This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File:                     PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier:          /y9gM3JIfKBzc26RjI2EnYoh9kEF4Pl5iGctk3udjhY=
Subject key identifier:   73:36:26:AA:86:1D:D8:46:80:09:F5:46:B2:B3:AE:A7:EB:3D:00:E8
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer:       /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial:       019C420FE7F6D61623DD004F56FCCE3CE242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number:          15E1
Signing time:             Mon 09 Feb 2026 11:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:04 +0000
Files and hashes:         1: 9JqUzmhn979MzWUxIBT2RPIOS8A.roa (hash: rkzdzZw7cy8e5NHHoY93mCGwkkZGsYaobB+ZGaI78YQ=)
                          2: K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa (hash: j1Pyv97hL7TS1MOu3SXdm7zFyMsZ0tV3SkgI1mKBoHI=)
                          3: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: 7fQvGLK++wiqMSA9+spL/cKPZbHDFdj3DnKKzYndA0c=)
                          4: Vh01heQZwiiV-5U2YWUI9ETdNp0.roa (hash: NerAxUNFCszCX2X5F5Gpmh7sivfYufWqTOLrM/cv+gM=)
                          5: tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa (hash: 2UYLL/RMvv9f6KttdupVfDP+HWvUuHhv7cOVMA+gdLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:e7:f6:d6:16:23:dd:00:4f:56:fc:ce:3c:e2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
        Validity
            Not Before: Feb  9 11:01:04 2026 GMT
            Not After : Feb 10 11:01:04 2026 GMT
        Subject: CN=733626aa861dd8468009f546b2b3aea7eb3d00e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:a3:ff:b1:d5:37:d0:03:4a:24:4e:e3:5d:
                    a1:d7:c3:2f:e6:11:8c:3e:eb:e8:99:8f:67:66:36:
                    74:e4:42:ae:db:6e:86:79:d5:c3:4c:5f:2f:6c:c6:
                    86:ba:47:20:70:a6:dd:4a:8b:5a:6e:62:a7:44:3d:
                    a0:88:9f:8d:cf:1f:0c:eb:7d:9e:ff:c3:cd:fd:5e:
                    a2:43:84:30:9b:25:f3:f9:55:1b:14:18:1f:2f:38:
                    ed:5a:44:10:31:bb:27:d6:42:da:68:21:92:ab:9b:
                    71:4c:08:b0:2b:45:a4:7e:b8:7f:55:c0:a0:30:6f:
                    32:df:68:10:30:91:63:24:7a:2b:15:24:c7:6b:bf:
                    1d:35:09:05:1e:dc:e7:83:26:09:47:6b:30:09:db:
                    46:e0:b1:2b:d9:e2:ac:c0:32:74:20:82:dc:1f:80:
                    88:9e:5d:0b:9e:17:3b:e3:38:d2:cb:2b:99:48:7c:
                    fe:fb:06:c7:61:6e:e4:d9:0c:c8:7a:44:a2:b0:6a:
                    df:a7:2f:1d:a3:04:8f:92:3c:c4:21:15:19:47:70:
                    1b:38:80:b3:68:e4:ff:dc:54:54:97:35:45:a3:91:
                    61:12:89:b1:d6:41:d3:3f:02:ff:36:fe:9c:50:10:
                    62:47:f2:75:7f:17:01:08:6f:71:7f:e9:5e:d6:c8:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:26:AA:86:1D:D8:46:80:09:F5:46:B2:B3:AE:A7:EB:3D:00:E8
            X509v3 Authority Key Identifier:
                keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:56:30:d6:c8:e5:80:ac:2f:98:ed:2a:42:16:a0:41:92:8d:
         1b:de:95:89:78:97:84:98:f1:0f:f2:46:bc:d6:99:83:27:4e:
         97:ec:3d:25:bf:61:64:1c:24:4f:f5:48:d9:ea:d7:15:e2:30:
         cd:b4:f5:6d:aa:bc:98:f7:c7:d2:9c:b3:79:8c:d1:0d:fa:ab:
         5c:cc:6d:3b:33:76:4d:8d:99:b1:05:c0:1b:67:44:00:00:a3:
         97:1d:f0:b8:b7:09:9d:d9:7b:ba:0e:74:cd:d1:02:ad:8c:5c:
         c4:71:41:68:9c:ff:b1:a2:9f:a5:7f:55:87:5b:02:27:90:d6:
         04:0b:17:55:55:c6:05:30:fa:14:58:1f:74:4d:5f:ca:7e:e5:
         55:06:e2:66:57:8d:aa:26:f3:23:36:f3:49:20:b6:3b:7b:e0:
         22:98:e2:b2:03:26:b9:61:97:08:23:64:2d:cb:e7:a7:61:e6:
         67:11:2f:94:ff:a9:14:86:eb:13:3b:e0:0e:c9:7d:29:d1:5d:
         1d:73:df:d9:b3:79:ff:70:50:8a:87:1e:fb:d9:fc:a5:c1:d9:
         85:9e:fd:d9:10:b3:49:41:04:0d:a8:bd:05:6e:ee:83:b9:2f:
         85:bc:04:93:6f:04:b6:c6:c9:0a:c9:a6:76:3a:dc:86:d1:60:
         52:12:e5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD+f21hYj3QBPVvzOPOJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4
NmU5YTAwHhcNMjYwMjA5MTEwMTA0WhcNMjYwMjEwMTEwMTA0WjAzMTEwLwYDVQQD
Eyg3MzM2MjZhYTg2MWRkODQ2ODAwOWY1NDZiMmIzYWVhN2ViM2QwMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yij/7HVN9ADSiRO412h18Mv5hGM
PuvomY9nZjZ05EKu226GedXDTF8vbMaGukcgcKbdSotabmKnRD2giJ+Nzx8M632e
/8PN/V6iQ4QwmyXz+VUbFBgfLzjtWkQQMbsn1kLaaCGSq5txTAiwK0Wkfrh/VcCg
MG8y32gQMJFjJHorFSTHa78dNQkFHtzngyYJR2swCdtG4LEr2eKswDJ0IILcH4CI
nl0Lnhc74zjSyyuZSHz++wbHYW7k2QzIekSisGrfpy8dowSPkjzEIRUZR3AbOICz
aOT/3FRUlzVFo5FhEomx1kHTPwL/Nv6cUBBiR/J1fxcBCG9xf+le1siDwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM2JqqGHdhGgAn1RrKzrqfrPQDoMB8GA1UdIwQY
MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt
MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji
LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFYw1sjl
gKwvmO0qQhagQZKNG96ViXiXhJjxD/JGvNaZgydOl+w9Jb9hZBwkT/VI2erXFeIw
zbT1baq8mPfH0pyzeYzRDfqrXMxtOzN2TY2ZsQXAG2dEAACjlx3wuLcJndl7ug50
zdECrYxcxHFBaJz/saKfpX9Vh1sCJ5DWBAsXVVXGBTD6FFgfdE1fyn7lVQbiZleN
qibzIzbzSSC2O3vgIpjisgMmuWGXCCNkLcvnp2HmZxEvlP+pFIbrEzvgDsl9KdFd
HXPf2bN5/3BQioce+9n8pcHZhZ792RCzSUEEDai9BW7ug7kvhbwEk28EtsbJCsmm
djrchtFgUhLlbA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:45 2026 by rpki-client