This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          ZBvG7cFqg6F43jjfE3jsRTsYNRfW7u8gACBbzgaHIqQ=
Subject key identifier:   45:F5:18:ED:D3:35:4A:61:FD:59:0A:AB:DF:23:FF:39:DD:27:91:EE
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019C2850268E3658F3A218DF83567F514255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          182E
Signing time:             Wed 04 Feb 2026 11:01:07 +0000
Manifest this update:     Wed 04 Feb 2026 11:01:07 +0000
Manifest next update:     Thu 05 Feb 2026 11:01:07 +0000
Files and hashes:         1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: /07kw3LVHRCZ3D3x1vWEVMWjQhiIR10FDDOsfdO7s94=)
                          3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
                          4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
                          5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:50:26:8e:36:58:f3:a2:18:df:83:56:7f:51:42:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Feb  4 11:01:07 2026 GMT
            Not After : Feb  5 11:01:07 2026 GMT
        Subject: CN=45f518edd3354a61fd590aabdf23ff39dd2791ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:5f:09:15:c1:a9:84:9e:cc:4e:3f:88:90:
                    34:b2:c2:d1:b2:0d:b9:74:e8:64:3d:aa:11:39:a9:
                    df:86:99:76:e7:c2:bd:e4:d5:4c:f6:28:25:8c:aa:
                    84:1a:d6:a7:45:2f:68:e8:f9:06:86:1b:c8:69:18:
                    39:20:dc:c8:30:00:18:c1:4b:c3:5a:c6:3e:4e:52:
                    28:65:2b:c4:74:9e:19:6b:30:58:95:8d:33:48:cd:
                    fe:7a:b1:14:c0:5d:d8:f0:bf:aa:a1:05:a8:e7:65:
                    2e:0e:0e:9e:05:4e:ac:97:8b:56:29:ea:40:45:12:
                    ee:da:9f:f5:e3:af:d6:70:98:67:81:4b:5f:06:b3:
                    88:50:40:3a:7b:df:ec:6d:b5:ac:76:20:a6:88:ed:
                    db:be:00:ed:70:82:db:17:d8:6b:29:c2:6f:df:2b:
                    70:15:a8:72:28:ba:c1:aa:7f:77:d7:27:0c:87:f6:
                    1d:56:fe:c4:22:4c:4b:b0:ed:63:ae:3b:3f:36:dd:
                    b0:e0:db:9e:b2:eb:03:82:f1:f1:1b:4e:58:3a:82:
                    d2:ee:0c:e2:dc:2d:6b:1a:a6:bf:b0:81:79:b0:50:
                    bd:e1:a7:05:d9:80:c8:cc:4f:ca:1f:2d:fd:c2:3e:
                    05:b7:57:57:c3:3f:13:94:02:8f:90:93:c1:50:13:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F5:18:ED:D3:35:4A:61:FD:59:0A:AB:DF:23:FF:39:DD:27:91:EE
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:83:bb:7f:51:9e:df:e9:9a:56:ba:12:e4:77:68:70:a7:e9:
         07:c5:cf:ab:7d:42:c6:fc:e6:5c:16:29:f5:f9:0d:31:20:0f:
         50:1d:fe:29:b4:62:d5:ce:30:56:6b:03:25:c7:ef:79:dd:dc:
         b7:d3:27:fc:12:a8:fd:a6:8c:97:31:ea:d4:d9:36:8b:be:55:
         29:e1:2e:d9:9e:e0:8c:48:cf:66:8b:4b:92:70:ed:a1:f7:0b:
         50:8e:28:b0:81:76:10:d7:a5:0f:74:0c:8d:f3:dc:a8:57:43:
         54:bf:eb:bf:8d:4f:aa:af:5f:87:c5:d2:d8:10:97:1b:e0:93:
         7a:7b:04:01:7a:d0:25:96:20:c5:49:5c:93:e7:e9:00:18:98:
         5e:97:d4:57:8b:83:82:21:2b:f9:fa:e3:f3:83:18:57:4a:a8:
         cb:94:25:86:5c:e7:eb:e5:b4:f2:0f:ef:28:0b:ab:8e:c0:6f:
         33:b8:a6:69:1d:b3:b5:cb:72:12:40:a3:e5:4c:6b:4e:d0:eb:
         29:99:55:01:e2:1c:a1:65:8e:3e:16:c1:ab:93:fb:bb:9f:51:
         64:37:a7:89:e5:af:aa:aa:d0:b2:e7:d4:ca:45:0a:3d:c2:aa:
         5e:f4:4e:ea:90:b8:dd:f9:d2:b1:39:8f:be:bf:64:6a:d1:d2:
         b8:31:a1:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwoUCaONljzohjfg1Z/UUJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjYwMjA0MTEwMTA3WhcNMjYwMjA1MTEwMTA3WjAzMTEwLwYDVQQD
Eyg0NWY1MThlZGQzMzU0YTYxZmQ1OTBhYWJkZjIzZmYzOWRkMjc5MWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugxfCRXBqYSezE4/iJA0ssLRsg25
dOhkPaoROanfhpl258K95NVM9igljKqEGtanRS9o6PkGhhvIaRg5INzIMAAYwUvD
WsY+TlIoZSvEdJ4ZazBYlY0zSM3+erEUwF3Y8L+qoQWo52UuDg6eBU6sl4tWKepA
RRLu2p/146/WcJhngUtfBrOIUEA6e9/sbbWsdiCmiO3bvgDtcILbF9hrKcJv3ytw
FahyKLrBqn931ycMh/YdVv7EIkxLsO1jrjs/Nt2w4NuesusDgvHxG05YOoLS7gzi
3C1rGqa/sIF5sFC94acF2YDIzE/KHy39wj4Ft1dXwz8TlAKPkJPBUBP8uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX1GO3TNUph/VkKq98j/zndJ5HuMB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4O7f1Ge
3+maVroS5HdocKfpB8XPq31CxvzmXBYp9fkNMSAPUB3+KbRi1c4wVmsDJcfved3c
t9Mn/BKo/aaMlzHq1Nk2i75VKeEu2Z7gjEjPZotLknDtofcLUI4osIF2ENelD3QM
jfPcqFdDVL/rv41Pqq9fh8XS2BCXG+CTensEAXrQJZYgxUlck+fpABiYXpfUV4uD
giEr+frj84MYV0qoy5Qlhlzn6+W08g/vKAurjsBvM7imaR2ztctyEkCj5UxrTtDr
KZlVAeIcoWWOPhbBq5P7u59RZDenieWvqqrQsufUykUKPcKqXvRO6pC43fnSsTmP
vr9katHSuDGhAA==
-----END CERTIFICATE-----
Generated at Wed Feb 4 14:13:12 2026 by rpki-client