This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File:                     ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier:          W3mTiEJmSDJabWsS8ZLSUkRvQVY5BTJUnRL554xBK38=
Subject key identifier:   92:95:CE:3E:05:E8:00:74:18:90:07:9B:04:62:CB:8B:07:2C:D3:1D
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer:       /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial:       019C427DFB4A7191D6590DCA4BC460B0991D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number:          0D41
Signing time:             Mon 09 Feb 2026 13:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:18 +0000
Files and hashes:         1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: LgHzjaLFWNP/2RgzzaBVLeA32Ype+KZfMywZreaDMwc=)
                          2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
                          3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:fb:4a:71:91:d6:59:0d:ca:4b:c4:60:b0:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
        Validity
            Not Before: Feb  9 13:01:18 2026 GMT
            Not After : Feb 10 13:01:18 2026 GMT
        Subject: CN=9295ce3e05e800741890079b0462cb8b072cd31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:45:20:b4:3f:7a:3d:f6:0b:56:e4:cc:fe:
                    b7:b4:cd:dc:57:1a:e9:4d:05:e6:77:a8:6c:33:4a:
                    8a:c8:4b:cb:42:a6:90:7c:4f:df:6f:c9:fc:d2:eb:
                    3c:b0:5d:b4:48:a2:fc:dc:73:c7:86:71:7b:59:d1:
                    d7:05:f3:20:6f:b6:71:f0:71:36:7c:80:3b:e5:8b:
                    fd:2a:6d:b9:6d:95:f4:9b:c8:f5:b7:f9:09:58:43:
                    5a:2c:35:a0:89:f8:93:d7:8c:65:2b:ed:89:e6:a7:
                    cd:7e:d4:df:55:c2:5d:c8:9b:89:46:93:65:80:b1:
                    e7:e5:2d:fc:8f:d8:30:ea:f7:cf:cc:be:8a:7b:30:
                    ec:3d:df:77:48:7f:b3:26:92:c9:dd:b3:3f:ae:e6:
                    52:0b:5b:0e:71:fb:0b:d9:a1:85:0a:30:da:6e:ed:
                    f7:fb:28:c8:2e:ba:fb:bc:73:7b:da:e0:2b:7c:89:
                    29:88:58:ea:7b:29:3a:09:f4:c3:33:f5:30:e6:94:
                    96:1c:4c:19:e9:8b:1c:32:47:f8:f9:c4:92:07:50:
                    5e:7c:f7:54:72:c4:b7:0d:bf:9a:01:5c:06:ca:ff:
                    1c:5d:c9:a3:c4:d4:f9:5d:3c:5c:38:72:19:cc:b0:
                    48:36:bb:eb:d0:a6:c0:8c:b1:d1:f6:5e:86:4d:99:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:CE:3E:05:E8:00:74:18:90:07:9B:04:62:CB:8B:07:2C:D3:1D
            X509v3 Authority Key Identifier:
                keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d8:5b:d4:da:c3:68:a8:1f:4f:64:9a:7d:4e:8f:bc:f1:3c:
         db:1b:f1:46:34:eb:12:2d:c3:07:98:a0:04:40:aa:de:2a:3c:
         3c:7f:54:e6:32:40:8f:33:be:ac:0f:6f:40:c0:a9:41:31:30:
         47:28:49:cf:b2:90:82:12:ca:f7:20:c8:8b:0d:21:49:b1:80:
         6a:be:ba:8e:35:6d:52:8a:bb:11:bf:f0:14:a4:7a:32:3a:77:
         d9:b9:62:36:a7:96:df:6f:6c:d3:97:8d:48:38:53:fd:0f:5f:
         5c:23:fa:26:49:d1:31:99:55:3d:ef:8c:e5:9a:e0:2b:fe:50:
         a5:96:48:4b:a7:ef:5e:e6:5a:8f:bf:c2:9d:47:f4:2c:bf:9e:
         39:5a:e7:58:d5:ee:80:3c:ca:52:8b:14:09:99:d7:f0:98:8b:
         33:6a:58:2a:12:8a:d0:ee:36:5c:3b:99:26:18:8a:22:64:34:
         e3:95:8c:92:02:cb:b6:4f:9b:78:14:37:4f:0b:d0:4a:b1:5e:
         f6:e4:be:a6:a0:36:57:f5:63:ed:be:7c:3b:f0:f5:21:82:85:
         e4:bc:38:0e:ec:18:58:dc:98:20:55:8f:bc:17:d6:cf:63:ba:
         60:e5:2d:63:db:7d:65:7b:eb:73:cd:5f:41:cb:06:da:55:28:
         e0:71:5d:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfftKcZHWWQ3KS8RgsJkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi
NDg3YWYwHhcNMjYwMjA5MTMwMTE4WhcNMjYwMjEwMTMwMTE4WjAzMTEwLwYDVQQD
Eyg5Mjk1Y2UzZTA1ZTgwMDc0MTg5MDA3OWIwNDYyY2I4YjA3MmNkMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14tFILQ/ej32C1bkzP63tM3cVxrp
TQXmd6hsM0qKyEvLQqaQfE/fb8n80us8sF20SKL83HPHhnF7WdHXBfMgb7Zx8HE2
fIA75Yv9Km25bZX0m8j1t/kJWENaLDWgifiT14xlK+2J5qfNftTfVcJdyJuJRpNl
gLHn5S38j9gw6vfPzL6KezDsPd93SH+zJpLJ3bM/ruZSC1sOcfsL2aGFCjDabu33
+yjILrr7vHN72uArfIkpiFjqeyk6CfTDM/Uw5pSWHEwZ6YscMkf4+cSSB1BefPdU
csS3Db+aAVwGyv8cXcmjxNT5XTxcOHIZzLBINrvr0KbAjLHR9l6GTZnbNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKVzj4F6AB0GJAHmwRiy4sHLNMdMB8GA1UdIwQY
MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt
MmRhNjI1ZWI3MjQyLzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy
LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINhb1NrD
aKgfT2SafU6PvPE82xvxRjTrEi3DB5igBECq3io8PH9U5jJAjzO+rA9vQMCpQTEw
RyhJz7KQghLK9yDIiw0hSbGAar66jjVtUoq7Eb/wFKR6Mjp32bliNqeW329s05eN
SDhT/Q9fXCP6JknRMZlVPe+M5ZrgK/5QpZZIS6fvXuZaj7/CnUf0LL+eOVrnWNXu
gDzKUosUCZnX8JiLM2pYKhKK0O42XDuZJhiKImQ045WMkgLLtk+beBQ3TwvQSrFe
9uS+pqA2V/Vj7b58O/D1IYKF5Lw4DuwYWNyYIFWPvBfWz2O6YOUtY9t9ZXvrc81f
QcsG2lUo4HFdGw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:05 2026 by rpki-client