This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File:                     rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier:          WFH6K7wo7ESiSB0I9MX/dISmiggYU542Z/9qLk44g7Q=
Subject key identifier:   1B:6B:67:5D:AF:3B:C1:86:C4:E2:E8:8E:20:F1:0D:DD:C2:7D:91:B4
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer:       /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial:       019C4322AE63232984F4B50B3035E9AC9475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number:          12E0
Signing time:             Mon 09 Feb 2026 16:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:12 +0000
Files and hashes:         1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
                          2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
                          3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
                          4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: 23QFpgJQBUa8vxIoIRAtDyIRk/kOxIFgpq0sPWwZW/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ae:63:23:29:84:f4:b5:0b:30:35:e9:ac:94:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
        Validity
            Not Before: Feb  9 16:01:12 2026 GMT
            Not After : Feb 10 16:01:12 2026 GMT
        Subject: CN=1b6b675daf3bc186c4e2e88e20f10dddc27d91b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:37:c2:fb:32:65:0e:f1:06:e2:4b:c8:b7:
                    e4:79:dd:79:c7:44:d2:3f:e1:a8:cb:53:0e:36:c8:
                    3f:01:db:87:8c:4c:53:82:b7:e8:a3:2f:38:ce:25:
                    9b:34:a7:b1:b7:d6:0c:0e:a0:4e:d8:5e:56:5a:49:
                    a6:1c:1a:7e:d8:45:b3:34:ed:98:90:bf:5d:6b:84:
                    af:c9:6a:ea:8c:14:9f:e2:4b:20:c8:90:5b:9b:5e:
                    de:89:66:d2:0b:e5:f7:f1:5a:d8:58:50:2a:35:79:
                    09:37:1c:18:81:74:fd:fb:c4:df:14:f3:82:da:97:
                    e6:cf:6b:d3:d2:f0:5f:28:2c:a4:d5:7f:b1:9f:e4:
                    82:82:e0:75:cb:6d:8e:52:27:8e:af:f4:23:d7:cc:
                    96:ab:f4:af:51:4a:f8:29:19:b3:cb:39:56:4d:ba:
                    1a:5a:67:45:81:d0:18:ec:1a:23:28:99:20:a7:a6:
                    7a:c6:be:6e:21:ea:7d:a2:00:92:7a:8e:67:0e:37:
                    b2:7f:b0:7f:b2:ae:45:ab:cb:a4:16:48:0a:fc:16:
                    ae:5c:4a:d5:1d:d3:67:22:98:14:6a:56:5a:4d:de:
                    7b:e2:36:60:3a:21:44:56:bd:59:95:20:eb:ff:95:
                    67:e6:c6:c4:8a:dd:23:53:f8:73:45:fd:2c:4d:ab:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6B:67:5D:AF:3B:C1:86:C4:E2:E8:8E:20:F1:0D:DD:C2:7D:91:B4
            X509v3 Authority Key Identifier:
                keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:81:19:b7:3b:7b:3c:ef:8a:10:5f:6a:cb:c8:34:8f:51:47:
         0c:a9:58:30:a5:28:d6:62:28:36:fc:6d:79:a0:8a:61:ec:22:
         53:e3:64:2c:f5:d8:c6:df:50:87:a7:03:75:c2:38:9e:6c:d0:
         0b:47:53:74:7f:b3:3d:06:75:f1:d8:79:dd:ff:b2:cb:5e:c3:
         b5:56:8e:08:d9:79:ab:7c:3b:3f:2c:85:ba:d2:f1:39:bf:58:
         f4:43:7a:9a:ce:5e:dd:98:87:e9:0a:ee:9f:39:10:51:f6:dd:
         79:78:79:3a:cc:cd:f5:c5:75:e2:af:8e:63:fe:2f:b0:11:e3:
         d8:9c:3f:bc:03:84:4e:85:2a:bf:8e:a9:96:be:b1:0f:9a:f9:
         6e:b6:a4:f8:c6:e2:ee:0b:fc:df:8b:8e:09:bc:59:4b:51:ab:
         a0:2b:f9:b9:c9:09:77:dd:c3:42:34:c3:76:bf:a5:37:cb:35:
         81:e8:4f:03:cf:6b:1e:52:2c:f6:96:bf:00:1c:8e:43:ea:e6:
         74:f0:a5:3f:e0:46:35:d1:31:6e:4f:85:fe:f2:ff:fc:d1:35:
         55:06:74:a4:bc:98:2a:9b:b0:f2:97:a8:b6:6a:e7:df:d7:2c:
         c2:32:e5:ef:b0:bd:1b:75:28:7f:f4:8e:56:9d:f4:0f:99:86:
         c6:b8:5e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIq5jIymE9LULMDXprJR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5
NzRjZjIwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD
EygxYjZiNjc1ZGFmM2JjMTg2YzRlMmU4OGUyMGYxMGRkZGMyN2Q5MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjQ3wvsyZQ7xBuJLyLfked15x0TS
P+Goy1MONsg/AduHjExTgrfooy84ziWbNKext9YMDqBO2F5WWkmmHBp+2EWzNO2Y
kL9da4SvyWrqjBSf4ksgyJBbm17eiWbSC+X38VrYWFAqNXkJNxwYgXT9+8TfFPOC
2pfmz2vT0vBfKCyk1X+xn+SCguB1y22OUieOr/Qj18yWq/SvUUr4KRmzyzlWTboa
WmdFgdAY7BojKJkgp6Z6xr5uIep9ogCSeo5nDjeyf7B/sq5Fq8ukFkgK/BauXErV
HdNnIpgUalZaTd574jZgOiFEVr1ZlSDr/5Vn5sbEit0jU/hzRf0sTavmyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtrZ12vO8GGxOLojiDxDd3CfZG0MB8GA1UdIwQY
MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt
YTNmYzE5NmFhYmIzLzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz
LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4EZtzt7
PO+KEF9qy8g0j1FHDKlYMKUo1mIoNvxteaCKYewiU+NkLPXYxt9Qh6cDdcI4nmzQ
C0dTdH+zPQZ18dh53f+yy17DtVaOCNl5q3w7PyyFutLxOb9Y9EN6ms5e3ZiH6Qru
nzkQUfbdeXh5OszN9cV14q+OY/4vsBHj2Jw/vAOEToUqv46plr6xD5r5brak+Mbi
7gv834uOCbxZS1GroCv5uckJd93DQjTDdr+lN8s1gehPA89rHlIs9pa/AByOQ+rm
dPClP+BGNdExbk+F/vL//NE1VQZ0pLyYKpuw8peotmrn39cswjLl77C9G3Uof/SO
Vp30D5mGxrheZw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:54 2026 by rpki-client