This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
File:                     aNLCXQU0pAJ8aVViqM5PABzVOW8.mft (raw, json)
Hash identifier:          +3iEXchqwLDZCEF8B29DreEyhyydVjzSjK1fJ5tU5H4=
Subject key identifier:   B3:24:A5:EC:64:2B:0D:99:1C:57:1A:7F:39:C2:25:19:D0:B4:B8:F7
Authority key identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
Certificate issuer:       /CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Certificate serial:       019C420FAD6A233D2874A7B3E8A6B0779422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
Manifest number:          1463
Signing time:             Mon 09 Feb 2026 11:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:49 +0000
Files and hashes:         1: URwUlX1aGUQjALJuv2b7NQZnlQY.roa (hash: tfOWykptTnti4HmolEIB0RYCOL60/EO4faOftMz4e/U=)
                          2: aNLCXQU0pAJ8aVViqM5PABzVOW8.crl (hash: TTJG/jXjat06d4cNCcSfR2QUNp0smJIxlC6+LGC57Ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:ad:6a:23:3d:28:74:a7:b3:e8:a6:b0:77:94:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
        Validity
            Not Before: Feb  9 11:00:49 2026 GMT
            Not After : Feb 10 11:00:49 2026 GMT
        Subject: CN=b324a5ec642b0d991c571a7f39c22519d0b4b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ab:1a:47:2d:cb:dd:82:b7:38:26:08:23:71:
                    d7:00:39:df:e2:c1:2b:da:e0:87:b9:d0:51:ff:54:
                    63:9e:77:fd:dc:05:f8:ce:57:d6:56:03:41:09:9e:
                    ba:c0:b1:95:3e:10:d8:0a:a7:96:e1:47:0e:4e:e7:
                    a6:6f:6b:6e:02:4c:fc:bd:da:13:5d:b3:e8:01:7a:
                    49:31:59:24:a2:d3:a9:12:da:68:bd:71:b9:41:38:
                    cc:65:36:55:fa:68:ae:1f:d2:4b:17:5a:97:45:2d:
                    39:3a:08:e5:ad:6c:bb:89:8e:ae:05:52:7a:ff:7a:
                    35:06:a1:28:b0:c5:03:3a:9c:30:3e:03:7e:96:48:
                    50:cb:b5:62:d3:e3:48:0c:1f:0d:9a:d1:01:76:f5:
                    19:57:af:b5:e5:a2:11:a6:93:96:77:3a:54:db:4c:
                    14:e2:6b:e9:a7:de:89:dd:e6:bb:ca:22:37:9c:12:
                    0f:0f:dd:f9:27:b8:5b:be:8e:82:a2:44:a6:ff:85:
                    8d:7d:00:48:65:fc:68:d3:20:99:20:df:66:f6:8a:
                    4a:ae:bc:78:e0:0c:e4:b9:68:36:46:6d:4b:25:8c:
                    80:b9:22:84:69:81:2d:1f:5f:62:c6:01:4b:c6:28:
                    69:42:5a:f8:af:82:56:57:91:b2:83:fb:9c:25:ab:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:A5:EC:64:2B:0D:99:1C:57:1A:7F:39:C2:25:19:D0:B4:B8:F7
            X509v3 Authority Key Identifier:
                keyid:68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:70:6d:18:d1:18:d0:fe:f6:82:24:95:10:02:b0:e7:95:29:
         97:a0:87:92:41:6e:3b:fd:88:d8:76:eb:91:0b:8c:33:1a:51:
         fe:70:5a:64:1c:bb:0d:fd:ee:77:18:cb:df:b4:09:02:25:d0:
         43:4b:4a:61:1f:60:e1:bf:3f:07:e8:18:26:9d:1f:35:8b:1a:
         67:1e:10:d6:06:14:1c:2e:6f:ee:da:21:9d:b3:6f:09:5e:01:
         15:79:d7:f2:de:e0:23:07:3c:dc:a2:af:30:f3:66:93:0e:65:
         67:f1:5d:68:88:2e:56:c8:cc:69:d2:ee:25:29:53:29:aa:7d:
         e8:bc:c8:5f:10:91:15:4a:ce:eb:5c:e1:af:43:67:40:1c:8f:
         7d:2a:ad:7a:35:d2:16:d7:04:fe:27:1b:42:af:08:17:24:74:
         aa:c1:63:b6:56:f9:97:11:5e:73:3b:74:c4:4a:22:5e:08:60:
         93:ae:48:b9:7d:1b:c8:bf:26:c8:fd:70:e8:bd:a2:c0:01:6a:
         ff:f6:d9:de:a0:7f:c4:57:7e:a3:16:01:b3:8e:e5:0e:d9:bd:
         18:69:ac:8f:0c:dd:9c:32:85:38:25:ed:0f:38:eb:2e:34:6c:
         ad:d1:23:30:c0:10:0e:9f:0e:e3:ee:35:de:52:30:4f:6a:81:
         7b:ee:e3:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD61qIz0odKez6Kawd5QiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDJjMjVkMDUzNGE0MDI3YzY5NTU2MmE4Y2U0ZjAwMWNk
NTM5NmYwHhcNMjYwMjA5MTEwMDQ5WhcNMjYwMjEwMTEwMDQ5WjAzMTEwLwYDVQQD
EyhiMzI0YTVlYzY0MmIwZDk5MWM1NzFhN2YzOWMyMjUxOWQwYjRiOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9asaRy3L3YK3OCYII3HXADnf4sEr
2uCHudBR/1Rjnnf93AX4zlfWVgNBCZ66wLGVPhDYCqeW4UcOTuemb2tuAkz8vdoT
XbPoAXpJMVkkotOpEtpovXG5QTjMZTZV+miuH9JLF1qXRS05OgjlrWy7iY6uBVJ6
/3o1BqEosMUDOpwwPgN+lkhQy7Vi0+NIDB8NmtEBdvUZV6+15aIRppOWdzpU20wU
4mvpp96J3ea7yiI3nBIPD935J7hbvo6CokSm/4WNfQBIZfxo0yCZIN9m9opKrrx4
4AzkuWg2Rm1LJYyAuSKEaYEtH19ixgFLxihpQlr4r4JWV5Gyg/ucJavUpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMkpexkKw2ZHFcafznCJRnQtLj3MB8GA1UdIwQY
MBaAFGjSwl0FNKQCfGlVYqjOTwAc1TlvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5MQ1hRVTBwQUo4YVZWaXFNNVBBQnpWT1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hZDk3NTYtODRkMS00YWI5LTk2ZTEt
MTQ3OTdlYWM1MjJlLzEvYU5MQ1hRVTBwQUo4YVZWaXFNNVBBQnpWT1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hZDk3NTYtODRkMS00YWI5LTk2ZTEtMTQ3OTdlYWM1MjJl
LzEvYU5MQ1hRVTBwQUo4YVZWaXFNNVBBQnpWT1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXBtGNEY
0P72giSVEAKw55Upl6CHkkFuO/2I2HbrkQuMMxpR/nBaZBy7Df3udxjL37QJAiXQ
Q0tKYR9g4b8/B+gYJp0fNYsaZx4Q1gYUHC5v7tohnbNvCV4BFXnX8t7gIwc83KKv
MPNmkw5lZ/FdaIguVsjMadLuJSlTKap96LzIXxCRFUrO61zhr0NnQByPfSqtejXS
FtcE/icbQq8IFyR0qsFjtlb5lxFeczt0xEoiXghgk65IuX0byL8myP1w6L2iwAFq
//bZ3qB/xFd+oxYBs47lDtm9GGmsjwzdnDKFOCXtDzjrLjRsrdEjMMAQDp8O4+41
3lIwT2qBe+7jJg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:16 2026 by rpki-client