This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File:                     K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier:          Hi1X2QVnUOgnzqxbbUZBaIR1rRsWPRxu+piK2mUz8NQ=
Subject key identifier:   66:24:0B:D9:44:39:25:95:B5:3F:9C:69:57:98:DB:35:C6:6E:2C:B8
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer:       /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial:       019C42EAE47EF81F38E4B02B0D52F2E9DED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number:          0E01
Signing time:             Mon 09 Feb 2026 15:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:16 +0000
Files and hashes:         1: 834MSKGMZ57M-pHmOtnxmOs679Y.roa (hash: UkqP5BZI7xAVc7q2Wx7u9sbbq4cIz5WBnS1sWMLQ5HE=)
                          2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: f7v2B9uONaGO4WIiJ3rXehyEzHSab9P2eLe8smOBFiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:e4:7e:f8:1f:38:e4:b0:2b:0d:52:f2:e9:de:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
        Validity
            Not Before: Feb  9 15:00:16 2026 GMT
            Not After : Feb 10 15:00:16 2026 GMT
        Subject: CN=66240bd944392595b53f9c695798db35c66e2cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:d3:d9:38:3d:44:f2:8d:b8:9d:28:c2:08:
                    ef:a7:81:89:f5:d5:02:82:84:0b:09:eb:89:a2:9c:
                    af:72:44:e9:93:8c:de:ee:4c:88:a9:9a:fd:74:39:
                    45:99:59:2b:fd:ea:12:0b:ef:89:2a:56:07:71:00:
                    97:e6:f9:20:ff:32:e2:c0:d4:ed:0c:21:4a:e2:33:
                    5f:fa:c6:04:27:10:b3:90:81:cd:a8:5d:1a:c2:d2:
                    97:d8:dd:0b:01:c9:a6:13:ed:28:4c:05:0f:f9:44:
                    53:61:c4:de:25:49:31:2b:da:2d:d5:9b:f9:19:1d:
                    88:6a:db:bf:b3:c1:c5:11:bf:53:3b:f1:c4:64:d2:
                    ef:17:93:ce:28:c5:45:2a:c5:be:80:1e:2f:4b:4f:
                    b1:91:a8:b7:a9:91:ba:af:0b:c3:be:6f:29:a5:95:
                    f2:65:98:04:82:5d:54:bb:b3:66:58:df:e8:d4:ee:
                    53:b8:4b:85:ab:2e:e9:8f:3d:a0:98:f1:a8:ba:bf:
                    6e:8c:2d:a3:bb:e8:b6:d4:1e:52:61:9a:40:d8:c0:
                    e8:69:60:b8:47:ed:0b:ea:4c:48:68:f0:1c:80:95:
                    3d:29:ab:0a:ea:cb:d1:69:6f:44:69:8f:c9:89:54:
                    ed:e7:8e:b1:7e:00:b3:ff:fc:a9:93:6d:ce:d0:e7:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:24:0B:D9:44:39:25:95:B5:3F:9C:69:57:98:DB:35:C6:6E:2C:B8
            X509v3 Authority Key Identifier:
                keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:79:11:22:83:35:2a:e6:6f:6e:c5:f0:33:a7:56:66:1b:
         b3:8e:71:94:a5:a0:0a:03:a6:18:85:1d:d4:3a:d7:43:17:90:
         7b:a9:74:8d:79:08:d5:71:27:d0:6e:5c:f5:c6:b5:de:c8:8e:
         2a:ee:0b:fe:f3:35:5d:ed:ad:40:6f:0f:cb:65:82:84:a7:07:
         87:f5:c8:0d:da:bc:4e:0e:25:36:c4:35:fa:9a:64:51:9b:5f:
         73:69:fc:59:9a:01:95:47:04:e8:0e:6f:7e:e3:d1:91:36:cd:
         53:5f:7b:61:ae:67:49:d5:19:fb:87:fb:ac:a7:7b:6b:c4:8b:
         2c:fa:47:cf:c2:a0:f3:72:72:b9:9e:40:b6:62:39:a0:de:9c:
         80:6a:49:ea:2e:49:71:6a:1a:8a:07:f6:e8:41:d8:b7:e2:65:
         b3:0a:08:4f:23:a8:0d:b1:0c:60:51:e5:d6:0b:f5:32:a0:e9:
         bf:c0:2f:54:01:42:b7:1c:0e:2c:fb:38:05:d6:57:5f:21:4c:
         f9:b7:7a:cf:15:40:6d:c6:13:8e:79:ba:57:da:37:b4:23:76:
         2b:95:f5:1a:60:40:01:03:21:9d:8f:54:ab:1a:4c:a8:b1:19:
         93:a4:50:69:b2:1d:21:59:56:da:dc:c1:41:7a:ca:d7:89:bb:
         e1:e4:ae:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6uR++B845LArDVLy6d7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3
ZjI2MWMwHhcNMjYwMjA5MTUwMDE2WhcNMjYwMjEwMTUwMDE2WjAzMTEwLwYDVQQD
Eyg2NjI0MGJkOTQ0MzkyNTk1YjUzZjljNjk1Nzk4ZGIzNWM2NmUyY2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC7T2Tg9RPKNuJ0owgjvp4GJ9dUC
goQLCeuJopyvckTpk4ze7kyIqZr9dDlFmVkr/eoSC++JKlYHcQCX5vkg/zLiwNTt
DCFK4jNf+sYEJxCzkIHNqF0awtKX2N0LAcmmE+0oTAUP+URTYcTeJUkxK9ot1Zv5
GR2Iatu/s8HFEb9TO/HEZNLvF5POKMVFKsW+gB4vS0+xkai3qZG6rwvDvm8ppZXy
ZZgEgl1Uu7NmWN/o1O5TuEuFqy7pjz2gmPGour9ujC2ju+i21B5SYZpA2MDoaWC4
R+0L6kxIaPAcgJU9KasK6svRaW9EaY/JiVTt546xfgCz//ypk23O0OfAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYkC9lEOSWVtT+caVeY2zXGbiy4MB8GA1UdIwQY
MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt
OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy
LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6N5ESKD
NSrmb27F8DOnVmYbs45xlKWgCgOmGIUd1DrXQxeQe6l0jXkI1XEn0G5c9ca13siO
Ku4L/vM1Xe2tQG8Py2WChKcHh/XIDdq8Tg4lNsQ1+ppkUZtfc2n8WZoBlUcE6A5v
fuPRkTbNU197Ya5nSdUZ+4f7rKd7a8SLLPpHz8Kg83JyuZ5AtmI5oN6cgGpJ6i5J
cWoaigf26EHYt+JlswoITyOoDbEMYFHl1gv1MqDpv8AvVAFCtxwOLPs4BdZXXyFM
+bd6zxVAbcYTjnm6V9o3tCN2K5X1GmBAAQMhnY9UqxpMqLEZk6RQabIdIVlW2tzB
QXrK14m74eSupg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:26 2026 by rpki-client