This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File:                     RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier:          6WwJXR6mhf7KZoTlUY4JQf5NJ2M2lVq9EtcP05leOwI=
Subject key identifier:   D1:19:C9:B2:C9:68:B1:07:BC:3D:98:EE:66:3F:97:78:5D:7C:50:B0
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer:       /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial:       019C1CF107600F8290DF6A64E9B62C9A4C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number:          17FE
Signing time:             Mon 02 Feb 2026 06:01:23 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:23 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:23 +0000
Files and hashes:         1: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
                          2: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: tzjS5Ki+7OimcjJ5bygObB4u018ivz9iuAay8YuIHs0=)
                          3: W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (hash: UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f1:07:60:0f:82:90:df:6a:64:e9:b6:2c:9a:4c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
        Validity
            Not Before: Feb  2 06:01:23 2026 GMT
            Not After : Feb  3 06:01:23 2026 GMT
        Subject: CN=d119c9b2c968b107bc3d98ee663f97785d7c50b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:32:d9:41:4d:47:13:e6:df:88:01:33:ea:
                    38:81:91:4f:3a:43:2a:c5:1b:b4:a9:37:93:29:2c:
                    6a:3a:b5:a8:80:0b:d0:e9:ac:5a:d1:41:6e:86:dc:
                    c7:46:ca:b4:5a:a1:34:89:5f:f5:16:63:cd:59:03:
                    5d:17:38:21:bb:9f:cb:8f:4d:6c:cc:24:f8:84:67:
                    82:7c:01:fb:b7:b3:34:33:eb:4e:bf:8c:89:23:1b:
                    4c:f8:11:92:c9:69:df:31:c6:24:47:65:ce:ee:9f:
                    a6:d8:72:a0:5e:72:20:60:b9:ca:6e:52:51:84:96:
                    64:02:91:88:11:6b:4d:48:af:53:8b:86:52:de:f3:
                    11:23:97:44:c0:47:33:d1:62:01:4a:93:09:e0:62:
                    ca:8c:58:71:10:cb:91:0d:b3:8d:07:03:69:05:3b:
                    4f:68:34:49:72:fd:5b:86:b1:ba:53:02:6b:eb:fd:
                    72:12:c9:65:c6:de:c2:9f:4d:51:82:01:86:ff:c1:
                    b7:fc:6f:bf:66:83:4c:76:7f:c4:b1:11:16:58:7d:
                    6c:92:60:94:08:13:fe:9f:6e:29:ef:89:3e:f0:65:
                    35:82:cf:d7:34:70:bd:ed:ea:fd:d1:aa:32:32:d4:
                    cd:81:26:01:4a:44:e8:e2:86:09:1c:0e:1d:87:67:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:19:C9:B2:C9:68:B1:07:BC:3D:98:EE:66:3F:97:78:5D:7C:50:B0
            X509v3 Authority Key Identifier:
                keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:54:7e:5a:5b:b2:54:c5:0b:20:65:6d:71:1e:28:6e:d2:5d:
         d6:e6:c8:f1:48:ee:5d:db:73:4a:d1:b1:81:31:34:32:fd:20:
         5a:5a:de:3a:c7:a2:47:86:a9:69:20:7f:0c:d5:86:a3:c0:d6:
         ed:c0:60:34:28:c5:38:a4:4e:84:fb:fe:f8:d3:74:95:37:0b:
         58:b2:7e:f3:f9:46:10:0c:0a:64:92:f3:59:99:f8:49:12:5f:
         7d:25:dc:41:e4:1a:19:2c:25:54:3e:0c:09:9e:e3:fc:5c:89:
         a6:5e:52:d1:70:4c:53:cd:a1:23:d4:fc:5f:02:57:70:bb:6e:
         d3:39:11:d4:78:23:86:50:e3:d7:60:13:9f:b7:1d:10:a4:b5:
         5f:68:5a:28:ec:64:5f:b7:69:46:75:24:07:a3:1d:dd:76:c4:
         4f:26:1e:13:1c:7a:3e:e0:ad:93:33:a9:20:89:60:12:50:17:
         2e:8e:c0:12:01:28:01:8c:25:bf:4e:24:24:5a:ab:d3:94:ee:
         3c:0a:cd:c2:df:2c:7d:35:2a:67:9d:74:d6:8d:74:7c:14:7a:
         d0:4d:a8:e9:bd:53:a1:09:4a:00:79:b7:b3:06:8e:2c:54:8d:
         77:ff:2a:63:b0:f9:a3:e3:58:17:23:39:6f:89:35:b0:ce:28:
         38:37:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:49 2026 by rpki-client