This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File:                     1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier:          VLP4XxwZ9HaYoR+BWzkMyStYBjVaiJNF1DoMZ6yEPrY=
Subject key identifier:   3B:34:AC:11:D6:F5:D2:D3:43:90:E9:1F:DF:AB:36:9D:C7:E0:AA:BC
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer:       /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial:       019C427D072355F769D17F26EEE1AE44562C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number:          09AB
Signing time:             Mon 09 Feb 2026 13:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:15 +0000
Files and hashes:         1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: l/YIBeNaVvIMhA19OhB5ZfWnsLhqcCiUY6V55IlKmDA=)
                          2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:07:23:55:f7:69:d1:7f:26:ee:e1:ae:44:56:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
        Validity
            Not Before: Feb  9 13:00:15 2026 GMT
            Not After : Feb 10 13:00:15 2026 GMT
        Subject: CN=3b34ac11d6f5d2d34390e91fdfab369dc7e0aabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:63:2f:59:0e:e8:f0:5b:05:17:94:f2:fc:fe:
                    b8:e5:02:f6:f2:ef:16:f4:35:a1:10:55:41:03:84:
                    0c:4e:7c:0e:92:95:13:29:92:86:e2:d5:a7:1b:04:
                    a6:d5:15:32:63:8c:a8:90:20:87:9e:c1:fc:b2:b6:
                    98:32:28:25:24:27:3c:51:83:2e:66:7b:9b:fe:25:
                    98:06:f4:18:88:24:8c:c7:9d:0d:52:f0:b2:31:58:
                    27:a0:6c:91:e7:1d:6f:c9:85:22:1c:f8:18:6f:55:
                    86:49:ea:59:2e:25:a1:b1:bc:d7:13:e8:80:da:c2:
                    c8:55:ab:43:f6:6b:1b:e2:07:53:b1:52:a6:27:20:
                    7a:9a:b3:40:e7:49:2e:2b:e8:21:aa:2d:9b:b1:d0:
                    89:bd:ba:93:9f:03:89:12:01:1e:2b:5c:41:92:dd:
                    60:2c:43:a2:9b:f1:a7:fc:32:b1:bc:f7:f1:14:9f:
                    38:d6:ca:cc:d3:ef:bf:3b:6d:04:0e:fe:ce:95:8e:
                    c3:d1:b5:4d:6e:9b:e4:b4:b9:b6:dd:a5:1f:33:b6:
                    cd:19:e0:3d:df:71:05:8d:2b:7f:34:63:5b:3e:26:
                    17:a7:0e:ae:43:98:39:8b:e1:ac:a8:c5:74:88:2b:
                    3d:8d:83:f4:61:c8:71:0f:28:7f:ca:c6:89:49:6a:
                    f0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:34:AC:11:D6:F5:D2:D3:43:90:E9:1F:DF:AB:36:9D:C7:E0:AA:BC
            X509v3 Authority Key Identifier:
                keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:1f:ce:f7:fd:f2:91:51:0e:41:52:ed:a5:55:73:e8:86:
         ac:f5:e8:b7:eb:2b:ef:1a:58:65:9a:9a:df:dd:ee:5a:7a:eb:
         1a:13:fe:6e:ae:5a:35:c3:cc:b9:1d:fd:af:6b:42:73:ba:b0:
         08:68:e5:e0:c8:1b:4c:02:72:39:70:89:e7:f8:98:74:1e:49:
         96:c4:73:10:5b:9e:35:7d:6f:cb:89:a7:7f:1f:64:20:22:b8:
         9c:b7:e7:75:39:1e:c3:ff:7a:b9:36:e4:51:b7:8c:12:8d:ba:
         18:3c:ea:6d:92:d3:f8:5b:13:49:87:c6:9d:2a:67:6d:08:46:
         ff:75:2f:6b:f8:7d:fe:f4:3b:a8:fb:a6:e4:63:f4:d9:bf:27:
         ec:a1:e7:5c:da:03:05:4d:24:a7:17:a8:9d:80:df:a4:96:73:
         c8:d8:7f:0f:07:81:3a:15:18:5b:8c:26:ad:f6:f6:f2:80:0f:
         17:5b:5f:00:ae:a4:19:b8:be:6d:5b:6c:42:4f:ef:53:0e:18:
         9b:22:ed:2c:76:5c:90:60:14:61:29:5d:a0:68:20:75:bf:48:
         7d:ab:34:d7:c1:84:7b:52:e6:13:61:8e:d3:5c:40:84:8b:7a:
         44:59:b2:91:5b:2c:0c:0a:d9:da:c7:75:7d:ac:8a:ec:a4:fa:
         d7:1b:02:56
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxCfQcjVfdp0X8m7uGuRFYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzQ2OGRjY2FlNDNjMjM5Zjg1MzBlODIzNWUzYTJkNGZj
ZDNlNzMwHhcNMjYwMjA5MTMwMDE1WhcNMjYwMjEwMTMwMDE1WjAzMTEwLwYDVQQD
EygzYjM0YWMxMWQ2ZjVkMmQzNDM5MGU5MWZkZmFiMzY5ZGM3ZTBhYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92MvWQ7o8FsFF5Ty/P645QL28u8W
9DWhEFVBA4QMTnwOkpUTKZKG4tWnGwSm1RUyY4yokCCHnsH8sraYMiglJCc8UYMu
Znub/iWYBvQYiCSMx50NUvCyMVgnoGyR5x1vyYUiHPgYb1WGSepZLiWhsbzXE+iA
2sLIVatD9msb4gdTsVKmJyB6mrNA50kuK+ghqi2bsdCJvbqTnwOJEgEeK1xBkt1g
LEOim/Gn/DKxvPfxFJ841srM0++/O20EDv7OlY7D0bVNbpvktLm23aUfM7bNGeA9
33EFjSt/NGNbPiYXpw6uQ5g5i+GsqMV0iCs9jYP0YchxDyh/ysaJSWrwSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDs0rBHW9dLTQ5DpH9+rNp3H4Kq8MB8GA1UdIwQY
MBaAFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uUm8zTXJrUENPZmhURG9JMTQ2TFVfTlBuTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZi
LWIzZjA5NDJlNjllYy8xLzEtblJvM01ya1BDT2ZoVERvSTE0NkxVX05Qbk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2L2EwYzgxNi03NjVlLTRkMWEtODY2Yi1iM2YwOTQyZTY5
ZWMvMS8xLW5SbzNNcmtQQ09maFREb0kxNDZMVV9OUG5NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevcf
zvf98pFRDkFS7aVVc+iGrPXot+sr7xpYZZqa393uWnrrGhP+bq5aNcPMuR39r2tC
c7qwCGjl4MgbTAJyOXCJ5/iYdB5JlsRzEFueNX1vy4mnfx9kICK4nLfndTkew/96
uTbkUbeMEo26GDzqbZLT+FsTSYfGnSpnbQhG/3Uva/h9/vQ7qPum5GP02b8n7KHn
XNoDBU0kpxeonYDfpJZzyNh/DweBOhUYW4wmrfb28oAPF1tfAK6kGbi+bVtsQk/v
Uw4YmyLtLHZckGAUYSldoGggdb9Ifas018GEe1LmE2GO01xAhIt6RFmykVssDArZ
2sd1fayK7KT61xsCVg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:03:55 2026 by rpki-client