This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          Ki4yFddGhBAndRJrqCBtRO41FHxQieEWmGjp4u0ARHA=
Subject key identifier:   54:03:C0:A7:03:5D:B2:3D:7B:67:15:9A:60:F2:61:93:B6:2F:D9:E3
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       019C1B022FD3755743270BEC14E6B775D5D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          17FF
Signing time:             Sun 01 Feb 2026 21:00:53 +0000
Manifest this update:     Sun 01 Feb 2026 21:00:53 +0000
Manifest next update:     Mon 02 Feb 2026 21:00:53 +0000
Files and hashes:         1: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: +/8Skc5iUAkXcK5lm/tQjkZm6WgJhccd0xRjK/VqPlY=)
                          2: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
                          3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:02:2f:d3:75:57:43:27:0b:ec:14:e6:b7:75:d5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Feb  1 21:00:53 2026 GMT
            Not After : Feb  2 21:00:53 2026 GMT
        Subject: CN=5403c0a7035db23d7b67159a60f26193b62fd9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:f4:65:ec:55:71:f6:28:fe:ff:0d:6b:4b:
                    56:85:d7:f2:27:35:cc:ff:e2:d6:9f:5a:8e:f4:7f:
                    77:d8:c1:25:45:cd:27:3c:59:0a:28:7c:b8:90:39:
                    fa:e7:bf:f4:ec:bd:bf:c7:4e:72:10:c1:27:77:e3:
                    e0:7c:b8:de:44:14:e4:ab:b0:94:5e:5b:ed:59:6d:
                    98:bf:3a:46:db:a0:ac:b7:8d:c8:be:1a:7e:b3:88:
                    52:19:b2:ab:0e:98:73:4c:0e:75:1b:41:6c:a6:35:
                    e1:3a:92:ec:be:8b:1b:11:6b:65:69:62:96:4b:4f:
                    2c:3a:2b:24:52:ca:5c:5a:c8:47:75:59:e2:d7:c7:
                    4d:45:73:6d:11:35:19:1e:8c:4e:ea:41:9c:01:f8:
                    98:87:9c:bc:d3:29:eb:36:7b:6b:c7:5c:b1:e5:01:
                    f3:8e:c3:7a:bf:2b:77:ec:27:6e:5c:38:5c:96:01:
                    6d:9a:fd:39:d6:b3:69:a0:0e:21:69:60:c0:b6:19:
                    91:fe:db:49:3a:86:5a:66:24:ab:c3:ee:80:5f:5c:
                    39:32:32:c6:e0:11:72:88:aa:26:bc:f5:79:fa:91:
                    49:b9:12:46:95:ff:f8:e0:20:95:31:4b:bf:f1:aa:
                    30:2b:39:0a:5b:a2:df:aa:4a:c1:60:21:3e:48:cc:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:03:C0:A7:03:5D:B2:3D:7B:67:15:9A:60:F2:61:93:B6:2F:D9:E3
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:3a:ce:ea:4a:64:62:5c:8b:1c:bd:43:a4:12:af:75:4f:
         41:34:5a:87:53:af:3a:6f:28:88:54:b6:6c:39:60:e7:85:8a:
         b7:07:30:51:b6:d9:1c:90:8a:cf:4a:14:bc:bb:41:05:33:ec:
         74:03:d8:b5:06:eb:45:38:62:ca:e3:11:a8:cd:14:82:35:0a:
         6b:2b:fd:0e:a9:a0:f2:32:5f:09:56:91:35:5e:ac:0f:5c:91:
         d2:ce:9e:45:28:c7:2b:56:f8:65:e6:55:8b:a8:2c:64:12:15:
         ad:22:f1:f0:c6:20:99:d5:9a:b5:c5:cf:2d:19:89:6e:02:5a:
         f4:56:be:38:df:8f:75:ad:c5:8b:de:9b:a5:56:f1:55:03:26:
         58:16:ac:15:70:10:28:85:d2:af:41:89:86:46:1c:72:b2:bc:
         02:21:c5:33:1a:e0:e9:0a:74:d1:ae:63:b5:46:60:50:b5:42:
         0a:17:38:c6:1d:73:a6:09:8d:90:43:ca:88:fa:3f:92:58:1b:
         e0:4c:50:24:b0:75:90:92:8a:0d:7a:46:c2:31:86:d5:99:ab:
         73:da:67:66:fc:2c:93:b6:ae:36:ab:7c:61:53:59:af:d7:49:
         84:b0:26:59:8d:85:6f:e7:5b:9e:05:df:b1:3d:c4:75:b9:cf:
         82:64:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:17 2026 by rpki-client