This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          ukrfSgvJQ83AmLkr2TUjiiAaZjYGwg1Y5+C+YngswFA=
Subject key identifier:   FC:B3:F9:5E:9A:B5:0C:8B:6F:85:BA:E3:FF:D2:3F:12:DD:3E:D6:7E
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       019C42EB37CF95B33B14D0CFEC053F387FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          162C
Signing time:             Mon 09 Feb 2026 15:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:37 +0000
Files and hashes:         1: K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa (hash: 4pub90rA78k1OuNqh4u/EQwhdsIyW78nZyVBnumMV8E=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: 8ZVwnb/xa59c0k0besBaomw9SaMiIxUYXpfNE14+n2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:37:cf:95:b3:3b:14:d0:cf:ec:05:3f:38:7f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Feb  9 15:00:37 2026 GMT
            Not After : Feb 10 15:00:37 2026 GMT
        Subject: CN=fcb3f95e9ab50c8b6f85bae3ffd23f12dd3ed67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:fe:75:bf:51:65:39:6d:44:f9:b0:e4:02:
                    29:82:3f:a7:78:a5:47:31:53:2c:6d:57:0f:76:31:
                    dc:7c:2b:f5:c2:7b:c5:ca:1b:db:fc:3e:cf:fe:54:
                    53:38:44:92:3b:f8:61:28:44:1a:d1:ed:4c:8e:5c:
                    f0:11:0c:5f:6d:2c:5b:f2:39:9d:62:f4:6a:8c:59:
                    43:6d:c5:e1:3d:24:f2:2f:05:e6:61:f0:a2:67:58:
                    5a:ee:4d:46:b7:85:51:99:8c:23:e4:9d:fa:53:12:
                    27:8b:a3:ca:e5:cb:8c:0b:34:46:25:c6:fd:cc:86:
                    fe:df:99:f1:a6:1d:3d:1c:cf:8a:02:d0:ae:71:1b:
                    06:01:d5:03:b3:60:98:f6:6b:71:bd:e8:4e:91:cc:
                    80:15:34:45:8d:9e:f2:cf:55:42:ff:c8:3e:ad:a6:
                    84:cb:cd:87:0c:f1:72:b9:24:a9:b5:2c:6c:14:1b:
                    26:d5:61:31:57:f1:94:89:fc:eb:00:5f:47:4b:ea:
                    03:cd:1c:40:bd:00:fc:62:11:8e:1a:e4:dc:8e:1f:
                    13:72:71:71:7e:b1:c9:1c:d8:f3:f9:c6:04:81:93:
                    37:4b:68:fe:7d:58:8a:09:91:99:f9:7c:8c:de:a2:
                    cc:b3:77:4e:7f:f9:9f:5d:8f:46:81:b9:9a:da:cd:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B3:F9:5E:9A:B5:0C:8B:6F:85:BA:E3:FF:D2:3F:12:DD:3E:D6:7E
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:00:b4:ab:aa:ec:40:96:d5:6f:98:cb:43:34:07:9b:41:01:
         a5:92:a5:d3:0c:00:81:7f:0e:cb:2b:7f:05:11:cd:a7:38:a0:
         8a:0b:d3:18:77:e8:5a:a0:79:bc:5e:e7:2c:ac:6a:31:d0:54:
         0b:cf:33:78:83:57:19:d6:15:38:a7:ad:42:44:5e:92:63:9f:
         4a:97:37:5c:8e:11:36:d9:18:3d:b9:16:10:c5:6e:24:65:03:
         d8:ea:85:08:69:70:f4:1e:c8:6f:05:4f:de:39:51:2a:f8:2b:
         00:41:5b:ca:30:7b:79:70:88:8c:17:1f:b3:7d:09:01:5b:00:
         46:53:ba:96:1c:6c:16:cd:33:08:d8:f7:1a:21:a8:c2:4e:b3:
         d0:eb:78:e1:89:69:fc:0b:14:88:79:dc:de:74:6e:2c:36:23:
         c4:63:41:e8:e1:33:e9:ee:3f:0f:03:6d:d7:0f:a4:85:32:81:
         b5:6a:b6:de:ea:ad:d6:43:7e:28:7e:5b:69:74:4d:f4:21:7a:
         3c:36:dd:40:4c:53:cd:28:d4:90:e0:b8:84:71:68:39:4a:be:
         4d:81:85:fa:92:37:78:21:4b:76:f5:9c:04:0a:26:af:ea:fa:
         d5:4c:f9:eb:c4:13:e8:83:ba:56:ca:33:e5:0b:84:b2:2e:13:
         ab:89:40:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6zfPlbM7FNDP7AU/OH+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTJkOTQ1YWMyYTQ5ZjNiNGRhMjIyMWMyN2I4MjlhYWZj
Y2IyZjIwHhcNMjYwMjA5MTUwMDM3WhcNMjYwMjEwMTUwMDM3WjAzMTEwLwYDVQQD
EyhmY2IzZjk1ZTlhYjUwYzhiNmY4NWJhZTNmZmQyM2YxMmRkM2VkNjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu7+db9RZTltRPmw5AIpgj+neKVH
MVMsbVcPdjHcfCv1wnvFyhvb/D7P/lRTOESSO/hhKEQa0e1MjlzwEQxfbSxb8jmd
YvRqjFlDbcXhPSTyLwXmYfCiZ1ha7k1Gt4VRmYwj5J36UxIni6PK5cuMCzRGJcb9
zIb+35nxph09HM+KAtCucRsGAdUDs2CY9mtxvehOkcyAFTRFjZ7yz1VC/8g+raaE
y82HDPFyuSSptSxsFBsm1WExV/GUifzrAF9HS+oDzRxAvQD8YhGOGuTcjh8TcnFx
frHJHNjz+cYEgZM3S2j+fViKCZGZ+XyM3qLMs3dOf/mfXY9Ggbma2s0ECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyz+V6atQyLb4W64//SPxLdPtZ+MB8GA1UdIwQY
MBaAFJkS2UWsKknztNoiIcJ7gpqvzLLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFiNzYtOWJmOS00N2NkLWI1NDQt
NWVlMDlmZWFkNTYxLzEvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWFiNzYtOWJmOS00N2NkLWI1NDQtNWVlMDlmZWFkNTYx
LzEvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAC0q6rs
QJbVb5jLQzQHm0EBpZKl0wwAgX8Oyyt/BRHNpzigigvTGHfoWqB5vF7nLKxqMdBU
C88zeINXGdYVOKetQkRekmOfSpc3XI4RNtkYPbkWEMVuJGUD2OqFCGlw9B7IbwVP
3jlRKvgrAEFbyjB7eXCIjBcfs30JAVsARlO6lhxsFs0zCNj3GiGowk6z0Ot44Ylp
/AsUiHnc3nRuLDYjxGNB6OEz6e4/DwNt1w+khTKBtWq23uqt1kN+KH5baXRN9CF6
PDbdQExTzSjUkOC4hHFoOUq+TYGF+pI3eCFLdvWcBAomr+r61Uz568QT6IO6Vsoz
5QuEsi4Tq4lAYA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:39 2026 by rpki-client