This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File:                     m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier:          H9+5T85jO/Xiu1qX//98WOd05CsqJxgGRi6PFecBBwY=
Subject key identifier:   6E:8D:31:E8:06:3F:E5:2F:F1:35:54:1E:A8:29:59:77:C2:24:35:B6
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer:       /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial:       019C420F9FEA269B87EA39DEDAB6A7F31026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number:          148C
Signing time:             Mon 09 Feb 2026 11:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:46 +0000
Files and hashes:         1: IFQ-id79kHlDKPQ9PpUhMxfR5F8.roa (hash: 8hN9YwJ+324f32TBhUPA/FbIWI7pWULirPqO3HhSjN8=)
                          2: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: ARIh5P7FPcKq0X+kCvXOW+bSBWwcWCwPkE95EPVssvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:9f:ea:26:9b:87:ea:39:de:da:b6:a7:f3:10:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
        Validity
            Not Before: Feb  9 11:00:46 2026 GMT
            Not After : Feb 10 11:00:46 2026 GMT
        Subject: CN=6e8d31e8063fe52ff135541ea8295977c22435b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:4e:69:34:f9:de:6a:cb:4e:2e:ea:fb:78:
                    e6:7b:ee:4b:87:60:01:b6:0d:0d:d7:b0:b8:ff:ee:
                    5c:07:6d:d6:f8:02:c2:d7:43:2f:1d:60:8f:70:d5:
                    9b:b0:ce:5d:fd:95:27:c4:ee:b2:84:8c:3a:55:f4:
                    e1:3b:de:b6:29:83:20:7c:77:01:56:81:a1:2a:6a:
                    ea:eb:44:87:d5:20:55:19:66:2c:e3:44:98:2a:df:
                    16:aa:e0:9e:5b:2e:4d:68:d6:bc:39:00:61:8a:3c:
                    08:5e:b6:46:86:30:94:66:3c:36:f6:3a:84:8c:82:
                    7d:a3:9c:22:ef:59:c7:45:4e:3e:aa:4e:02:a2:31:
                    ca:66:30:96:23:54:15:42:43:8a:1f:ad:23:dc:07:
                    c7:c3:a9:59:50:32:cb:66:73:65:40:25:42:81:60:
                    63:e9:43:2d:e5:8c:36:32:f7:d7:c4:a9:1b:a7:3c:
                    ea:17:b6:fc:bb:b7:a9:21:25:54:3a:21:52:e0:58:
                    a8:3a:4e:ec:75:64:4e:f1:85:91:81:bf:19:f5:08:
                    96:b9:83:3f:31:cf:37:31:0b:8b:dc:b5:9f:e7:1f:
                    0c:f4:aa:11:21:af:0f:ce:12:7a:7e:d2:0c:f2:b3:
                    60:68:7c:5a:73:69:5b:0e:6d:5e:55:05:6c:8b:66:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:31:E8:06:3F:E5:2F:F1:35:54:1E:A8:29:59:77:C2:24:35:B6
            X509v3 Authority Key Identifier:
                keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:37:ea:66:2f:f9:7f:fc:75:77:02:6a:3f:79:88:4e:a1:6c:
         3f:10:9e:93:e3:8a:0e:f3:97:7e:08:e5:c5:cb:55:16:e4:aa:
         78:29:af:72:fc:8b:da:e9:bc:9e:90:73:8f:c3:89:5f:de:8e:
         99:cc:a1:26:b1:02:f7:b5:60:ed:28:81:4e:75:66:cf:af:d9:
         cf:a4:25:e1:0a:3d:6a:1a:59:7d:05:ad:65:00:a6:0d:d4:bb:
         db:ed:50:ea:f6:cb:f4:d7:84:e8:26:59:f3:57:b5:cd:aa:0f:
         28:48:f9:3b:42:1d:f4:22:40:af:2d:59:91:8e:7d:c8:05:2f:
         36:0d:34:4e:2a:73:5b:c5:89:8e:13:77:92:b9:be:dc:16:78:
         24:03:ca:2c:f6:2c:26:72:c6:63:3f:e3:57:78:4f:56:cb:9e:
         e5:97:24:43:fd:f9:aa:cd:55:d3:12:f9:92:9c:66:1f:8a:5b:
         13:a9:59:61:12:09:ee:51:13:84:25:4f:26:11:0c:c9:d2:c2:
         17:36:a1:56:d2:0d:38:29:55:fe:57:8d:e7:ad:3a:ce:31:4d:
         d1:08:33:47:fe:b6:aa:8c:f3:9d:f6:2a:3e:34:be:82:be:c5:
         5d:27:fc:e8:43:23:a1:c1:06:7a:65:8c:2f:8d:2c:ad:9c:28:
         d4:ef:2f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD5/qJpuH6jne2ran8xAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz
ZGY4YmYwHhcNMjYwMjA5MTEwMDQ2WhcNMjYwMjEwMTEwMDQ2WjAzMTEwLwYDVQQD
Eyg2ZThkMzFlODA2M2ZlNTJmZjEzNTU0MWVhODI5NTk3N2MyMjQzNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gxOaTT53mrLTi7q+3jme+5Lh2AB
tg0N17C4/+5cB23W+ALC10MvHWCPcNWbsM5d/ZUnxO6yhIw6VfThO962KYMgfHcB
VoGhKmrq60SH1SBVGWYs40SYKt8WquCeWy5NaNa8OQBhijwIXrZGhjCUZjw29jqE
jIJ9o5wi71nHRU4+qk4CojHKZjCWI1QVQkOKH60j3AfHw6lZUDLLZnNlQCVCgWBj
6UMt5Yw2MvfXxKkbpzzqF7b8u7epISVUOiFS4FioOk7sdWRO8YWRgb8Z9QiWuYM/
Mc83MQuL3LWf5x8M9KoRIa8PzhJ6ftIM8rNgaHxac2lbDm1eVQVsi2aTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6NMegGP+Uv8TVUHqgpWXfCJDW2MB8GA1UdIwQY
MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt
NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3
LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDfqZi/5
f/x1dwJqP3mITqFsPxCek+OKDvOXfgjlxctVFuSqeCmvcvyL2um8npBzj8OJX96O
mcyhJrEC97Vg7SiBTnVmz6/Zz6Ql4Qo9ahpZfQWtZQCmDdS72+1Q6vbL9NeE6CZZ
81e1zaoPKEj5O0Id9CJAry1ZkY59yAUvNg00TipzW8WJjhN3krm+3BZ4JAPKLPYs
JnLGYz/jV3hPVsue5ZckQ/35qs1V0xL5kpxmH4pbE6lZYRIJ7lEThCVPJhEMydLC
FzahVtINOClV/leN5606zjFN0QgzR/62qozznfYqPjS+gr7FXSf86EMjocEGemWM
L40srZwo1O8vMw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:14 2026 by rpki-client