (hash: 12QL3G7J65T63O8QiRkOFH0drKrRxRKrU7LN/3R4Z+U=)
                          28: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          29: shgwIpHUjkTES4WuZvl4q6J14j4.roa (hash: K9w+6O3bog4NXLdj4nneOheN9As20p3zZapy86hUWMs=)
                          30: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Feb 2026 02:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:30:ad:ab:e5:2e:fa:35:80:cb:5c:63:6e:78:86:15:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Feb  6 02:00:13 2026 GMT
            Not After : Feb  7 02:00:13 2026 GMT
        Subject: CN=0005066aa56320288492958dc4db8b56974d13d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:d5:a2:42:54:90:85:4e:65:7b:b3:2a:36:
                    d8:1e:0a:e6:fa:4c:0a:16:b8:71:31:39:c9:4c:5c:
                    42:d1:2b:c1:c9:0b:37:b4:36:2a:4b:f5:2a:9d:59:
                    40:70:b1:68:3f:18:a8:26:a2:e4:98:1c:3c:ac:32:
                    3c:f5:67:31:ca:6e:36:cf:92:b7:c6:6f:9b:f8:ba:
                    22:76:76:52:05:7e:a5:84:e0:b9:3e:46:96:d9:c5:
                    44:71:1b:15:59:4f:a5:ad:ec:3d:bf:0d:3f:06:55:
                    f6:19:4c:30:f2:d8:17:48:37:80:0c:8e:fd:d4:7c:
                    b7:eb:da:ab:88:8c:79:6d:8d:66:05:f6:74:b7:90:
                    e1:eb:05:02:f2:5d:63:d2:45:a9:e3:8f:0b:b4:e1:
                    d4:e0:b5:e4:89:84:dd:d6:8e:76:f9:d5:7d:7a:e7:
                    94:2f:09:b1:5d:a2:1b:eb:ef:f2:9a:59:5b:ba:f7:
                    cf:24:1d:9b:b5:0c:70:2e:1f:a0:a1:ee:ca:fe:9a:
                    84:3b:75:ab:69:a6:74:01:9d:e3:56:3d:cb:78:5d:
                    06:64:11:53:c6:43:2f:2d:c9:e8:54:c9:94:a4:2c:
                    c6:60:ab:9f:a6:d9:98:e8:8d:f1:0c:c4:76:18:ef:
                    1c:b1:be:b5:53:b9:f4:9f:78:59:17:2b:e8:40:23:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:05:06:6A:A5:63:20:28:84:92:95:8D:C4:DB:8B:56:97:4D:13:D3
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d8:bb:16:5a:9f:f3:2e:d2:9b:24:4d:22:e2:6d:38:df:c3:
         7d:30:30:9e:0f:2e:73:ad:a4:4b:02:50:ac:bb:42:23:4f:fd:
         11:35:ad:24:cb:dc:01:bc:0c:e8:aa:42:bb:ad:aa:d9:b5:14:
         79:ba:51:a4:cd:19:49:f1:57:95:fd:7e:40:a7:b8:7e:63:0f:
         88:c6:dd:55:2d:5e:ae:04:4c:0f:31:74:7c:54:ed:ab:1a:5b:
         2c:31:60:0d:23:ce:b5:87:b9:6e:27:a9:9e:2c:43:e3:e8:af:
         bf:42:f8:29:99:54:09:fc:c2:40:ea:8a:64:8c:36:af:44:bf:
         32:2b:ec:ea:af:df:c4:ea:4c:72:83:61:67:0d:10:5c:19:3b:
         a5:27:71:3c:05:63:99:7c:c1:8c:9f:19:5b:80:a0:20:21:67:
         0c:25:06:04:ac:c8:cf:0b:b4:52:26:f5:05:2d:70:51:37:32:
         fa:d4:0a:30:38:23:1f:4a:eb:71:fa:5f:56:88:51:46:e6:8f:
         55:25:46:f9:23:f0:53:3c:a8:1a:e3:77:4e:d2:53:00:da:82:
         0b:41:ed:1d:1a:12:09:9d:c8:94:cd:e7:88:69:14:09:92:b6:
         40:fd:f9:6c:4d:e0:f1:95:b5:13:0d:18:d4:d9:f6:45:09:ae:
         a3:bf:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 08:52:46 2026 by rpki-client