This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File:                     95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier:          jM4a5uiBqCjbdtkyPt1uB9gxBX/0QVMLw5fqS/zaCDs=
Subject key identifier:   44:D0:BE:F5:A9:63:08:FA:AA:54:E7:CA:33:1D:A5:31:11:1B:EF:35
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer:       /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial:       019C44D9DC28CA9514D1E65FFCAE2546D471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number:          0408
Signing time:             Tue 10 Feb 2026 00:00:54 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:54 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:54 +0000
Files and hashes:         1: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: I+jVw4MRixmWq4mTH2vd4izqkZUMOAg3CRdKBDAVnAs=)
                          2: Jv0u9cMD564Ime5yTEWdumsR3O0.roa (hash: y04ea8/vqCOfvH/IiN/FLgzOzYxMmv/5aeY5o3QGFD0=)
                          3: MGt5BnBc1caHCVlOZifA8hYKUFM.asa (hash: Z3wsIN7VXFqQgyEQhPtCMDIavrFmtm5IXKY4ICw229o=)
                          4: pe0sIN9uxCEQg_N5LyvmyCfM-KE.roa (hash: 8haolzzXzMK5Ree7VnOnzT/y6HtcVT6TIJ87cWxWyqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:dc:28:ca:95:14:d1:e6:5f:fc:ae:25:46:d4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
        Validity
            Not Before: Feb 10 00:00:54 2026 GMT
            Not After : Feb 11 00:00:54 2026 GMT
        Subject: CN=44d0bef5a96308faaa54e7ca331da531111bef35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:a0:a0:0e:6c:d6:69:14:cc:67:b0:88:93:
                    58:c3:ec:e3:e3:72:2b:70:1e:e7:b5:1c:31:89:26:
                    85:b6:b1:7e:f7:e2:ff:1a:a7:45:71:80:9b:f7:5d:
                    98:36:af:59:79:f6:6c:79:63:cc:fa:d1:ee:cd:16:
                    25:cf:ce:06:8e:64:b3:d2:db:d9:12:11:b5:b5:87:
                    71:ab:7f:9b:43:67:7d:7f:db:35:98:89:e5:be:91:
                    fc:ed:bf:49:ef:91:ee:c0:21:a7:20:76:f4:48:42:
                    59:bc:f4:88:f8:76:de:0e:f6:2e:9e:e3:7d:8e:1e:
                    8e:28:f6:d0:49:6e:94:97:9e:aa:99:d3:e6:4b:e2:
                    d3:66:3d:16:71:77:c8:24:9a:23:60:f5:50:f5:3e:
                    22:f8:1c:1b:dc:d3:ff:7a:33:a2:2e:33:26:53:ed:
                    77:ec:6e:83:10:29:72:62:1f:1b:49:cf:3d:6b:60:
                    f8:c1:8d:8b:1b:18:66:41:fa:c3:91:2c:7f:dd:96:
                    49:29:79:21:1e:d1:12:77:62:b8:7c:83:3e:2f:03:
                    29:8b:1b:d3:64:18:da:72:7b:54:99:12:2d:06:bc:
                    32:c2:24:48:48:79:ef:b5:41:f8:98:0c:45:2b:39:
                    78:6b:bd:ad:c4:24:98:73:e0:a1:63:ec:d5:5d:43:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D0:BE:F5:A9:63:08:FA:AA:54:E7:CA:33:1D:A5:31:11:1B:EF:35
            X509v3 Authority Key Identifier:
                keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:43:34:eb:0a:a3:32:56:fe:c7:c1:4a:2c:77:e3:c6:12:8a:
         8a:30:5e:28:1d:8b:3a:48:b5:fc:c5:0f:1d:cf:2a:9c:e1:aa:
         0f:2b:1c:46:28:fa:a1:2d:84:de:73:44:87:9c:4c:af:74:09:
         6f:c8:58:62:d1:37:12:34:6f:f0:22:7c:af:f5:e7:67:bc:28:
         d3:19:56:08:4f:32:88:ff:dd:23:5c:82:ce:cf:86:7a:c3:31:
         7b:61:23:58:a2:a8:95:0c:5a:c0:72:ca:c5:dc:d0:8b:31:5c:
         4d:02:43:b0:ef:17:9e:83:5a:84:54:af:3d:50:77:cd:dc:84:
         1d:48:f4:61:d3:01:2c:35:91:20:e9:6d:8a:f1:e1:fd:a5:fc:
         26:c3:dd:54:06:8b:e8:b2:72:b8:be:1c:5a:e6:d4:8c:df:cd:
         b9:d8:2a:ca:e4:52:2f:36:dd:fa:e8:c0:cd:79:8a:4b:8b:ad:
         3a:e1:b6:4c:24:c1:4b:94:44:fc:f1:e1:e5:66:9a:65:8b:ce:
         67:9e:7b:bd:17:d7:66:8b:2d:09:03:e4:d4:84:9f:64:a2:5b:
         f4:56:4c:9f:1d:58:23:07:30:f6:bc:a1:e6:3d:a3:b7:92:b4:
         5a:fe:c4:e7:40:99:ad:5e:77:67:08:c0:89:da:28:c2:93:4d:
         cf:c9:b4:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2dwoypUU0eZf/K4lRtRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWZjZmQyODc1YWJkZjYxZTE5ZDMyNzBlYWZlMWVmZmFk
YzY2NjIwHhcNMjYwMjEwMDAwMDU0WhcNMjYwMjExMDAwMDU0WjAzMTEwLwYDVQQD
Eyg0NGQwYmVmNWE5NjMwOGZhYWE1NGU3Y2EzMzFkYTUzMTExMWJlZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOOgoA5s1mkUzGewiJNYw+zj43Ir
cB7ntRwxiSaFtrF+9+L/GqdFcYCb912YNq9ZefZseWPM+tHuzRYlz84GjmSz0tvZ
EhG1tYdxq3+bQ2d9f9s1mInlvpH87b9J75HuwCGnIHb0SEJZvPSI+HbeDvYunuN9
jh6OKPbQSW6Ul56qmdPmS+LTZj0WcXfIJJojYPVQ9T4i+Bwb3NP/ejOiLjMmU+13
7G6DEClyYh8bSc89a2D4wY2LGxhmQfrDkSx/3ZZJKXkhHtESd2K4fIM+LwMpixvT
ZBjacntUmRItBrwywiRISHnvtUH4mAxFKzl4a72txCSYc+ChY+zVXUN0XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETQvvWpYwj6qlTnyjMdpTERG+81MB8GA1UdIwQY
MBaAFPefz9KHWr32HhnTJw6v4e/63GZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEt
OTA3NzZmODRjOWI3LzEvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEtOTA3NzZmODRjOWI3
LzEvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUM06wqj
Mlb+x8FKLHfjxhKKijBeKB2LOki1/MUPHc8qnOGqDyscRij6oS2E3nNEh5xMr3QJ
b8hYYtE3EjRv8CJ8r/XnZ7wo0xlWCE8yiP/dI1yCzs+GesMxe2EjWKKolQxawHLK
xdzQizFcTQJDsO8XnoNahFSvPVB3zdyEHUj0YdMBLDWRIOltivHh/aX8JsPdVAaL
6LJyuL4cWubUjN/NudgqyuRSLzbd+ujAzXmKS4utOuG2TCTBS5RE/PHh5WaaZYvO
Z557vRfXZostCQPk1ISfZKJb9FZMnx1YIwcw9ryh5j2jt5K0Wv7E50CZrV53ZwjA
idoowpNNz8m0DA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:30 2026 by rpki-client