This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File:                     _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier:          3vXsd/UPp0ojL4PKjpIDFol7hvFfzyqWEzLer/jZRQI=
Subject key identifier:   3F:E3:E0:82:1F:EF:91:02:93:2B:9C:4F:1A:30:2B:6E:D6:7D:32:A1
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer:       /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial:       019C43905D5B5616952ABBC03DA7A19BACD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number:          08CD
Signing time:             Mon 09 Feb 2026 18:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:00 +0000
Files and hashes:         1: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (hash: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA=)
                          2: E1CobbzuSopIQ25v8bXg7-wkG08.roa (hash: IoeE+7y8I3rHs6C9VTnXoHgwAPKPkZzWiNKhUaIZbC0=)
                          3: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (hash: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo=)
                          4: WeKOa0H0czOL8IIE6VOIs9H9HXM.roa (hash: HnR5cSodno/i5GR28495C4j2bGZUas8Sx3TSjsOhefE=)
                          5: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: jPGgvDh82/d7lliL4G0AiyjZjZBtRU3ACddP3r1Qafw=)
                          6: lR8if6ppIPbhohYi1ZftYsaVivM.roa (hash: tWsT29WceBlnruoO07mkklZjKl8F3YK8Bj14J12SHEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:5d:5b:56:16:95:2a:bb:c0:3d:a7:a1:9b:ac:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
        Validity
            Not Before: Feb  9 18:01:00 2026 GMT
            Not After : Feb 10 18:01:00 2026 GMT
        Subject: CN=3fe3e0821fef9102932b9c4f1a302b6ed67d32a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:6e:e6:4a:92:cb:fd:41:0f:79:d4:d1:45:
                    0a:69:c0:d7:0f:ac:94:cc:53:d9:54:39:86:cf:36:
                    4c:a0:09:0e:dd:c7:3a:69:12:b6:cb:3b:30:f0:09:
                    ce:35:13:18:ec:23:b8:34:d5:8c:92:dc:57:22:cf:
                    59:fa:28:0a:5c:82:45:4f:af:8a:ef:03:99:de:7f:
                    fa:b5:96:d1:c9:60:7b:29:0d:92:8a:88:a6:29:8b:
                    70:63:78:f5:b6:19:34:c8:b4:95:a3:ff:72:0e:ea:
                    01:3f:06:79:b6:61:ae:92:e5:ec:05:a8:6b:40:82:
                    e7:5f:ee:82:93:c2:27:3b:85:56:b1:1d:86:5a:26:
                    d9:88:81:79:5d:52:4d:be:ca:79:61:83:a8:e2:ff:
                    f5:8d:90:80:ec:07:94:c5:73:14:b2:0b:60:63:35:
                    b9:30:c2:77:73:c1:50:bb:a0:28:58:18:41:33:e3:
                    8d:0e:93:27:f8:32:46:44:05:75:f3:de:f4:e9:7d:
                    74:cb:86:4b:67:a0:5b:99:14:df:37:11:18:99:9f:
                    f6:35:20:c6:77:95:82:b5:52:70:da:6d:29:a0:51:
                    16:32:cb:f1:ce:60:77:70:5b:cd:22:f4:c4:01:ed:
                    5b:10:64:ae:d1:c9:42:f5:14:c9:b8:58:d1:78:e7:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E3:E0:82:1F:EF:91:02:93:2B:9C:4F:1A:30:2B:6E:D6:7D:32:A1
            X509v3 Authority Key Identifier:
                keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:41:25:63:54:24:bd:49:03:8c:dc:c8:4c:b8:7a:63:eb:d9:
         ff:cd:00:d4:c9:a5:28:b7:77:46:f6:b3:86:7e:58:b6:37:bf:
         b4:f0:47:c2:83:81:67:33:7a:3f:b6:b1:3a:a9:7e:6a:54:3c:
         1b:59:40:a6:04:e3:44:a8:ec:a2:d2:7f:7d:e1:03:a0:f8:13:
         51:6f:77:01:c0:ef:ed:ed:6a:64:f6:61:64:a4:0f:89:c5:46:
         6a:ed:39:c7:62:57:2c:d8:9c:93:4a:f8:39:42:93:d2:74:91:
         11:9c:91:4a:f1:48:91:24:4a:6e:6a:c3:2e:cc:18:27:4e:71:
         ba:34:cc:44:62:21:c9:ca:f8:2f:0f:a6:db:a5:7c:13:4e:49:
         2d:03:43:f9:f8:20:fc:63:d5:7e:7f:8c:33:ef:14:c6:9d:96:
         d8:ae:2d:e2:39:1c:9a:92:98:b6:b6:a6:e4:b8:49:e8:a3:f8:
         c9:55:c8:ce:ef:45:70:39:5d:3c:a6:62:1f:37:4e:87:7d:24:
         a4:a5:33:a9:f7:59:b7:20:db:9e:63:69:5c:78:45:41:73:01:
         f1:52:4c:ab:6e:07:48:1a:0e:92:ee:92:9c:ee:10:8a:da:5b:
         5b:3f:fc:73:29:56:be:38:50:b3:a2:65:92:98:7c:d6:d4:d5:
         23:a6:be:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkF1bVhaVKrvAPaehm6zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3
N2M2M2QwHhcNMjYwMjA5MTgwMTAwWhcNMjYwMjEwMTgwMTAwWjAzMTEwLwYDVQQD
EygzZmUzZTA4MjFmZWY5MTAyOTMyYjljNGYxYTMwMmI2ZWQ2N2QzMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDZu5kqSy/1BD3nU0UUKacDXD6yU
zFPZVDmGzzZMoAkO3cc6aRK2yzsw8AnONRMY7CO4NNWMktxXIs9Z+igKXIJFT6+K
7wOZ3n/6tZbRyWB7KQ2SioimKYtwY3j1thk0yLSVo/9yDuoBPwZ5tmGukuXsBahr
QILnX+6Ck8InO4VWsR2GWibZiIF5XVJNvsp5YYOo4v/1jZCA7AeUxXMUsgtgYzW5
MMJ3c8FQu6AoWBhBM+ONDpMn+DJGRAV189706X10y4ZLZ6BbmRTfNxEYmZ/2NSDG
d5WCtVJw2m0poFEWMsvxzmB3cFvNIvTEAe1bEGSu0clC9RTJuFjReOcWiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/j4IIf75ECkyucTxowK27WfTKhMB8GA1UdIwQY
MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt
MDZhNDA0NDM1ZTUwLzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw
LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkElY1Qk
vUkDjNzITLh6Y+vZ/80A1MmlKLd3Rvazhn5Ytje/tPBHwoOBZzN6P7axOql+alQ8
G1lApgTjRKjsotJ/feEDoPgTUW93AcDv7e1qZPZhZKQPicVGau05x2JXLNick0r4
OUKT0nSREZyRSvFIkSRKbmrDLswYJ05xujTMRGIhycr4Lw+m26V8E05JLQND+fgg
/GPVfn+MM+8Uxp2W2K4t4jkcmpKYtram5LhJ6KP4yVXIzu9FcDldPKZiHzdOh30k
pKUzqfdZtyDbnmNpXHhFQXMB8VJMq24HSBoOku6SnO4QitpbWz/8cylWvjhQs6Jl
kph81tTVI6a+RA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:46 2026 by rpki-client