This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File:                     m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier:          6ZVnn8hajiF+8g8WZgU6uiEGWwheZxYp5yNOALA4ZLk=
Subject key identifier:   A8:F7:45:7C:85:BC:F4:87:40:0F:7E:12:EF:A4:B8:29:93:06:5E:04
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer:       /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial:       019C389E4975E79F48B28407AB78EA0540AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number:          0E0C
Signing time:             Sat 07 Feb 2026 15:00:23 +0000
Manifest this update:     Sat 07 Feb 2026 15:00:23 +0000
Manifest next update:     Sun 08 Feb 2026 15:00:23 +0000
Files and hashes:         1: D4KKAq0ahmeZ20BwgX9kW7RnziE.roa (hash: ZoGSRKDSzROcjYhMYpND74w5OQoC/iSALsUjVAn5Y+U=)
                          2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: sSG+5NITVtCUG6E5HGhwfm+/GXY7g+G1BJ8o7OjDwKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 15:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:38:9e:49:75:e7:9f:48:b2:84:07:ab:78:ea:05:40:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
        Validity
            Not Before: Feb  7 15:00:23 2026 GMT
            Not After : Feb  8 15:00:23 2026 GMT
        Subject: CN=a8f7457c85bcf487400f7e12efa4b82993065e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:3e:cd:9e:8d:ba:3e:88:60:49:59:c8:ac:
                    43:40:29:40:ab:12:60:ca:48:2e:c7:ff:34:3b:e3:
                    26:53:52:e2:61:8b:2f:6e:c7:a9:2f:f2:05:32:c8:
                    18:c6:02:55:d8:e3:6e:48:c0:76:de:7e:41:ae:92:
                    e6:5a:58:3a:0b:3e:be:fa:1f:36:3a:18:3c:4a:d9:
                    c7:81:3e:31:1e:d5:1a:77:4a:34:69:c7:61:45:cc:
                    7b:b3:97:8f:38:8d:63:c3:42:e7:5d:6c:de:f8:b8:
                    ba:3a:2d:e3:18:3e:51:94:ca:7d:10:ef:c2:b2:ea:
                    d3:aa:44:46:24:4d:c3:db:e0:bf:e7:02:76:57:2d:
                    13:3d:00:00:55:e6:76:66:a1:43:70:0e:55:5e:db:
                    b8:b3:e9:75:a2:e7:51:d0:64:9a:48:a6:ab:c6:04:
                    9b:01:de:11:d6:68:1f:61:8b:0c:4a:8e:13:b7:b6:
                    59:ce:c2:58:df:03:7c:06:a7:ea:f6:df:32:6f:bf:
                    b3:e2:a9:2c:44:07:81:88:ab:33:58:57:3f:31:2d:
                    e8:07:82:9a:7f:64:33:55:14:80:ec:d0:92:d8:45:
                    7b:e6:0a:19:cb:f8:c0:f6:10:f7:c6:98:ba:c1:78:
                    45:94:34:fb:f8:92:4b:4e:f3:11:b5:b2:49:13:f3:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F7:45:7C:85:BC:F4:87:40:0F:7E:12:EF:A4:B8:29:93:06:5E:04
            X509v3 Authority Key Identifier:
                keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:f7:d3:b5:1d:16:51:35:d9:38:eb:47:60:b9:75:10:a8:
         7b:d7:e9:18:54:38:1e:f9:f2:59:5e:26:ce:24:bc:b7:0b:58:
         a7:ba:4b:5d:9b:c2:4c:f4:4f:a8:72:08:8b:5b:f9:87:23:ed:
         56:00:d5:11:0d:7d:30:dc:59:ac:e9:47:67:46:99:cc:03:6a:
         c1:5c:28:d6:c7:85:64:b0:a3:ee:83:cf:ae:de:ff:fd:ad:da:
         f6:06:a9:aa:a8:c2:55:b0:7e:d6:8a:23:3c:ce:de:7e:ab:f0:
         53:5d:6b:52:22:06:9b:b5:fb:0b:d7:dd:46:a4:6d:e4:e1:d1:
         a2:34:52:7f:85:56:19:34:5c:a6:3d:f6:c4:fe:72:08:63:e7:
         1e:64:f8:8c:97:c0:c7:02:b5:66:46:f1:fb:87:35:13:dd:b1:
         f8:e1:54:f1:66:20:fe:81:ff:9a:5a:41:a0:f5:40:7b:00:4b:
         26:bb:f7:ef:c2:38:7f:89:29:2e:4f:da:4b:37:94:88:e8:91:
         e2:58:9c:70:17:77:74:58:bd:ba:09:a2:34:35:21:48:b7:90:
         5c:1f:a6:7a:ef:c5:8e:39:07:4f:96:a8:2f:bd:6a:9a:5a:12:
         f9:93:c0:c3:b7:fc:31:37:d2:76:b2:9d:ac:f6:e2:18:7e:e1:
         73:c3:a7:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZw4nkl1559IsoQHq3jqBUCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0
NTUwNzIwHhcNMjYwMjA3MTUwMDIzWhcNMjYwMjA4MTUwMDIzWjAzMTEwLwYDVQQD
EyhhOGY3NDU3Yzg1YmNmNDg3NDAwZjdlMTJlZmE0YjgyOTkzMDY1ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFo+zZ6Nuj6IYElZyKxDQClAqxJg
ykgux/80O+MmU1LiYYsvbsepL/IFMsgYxgJV2ONuSMB23n5BrpLmWlg6Cz6++h82
Ohg8StnHgT4xHtUad0o0acdhRcx7s5ePOI1jw0LnXWze+Li6Oi3jGD5RlMp9EO/C
surTqkRGJE3D2+C/5wJ2Vy0TPQAAVeZ2ZqFDcA5VXtu4s+l1oudR0GSaSKarxgSb
Ad4R1mgfYYsMSo4Tt7ZZzsJY3wN8Bqfq9t8yb7+z4qksRAeBiKszWFc/MS3oB4Ka
f2QzVRSA7NCS2EV75goZy/jA9hD3xpi6wXhFlDT7+JJLTvMRtbJJE/N7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj3RXyFvPSHQA9+Eu+kuCmTBl4EMB8GA1UdIwQY
MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt
MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx
LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkb307Ud
FlE12TjrR2C5dRCoe9fpGFQ4HvnyWV4mziS8twtYp7pLXZvCTPRPqHIIi1v5hyPt
VgDVEQ19MNxZrOlHZ0aZzANqwVwo1seFZLCj7oPPrt7//a3a9gapqqjCVbB+1ooj
PM7efqvwU11rUiIGm7X7C9fdRqRt5OHRojRSf4VWGTRcpj32xP5yCGPnHmT4jJfA
xwK1Zkbx+4c1E92x+OFU8WYg/oH/mlpBoPVAewBLJrv378I4f4kpLk/aSzeUiOiR
4liccBd3dFi9ugmiNDUhSLeQXB+meu/FjjkHT5aoL71qmloS+ZPAw7f8MTfSdrKd
rPbiGH7hc8OnYA==
-----END CERTIFICATE-----
Generated at Sat Feb 7 22:16:51 2026 by rpki-client