This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
File:                     Ane1_sq3Pj5N0YapraBl-uio3hw.mft (raw, json)
Hash identifier:          VGarp9oRmKvIbyP0QxL9w47G6QNWo8UZDAD2pO0CjJU=
Subject key identifier:   6F:BA:C2:7F:EA:C6:41:5D:75:43:6B:BD:E8:2A:66:F7:3E:53:BD:A4
Authority key identifier: 02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C
Certificate issuer:       /CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
Certificate serial:       019C420F3029A6A478B6ED8126D7C7756545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
Manifest number:          020B
Signing time:             Mon 09 Feb 2026 11:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:17 +0000
Files and hashes:         1: 4kQOoXdir4FPvZ9bCLqrsgJ56Io.roa (hash: v4oKtc8cLQM/OZEKI6njCV3tcg79uTMtDOJd0UU6hQA=)
                          2: Ane1_sq3Pj5N0YapraBl-uio3hw.crl (hash: TfsT5VG0lPIVCyo8lDw+XesCeideYZACs4WkMcSXorA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:30:29:a6:a4:78:b6:ed:81:26:d7:c7:75:65:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
        Validity
            Not Before: Feb  9 11:00:17 2026 GMT
            Not After : Feb 10 11:00:17 2026 GMT
        Subject: CN=6fbac27feac6415d75436bbde82a66f73e53bda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:8e:2b:3c:ee:36:e0:b6:2d:ce:d3:b0:eb:
                    7e:b2:56:5c:32:a3:4f:fd:61:93:32:96:37:58:1a:
                    3a:19:b9:4d:d4:cf:3b:41:fb:2b:03:b2:51:5d:37:
                    94:3f:60:38:2c:fb:15:d5:28:34:70:cb:1d:6d:fc:
                    b3:74:c6:73:95:6d:71:9a:51:7d:36:d4:c7:71:c3:
                    d0:51:c6:75:b3:cf:be:6f:00:7d:ab:0c:0b:80:70:
                    7e:c6:22:46:98:81:ad:a9:99:bd:e7:08:9c:3d:9d:
                    57:07:f1:1f:fa:e5:fa:2e:ee:af:c4:02:a2:12:2f:
                    65:61:33:52:de:cc:40:cd:06:da:40:57:81:e7:d2:
                    91:37:22:02:93:74:b2:e4:60:0f:b4:5a:c7:bf:38:
                    f6:4c:10:e8:a1:0d:60:a4:5a:f6:55:7a:7d:06:06:
                    8e:5a:a9:31:9d:4e:b0:d3:30:dc:03:e2:42:ef:17:
                    2b:04:eb:bd:2d:87:98:53:f1:27:88:03:e5:72:21:
                    51:fb:5b:13:e6:aa:9d:79:2e:68:cc:84:78:8e:ff:
                    06:29:19:36:cc:74:16:7d:46:7d:d2:2c:3a:fe:ba:
                    23:e3:c7:d6:17:60:12:40:f3:68:40:5e:d4:65:36:
                    61:19:0d:33:52:36:e0:ca:db:c6:5a:8a:af:49:56:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:C2:7F:EA:C6:41:5D:75:43:6B:BD:E8:2A:66:F7:3E:53:BD:A4
            X509v3 Authority Key Identifier:
                keyid:02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:76:d8:c8:1a:d2:39:cc:ed:dd:f8:a0:be:bd:a4:87:90:50:
         7d:c1:80:51:91:d9:4d:95:00:c7:d6:57:a9:49:1b:59:24:58:
         10:b5:67:e0:46:a6:b3:72:63:ef:b2:fa:3f:cc:43:8d:12:df:
         52:ca:fe:d4:15:f2:90:07:00:7b:80:42:aa:33:ae:d5:d5:70:
         6c:1f:0c:31:52:97:dd:0a:9d:a8:80:7f:2f:60:94:4c:1c:c6:
         eb:52:81:5c:12:80:26:25:94:30:78:90:39:fa:6c:49:95:4e:
         85:d3:4e:e1:61:e7:94:0f:aa:de:c9:49:9a:68:03:a5:3e:6d:
         c0:bd:6a:34:39:79:f5:0e:d9:01:04:4f:c6:ee:8a:87:27:0f:
         0e:7b:f3:5c:bb:7d:10:0c:75:f8:67:54:d9:39:a8:dd:6a:c8:
         d9:b7:f1:ed:b4:9a:1f:9a:52:97:62:73:c2:8e:60:58:32:2d:
         42:70:3a:a9:2a:49:c5:f7:83:d3:a9:39:37:c0:50:80:98:4f:
         c2:70:a8:2a:e2:f9:da:2a:11:ca:a2:c6:6a:3a:2b:a3:c4:78:
         1a:87:66:9d:be:27:e9:aa:c8:b5:c8:11:12:2f:0e:ab:17:ad:
         be:87:99:97:7b:44:14:f6:32:22:ad:aa:0a:08:4b:3b:aa:55:
         e0:d6:47:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDzAppqR4tu2BJtfHdWVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzdiNWZlY2FiNzNlM2U0ZGQxODZhOWFkYTA2NWZhZThh
OGRlMWMwHhcNMjYwMjA5MTEwMDE3WhcNMjYwMjEwMTEwMDE3WjAzMTEwLwYDVQQD
Eyg2ZmJhYzI3ZmVhYzY0MTVkNzU0MzZiYmRlODJhNjZmNzNlNTNiZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh2OKzzuNuC2Lc7TsOt+slZcMqNP
/WGTMpY3WBo6GblN1M87QfsrA7JRXTeUP2A4LPsV1Sg0cMsdbfyzdMZzlW1xmlF9
NtTHccPQUcZ1s8++bwB9qwwLgHB+xiJGmIGtqZm95wicPZ1XB/Ef+uX6Lu6vxAKi
Ei9lYTNS3sxAzQbaQFeB59KRNyICk3Sy5GAPtFrHvzj2TBDooQ1gpFr2VXp9BgaO
WqkxnU6w0zDcA+JC7xcrBOu9LYeYU/EniAPlciFR+1sT5qqdeS5ozIR4jv8GKRk2
zHQWfUZ90iw6/roj48fWF2ASQPNoQF7UZTZhGQ0zUjbgytvGWoqvSVbhKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+6wn/qxkFddUNrvegqZvc+U72kMB8GA1UdIwQY
MBaAFAJ3tf7Ktz4+TdGGqa2gZfroqN4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5lMV9zcTNQajVOMFlhcHJhQmwtdWlvM2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82MWZhM2EtMmE4Zi00MzUwLWE2Zjct
NTE3ODUwMWU4NzM1LzEvQW5lMV9zcTNQajVOMFlhcHJhQmwtdWlvM2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82MWZhM2EtMmE4Zi00MzUwLWE2ZjctNTE3ODUwMWU4NzM1
LzEvQW5lMV9zcTNQajVOMFlhcHJhQmwtdWlvM2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHbYyBrS
Oczt3figvr2kh5BQfcGAUZHZTZUAx9ZXqUkbWSRYELVn4Eams3Jj77L6P8xDjRLf
Usr+1BXykAcAe4BCqjOu1dVwbB8MMVKX3QqdqIB/L2CUTBzG61KBXBKAJiWUMHiQ
OfpsSZVOhdNO4WHnlA+q3slJmmgDpT5twL1qNDl59Q7ZAQRPxu6KhycPDnvzXLt9
EAx1+GdU2Tmo3WrI2bfx7bSaH5pSl2Jzwo5gWDItQnA6qSpJxfeD06k5N8BQgJhP
wnCoKuL52ioRyqLGajoro8R4Godmnb4n6arItcgREi8OqxetvoeZl3tEFPYyIq2q
CghLO6pV4NZH3Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:44 2026 by rpki-client