This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File:                     pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier:          D3aYX/Do5XaAAyJuM0QjrjKysxsEhhD1+9bqXf2/Wik=
Subject key identifier:   68:02:37:A5:E8:F6:7A:B3:37:92:41:56:85:5E:99:B0:A2:18:C1:B1
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer:       /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial:       019C4322928BC5F06E188F5B28F0B68FDC27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number:          0EAC
Signing time:             Mon 09 Feb 2026 16:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:04 +0000
Files and hashes:         1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
                          2: VIGUNtTXYpclXyZXmVAxQ0EH1q4.roa (hash: y5H8XVjLD/jKC2BEOIJM9gDS13dnO296qUWYlA59798=)
                          3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: ly2liNXYas6EbES0UZz0h5EtJaMLdSvr/LR/I53UhLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:92:8b:c5:f0:6e:18:8f:5b:28:f0:b6:8f:dc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
        Validity
            Not Before: Feb  9 16:01:04 2026 GMT
            Not After : Feb 10 16:01:04 2026 GMT
        Subject: CN=680237a5e8f67ab337924156855e99b0a218c1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ad:2f:22:7e:4e:c4:a3:31:67:73:ea:86:b8:
                    7d:0d:df:b3:90:86:7d:37:54:e2:1f:b1:98:a3:a6:
                    bb:23:f3:39:0f:b2:d2:0c:3d:43:02:b8:b4:8f:8d:
                    bf:5a:24:62:7d:fc:3a:b0:f1:86:bb:1e:e7:35:31:
                    78:86:c2:8a:ce:8e:74:85:25:a0:13:7b:7d:b3:87:
                    3b:80:51:03:91:a2:10:47:c0:c2:d5:00:e6:55:88:
                    a0:e5:e0:e4:73:d1:3a:71:37:52:a8:48:cb:fc:fe:
                    52:f5:5e:26:2f:21:10:c3:6a:80:f0:aa:dd:d9:46:
                    16:39:ed:f9:0f:e8:51:f4:8a:74:7e:9f:64:4a:45:
                    43:21:74:f6:57:cb:b5:87:62:96:81:13:da:c5:6f:
                    69:cd:7e:78:ed:db:f7:8d:f5:01:06:e3:79:32:93:
                    8e:f9:de:20:ad:b5:4c:8a:4f:1d:92:a4:81:91:9e:
                    e2:f8:07:f8:62:f4:4c:eb:2f:a7:91:f0:16:06:44:
                    a4:7b:bc:94:eb:fc:53:30:8c:5c:da:c2:26:99:1b:
                    30:1b:d6:c3:37:50:9c:6e:87:a4:82:d8:12:50:4f:
                    ae:ff:8d:a3:60:4a:ad:73:04:76:20:1b:a3:bf:20:
                    56:1e:e1:e7:b5:80:be:a3:46:38:1e:cf:e1:33:5a:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:02:37:A5:E8:F6:7A:B3:37:92:41:56:85:5E:99:B0:A2:18:C1:B1
            X509v3 Authority Key Identifier:
                keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:7e:5d:99:48:c8:50:ae:2f:8f:7b:bd:1d:d3:01:f1:2c:
         be:84:10:07:e7:fb:57:c4:94:4d:f7:54:79:b8:99:bd:b6:ce:
         09:b1:4a:85:21:4e:8f:13:99:97:f1:4b:50:78:fc:fb:0e:96:
         9a:7d:21:b2:1a:cc:c7:e2:37:20:04:73:e8:f7:8f:37:6e:a2:
         e7:15:20:98:ef:fa:43:a8:e5:04:12:90:33:0d:3d:51:b9:a9:
         ba:62:04:2f:6a:7a:fb:35:7e:a2:ee:c1:a6:7b:d9:7f:98:0d:
         0c:86:a3:18:89:49:7e:33:51:72:b7:72:ee:c5:49:7f:aa:9a:
         40:30:d9:10:da:32:05:7e:76:58:57:bd:01:c4:d3:97:22:36:
         53:39:ee:da:08:9c:3b:13:2d:ad:77:3e:53:83:83:d7:d0:ab:
         80:ce:0a:c3:d8:cf:9f:b1:17:94:b0:8b:55:25:8e:48:b6:06:
         05:53:1c:be:a2:02:90:9a:a1:de:eb:59:fa:52:99:44:fe:76:
         ca:0b:8b:88:01:af:e6:20:cb:49:ff:1c:34:98:c8:0a:40:5e:
         8b:da:a7:07:da:50:3c:7b:c8:ea:11:e7:7b:fc:d8:bd:69:87:
         33:b7:e8:a3:32:41:3d:88:7f:b4:12:ae:13:a9:77:c7:35:f6:
         79:be:c7:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIpKLxfBuGI9bKPC2j9wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4
MWYzY2IwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD
Eyg2ODAyMzdhNWU4ZjY3YWIzMzc5MjQxNTY4NTVlOTliMGEyMThjMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9a0vIn5OxKMxZ3Pqhrh9Dd+zkIZ9
N1TiH7GYo6a7I/M5D7LSDD1DAri0j42/WiRiffw6sPGGux7nNTF4hsKKzo50hSWg
E3t9s4c7gFEDkaIQR8DC1QDmVYig5eDkc9E6cTdSqEjL/P5S9V4mLyEQw2qA8Krd
2UYWOe35D+hR9Ip0fp9kSkVDIXT2V8u1h2KWgRPaxW9pzX547dv3jfUBBuN5MpOO
+d4grbVMik8dkqSBkZ7i+Af4YvRM6y+nkfAWBkSke7yU6/xTMIxc2sImmRswG9bD
N1CcboekgtgSUE+u/42jYEqtcwR2IBujvyBWHuHntYC+o0Y4Hs/hM1qOjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgCN6Xo9nqzN5JBVoVembCiGMGxMB8GA1UdIwQY
MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt
YzlkYjk4MWEyYTJmLzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm
LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6N+XZlI
yFCuL497vR3TAfEsvoQQB+f7V8SUTfdUebiZvbbOCbFKhSFOjxOZl/FLUHj8+w6W
mn0hshrMx+I3IARz6PePN26i5xUgmO/6Q6jlBBKQMw09UbmpumIEL2p6+zV+ou7B
pnvZf5gNDIajGIlJfjNRcrdy7sVJf6qaQDDZENoyBX52WFe9AcTTlyI2Uznu2gic
OxMtrXc+U4OD19CrgM4Kw9jPn7EXlLCLVSWOSLYGBVMcvqICkJqh3utZ+lKZRP52
yguLiAGv5iDLSf8cNJjICkBei9qnB9pQPHvI6hHne/zYvWmHM7foozJBPYh/tBKu
E6l3xzX2eb7HOw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:47 2026 by rpki-client