This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File:                     t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier:          5YsMaaQSXO4Agl1VLUXry+jaGmI5A61w69hN833Nias=
Subject key identifier:   4F:A9:FF:F6:A1:57:F0:15:54:8C:2F:CB:6E:9A:B4:5A:9E:7B:35:8F
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer:       /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial:       019C1D27D148264EA16B2C3C40790E08618F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number:          124E
Signing time:             Mon 02 Feb 2026 07:01:14 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:14 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:14 +0000
Files and hashes:         1: 6Ftx8Zws0EArRVC2i8S0_U_teiE.roa (hash: 7fbXsad6LDVhAfWE8WJEJDQ3QGP+dEI28LUew1x9B8A=)
                          2: 9KyR_UDLctrtTTdIj8zaeFvcX6U.asa (hash: U5PQzu4dr+B2uxtoMJzepcrIcGyWSPWFAKzaqqVTf0o=)
                          3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: APGMM75hUBcj76CZMbrFld8PcrwHmKCySZVGc0AzW00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:d1:48:26:4e:a1:6b:2c:3c:40:79:0e:08:61:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
        Validity
            Not Before: Feb  2 07:01:14 2026 GMT
            Not After : Feb  3 07:01:14 2026 GMT
        Subject: CN=4fa9fff6a157f015548c2fcb6e9ab45a9e7b358f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:3e:54:c4:b5:59:97:5b:e4:7d:35:1d:de:
                    27:5a:f6:1b:df:72:7c:ec:27:35:c2:d1:51:fd:00:
                    1e:f1:d5:c2:b3:6a:17:c7:71:20:dc:2a:6e:9b:e3:
                    04:04:f9:eb:d9:aa:7c:15:db:0e:62:6a:43:bf:2d:
                    c6:d5:0d:6d:a3:e7:5b:f9:9b:77:3d:b0:7b:2d:8d:
                    4a:0b:28:e3:63:1c:fb:d7:bd:eb:18:67:4c:50:b9:
                    19:9d:64:07:7d:9f:2e:56:2e:b5:00:41:d8:e2:14:
                    79:c6:4a:96:6a:8b:b9:32:a5:62:87:f4:9d:52:36:
                    86:46:f0:88:b2:42:5b:66:36:5f:98:ac:d0:3f:41:
                    ee:29:2f:bf:94:95:c8:82:ac:7e:a1:fc:e9:96:1d:
                    3d:58:fc:90:3f:2e:d0:93:c6:56:45:f7:89:9b:fb:
                    e9:fd:6a:f6:ea:dc:1f:3c:7b:1a:29:d7:98:f6:a5:
                    fa:4b:58:c9:c6:2c:47:6f:48:2e:4f:91:2b:ed:7c:
                    53:f9:4e:28:aa:0c:ff:5e:3f:59:ff:12:1f:19:1c:
                    83:c6:a4:a7:eb:4a:c4:21:04:03:ee:d3:df:25:ff:
                    d9:12:10:43:d5:6a:8b:bd:34:72:75:b6:89:e1:9d:
                    12:3b:eb:00:a0:01:23:64:cc:82:85:4a:ae:c6:52:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:FF:F6:A1:57:F0:15:54:8C:2F:CB:6E:9A:B4:5A:9E:7B:35:8F
            X509v3 Authority Key Identifier:
                keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:06:e6:ab:3c:dc:68:52:95:e3:c1:67:34:4c:45:0d:0b:
         43:2c:65:21:16:50:30:5e:8a:5d:ad:65:91:2b:74:f0:c2:d1:
         ca:9e:03:3c:7d:84:eb:ad:44:d7:eb:64:04:71:20:72:1e:6e:
         96:39:e5:67:f6:79:96:4f:76:cc:e8:cd:ef:03:b7:60:e6:ca:
         75:d9:b3:c7:45:68:2b:b2:e1:10:6a:c7:bb:fe:e7:55:47:70:
         8c:c3:dd:b8:79:59:9c:63:24:83:11:97:67:83:2f:f8:28:32:
         d2:9d:b9:db:e1:e6:23:58:c4:66:39:d0:e7:37:82:12:94:7d:
         18:96:f5:63:14:9e:01:85:9a:5d:d8:6b:98:3f:c0:d8:8c:79:
         30:c8:cf:b5:ed:a8:fc:fe:d4:7a:7a:ec:b4:7e:41:95:35:0b:
         2d:5a:87:80:24:74:77:2e:60:49:e3:b0:c1:f9:f9:5f:21:60:
         4a:e1:15:38:e9:7b:33:f7:03:da:d1:39:37:fa:13:71:3a:19:
         6f:a2:83:df:c0:32:d3:72:4b:b4:15:9e:8e:39:ff:10:4c:20:
         42:e7:bc:c0:d8:c9:25:72:a4:6f:93:96:81:22:72:53:99:98:
         a2:ec:07:0c:96:d9:ef:0d:b4:08:48:88:a8:f0:57:6f:fc:ec:
         85:40:1a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdJ9FIJk6hayw8QHkOCGGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw
NzdhNzgwHhcNMjYwMjAyMDcwMTE0WhcNMjYwMjAzMDcwMTE0WjAzMTEwLwYDVQQD
Eyg0ZmE5ZmZmNmExNTdmMDE1NTQ4YzJmY2I2ZTlhYjQ1YTllN2IzNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+M+VMS1WZdb5H01Hd4nWvYb33J8
7Cc1wtFR/QAe8dXCs2oXx3Eg3Cpum+MEBPnr2ap8FdsOYmpDvy3G1Q1to+db+Zt3
PbB7LY1KCyjjYxz7173rGGdMULkZnWQHfZ8uVi61AEHY4hR5xkqWaou5MqVih/Sd
UjaGRvCIskJbZjZfmKzQP0HuKS+/lJXIgqx+ofzplh09WPyQPy7Qk8ZWRfeJm/vp
/Wr26twfPHsaKdeY9qX6S1jJxixHb0guT5Er7XxT+U4oqgz/Xj9Z/xIfGRyDxqSn
60rEIQQD7tPfJf/ZEhBD1WqLvTRydbaJ4Z0SO+sAoAEjZMyChUquxlI0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+p//ahV/AVVIwvy26atFqeezWPMB8GA1UdIwQY
MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt
ZDU0OTIxNjA0ZWNkLzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk
LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONAG5qs8
3GhSlePBZzRMRQ0LQyxlIRZQMF6KXa1lkSt08MLRyp4DPH2E661E1+tkBHEgch5u
ljnlZ/Z5lk92zOjN7wO3YObKddmzx0VoK7LhEGrHu/7nVUdwjMPduHlZnGMkgxGX
Z4Mv+Cgy0p252+HmI1jEZjnQ5zeCEpR9GJb1YxSeAYWaXdhrmD/A2Ix5MMjPte2o
/P7UenrstH5BlTULLVqHgCR0dy5gSeOwwfn5XyFgSuEVOOl7M/cD2tE5N/oTcToZ
b6KD38Ay03JLtBWejjn/EEwgQue8wNjJJXKkb5OWgSJyU5mYouwHDJbZ7w20CEiI
qPBXb/zshUAa3w==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:49 2026 by rpki-client