This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File:                     tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier:          119aBXFst4t31tOXNKq5gkJauVuUEhuKvqSb1KVtSpw=
Subject key identifier:   DA:51:4E:88:C1:D6:1A:37:18:41:FC:1D:F8:3E:86:0E:7D:47:0B:E5
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer:       /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial:       019C4358CA200FEDDC997A48B7189835467D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number:          1281
Signing time:             Mon 09 Feb 2026 17:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:18 +0000
Files and hashes:         1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
                          2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
                          3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: f7X5Jy5wXcAqNAl6o1z9syUwbo76FHqKj80tkve/wP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:ca:20:0f:ed:dc:99:7a:48:b7:18:98:35:46:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
        Validity
            Not Before: Feb  9 17:00:18 2026 GMT
            Not After : Feb 10 17:00:18 2026 GMT
        Subject: CN=da514e88c1d61a371841fc1df83e860e7d470be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:e9:9e:68:cd:d4:49:00:d3:00:db:d4:d9:
                    30:45:85:ec:b6:2b:c2:d3:bf:0d:dd:f0:8c:9a:de:
                    de:64:68:7f:46:1b:03:86:d2:b9:1c:5c:7a:f1:14:
                    7e:55:11:79:5b:cc:98:a1:39:50:57:8d:99:0e:b0:
                    70:c7:65:d5:0e:c2:0a:ba:01:18:aa:d7:b2:7a:d7:
                    c2:12:53:e5:9e:bd:21:27:3f:67:e2:b6:18:ee:56:
                    1e:21:75:47:a8:a4:39:bf:c4:64:60:cf:cf:1c:8d:
                    20:da:32:2a:c0:6b:1f:db:ef:67:1f:ad:a7:8d:5d:
                    c8:26:ac:fd:88:ad:5e:3e:44:4f:06:b4:d5:83:94:
                    3a:5f:e7:0c:b6:8f:8c:6a:24:78:b7:4d:33:67:02:
                    2d:4c:43:67:1e:e9:78:46:8d:f9:22:08:f1:bb:48:
                    f7:49:f5:d8:bf:c1:c5:46:8f:97:c3:5f:24:e8:fc:
                    23:42:d7:42:c8:e8:ba:5b:ba:4f:16:09:96:bd:9d:
                    65:96:d3:ee:88:33:22:e5:e1:3a:8e:2f:dc:0b:e8:
                    01:11:84:a8:df:4d:03:e0:d2:06:7e:35:d4:8c:a8:
                    09:f1:e3:55:a8:83:f6:97:62:6e:ca:fb:2c:90:f3:
                    57:62:98:1a:9b:2d:2d:e0:b8:79:12:0a:90:e1:c6:
                    87:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:51:4E:88:C1:D6:1A:37:18:41:FC:1D:F8:3E:86:0E:7D:47:0B:E5
            X509v3 Authority Key Identifier:
                keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:10:16:6f:2d:eb:b0:6b:ea:04:a3:a6:b3:60:dd:1e:31:28:
         3f:e7:71:31:c3:e0:0f:7c:31:08:ad:d8:9b:7a:6a:bd:15:7e:
         5f:19:f8:c3:c3:d7:f6:f5:67:ec:17:e1:38:e6:c5:66:d1:fa:
         e9:6c:d8:cb:5e:5b:c9:fd:7d:c5:dc:e3:0f:85:4e:1d:c9:ac:
         a5:a1:f8:c1:b4:89:80:c5:c2:90:56:b0:ea:f7:37:7f:f2:1d:
         13:06:9a:af:86:e2:2d:cd:eb:1f:9c:90:af:7c:b4:f9:45:e8:
         ba:80:c5:fc:80:fc:9b:90:e2:f8:99:db:1f:72:34:bc:cf:2b:
         c7:58:8e:9f:ff:40:2a:1a:e3:72:dc:2b:c0:0d:59:92:ee:50:
         65:6f:84:df:09:4e:7d:75:8d:1d:0b:c9:31:13:a8:b1:e1:97:
         e6:48:08:1f:54:cf:35:86:fd:f5:3b:7c:0e:8e:fc:b4:9c:6c:
         92:5e:3b:8c:81:76:c4:f2:be:67:df:98:38:1f:f8:b2:ba:1b:
         23:64:e0:62:4f:85:f3:7b:46:8d:5d:e2:89:58:87:cc:b6:a7:
         c8:ac:92:b7:41:60:1b:f1:d4:79:f7:75:82:26:4e:45:c5:62:
         16:e2:17:03:31:6c:76:97:6c:5d:68:11:37:b4:47:72:bf:7a:
         66:5b:a2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWMogD+3cmXpItxiYNUZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjYwMjA5MTcwMDE4WhcNMjYwMjEwMTcwMDE4WjAzMTEwLwYDVQQD
EyhkYTUxNGU4OGMxZDYxYTM3MTg0MWZjMWRmODNlODYwZTdkNDcwYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgvpnmjN1EkA0wDb1NkwRYXstivC
078N3fCMmt7eZGh/RhsDhtK5HFx68RR+VRF5W8yYoTlQV42ZDrBwx2XVDsIKugEY
qteyetfCElPlnr0hJz9n4rYY7lYeIXVHqKQ5v8RkYM/PHI0g2jIqwGsf2+9nH62n
jV3IJqz9iK1ePkRPBrTVg5Q6X+cMto+MaiR4t00zZwItTENnHul4Ro35Igjxu0j3
SfXYv8HFRo+Xw18k6PwjQtdCyOi6W7pPFgmWvZ1lltPuiDMi5eE6ji/cC+gBEYSo
300D4NIGfjXUjKgJ8eNVqIP2l2JuyvsskPNXYpgamy0t4Lh5EgqQ4caHfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpRTojB1ho3GEH8Hfg+hg59RwvlMB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORAWby3r
sGvqBKOms2DdHjEoP+dxMcPgD3wxCK3Ym3pqvRV+Xxn4w8PX9vVn7BfhOObFZtH6
6WzYy15byf19xdzjD4VOHcmspaH4wbSJgMXCkFaw6vc3f/IdEwaar4biLc3rH5yQ
r3y0+UXouoDF/ID8m5Di+JnbH3I0vM8rx1iOn/9AKhrjctwrwA1Zku5QZW+E3wlO
fXWNHQvJMROoseGX5kgIH1TPNYb99Tt8Do78tJxskl47jIF2xPK+Z9+YOB/4srob
I2TgYk+F83tGjV3iiViHzLanyKySt0FgG/HUefd1giZORcViFuIXAzFsdpdsXWgR
N7RHcr96ZluiGQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:39 2026 by rpki-client