This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File:                     S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier:          9906+Yj5bcEnMhhMEB9IhDSHdS35upqeoC02B1Ta7vI=
Subject key identifier:   28:D9:9A:B8:FE:DA:62:FF:B2:A0:75:C8:36:21:DC:34:B4:F9:26:75
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer:       /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial:       019C416AE40CEBF0F36C80C4655198B664C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number:          093B
Signing time:             Mon 09 Feb 2026 08:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:50 +0000
Files and hashes:         1: 76Y2-HUPTiLdTCSIpYCkR2ZgGcQ.roa (hash: aIEXIJxpvH5c1txE7w8Ef9ChmAewpEGy4MTuP+uMjCA=)
                          2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: Gr8Ii3V1doAkzgMEdVwglRVF+VkaNtaCrVsENEA4Ojg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:e4:0c:eb:f0:f3:6c:80:c4:65:51:98:b6:64:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
        Validity
            Not Before: Feb  9 08:00:50 2026 GMT
            Not After : Feb 10 08:00:50 2026 GMT
        Subject: CN=28d99ab8feda62ffb2a075c83621dc34b4f92675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:5c:46:3f:ca:ef:f1:10:77:fd:5c:2e:0f:
                    91:6a:0f:3c:1f:8a:56:00:f9:99:3c:f6:21:d2:9f:
                    26:d0:bc:08:96:05:a5:6e:3e:59:21:78:86:df:78:
                    a6:58:76:3d:93:63:a9:79:72:e9:c2:e4:3d:dc:ab:
                    9b:bf:94:b3:5f:f8:aa:41:48:63:9f:a3:d9:c1:38:
                    d5:50:84:98:40:74:6a:65:a3:78:f9:bd:d7:6f:29:
                    76:f2:78:08:b3:55:39:74:51:7c:50:84:40:2d:49:
                    eb:df:2a:6d:61:be:93:69:36:07:06:e6:2e:f5:4e:
                    e8:32:20:8a:db:cb:8f:7d:b4:b7:3b:30:eb:cb:c4:
                    b4:ab:4d:a3:9d:b3:50:6c:d3:b8:e2:9b:ad:f0:58:
                    11:f4:de:dc:63:b7:b5:ac:a6:cb:90:fb:ab:27:6c:
                    63:5e:dd:c7:c8:d3:9c:dc:b7:af:60:ef:79:21:9b:
                    d2:65:98:7a:13:8e:81:76:c0:e5:8e:55:5c:da:af:
                    4c:eb:a6:79:17:a3:59:2f:21:91:a3:d5:6b:a7:4c:
                    81:2e:02:d2:ed:c5:9f:13:56:78:59:3b:3f:2c:8f:
                    9c:f7:68:b4:3e:93:55:9d:8d:35:3f:9e:30:46:58:
                    80:30:4c:b1:8f:dd:d8:48:18:5c:cb:f5:29:7c:ba:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D9:9A:B8:FE:DA:62:FF:B2:A0:75:C8:36:21:DC:34:B4:F9:26:75
            X509v3 Authority Key Identifier:
                keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c4:4f:84:e2:9f:d0:0d:55:dd:a8:59:15:ab:8a:bf:80:2c:
         9e:01:93:0c:1f:2c:e2:f7:c1:25:0e:d4:16:57:c6:d4:5d:19:
         4f:2c:53:75:eb:56:c1:f5:ee:77:eb:7d:c8:45:0f:1b:e4:cc:
         15:77:cc:3a:9f:df:58:61:fc:20:ea:8b:67:43:44:68:e5:f7:
         60:c2:6c:da:b7:dc:c5:4d:0e:79:bb:45:2d:4c:d9:ff:fe:b1:
         9a:fa:21:ab:c6:c8:6c:e3:86:bb:37:c0:8d:a5:10:08:da:b0:
         7b:06:07:23:ab:4c:2c:d1:d1:02:0f:cd:48:e2:92:34:c3:21:
         41:b1:ca:eb:7f:64:a5:d6:e8:23:68:be:4c:2f:35:16:1b:6d:
         8d:4c:e1:cf:33:c3:8a:47:d1:63:f4:28:bc:bb:50:21:1d:66:
         4e:8a:9f:db:17:a5:a9:6b:ff:0f:06:f2:27:f2:b4:16:64:d4:
         86:64:4e:b3:f8:bc:fe:cb:5d:a7:55:26:36:97:69:dd:e2:77:
         e3:b3:90:bd:1f:03:ac:05:c1:e8:8f:e1:3a:aa:fd:39:78:2b:
         8c:63:6d:10:e2:ee:06:e2:a3:be:2f:94:e6:f1:24:e9:1f:aa:
         cf:5b:37:0b:1c:f0:33:9e:9d:bc:a6:3c:5d:a9:5a:99:2c:5b:
         49:f9:99:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBauQM6/DzbIDEZVGYtmTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjRmOGMwZTFiMzlkOGE4ZWY4ZThjOGI1YTBmZmVlMmI1
M2I1ODcwHhcNMjYwMjA5MDgwMDUwWhcNMjYwMjEwMDgwMDUwWjAzMTEwLwYDVQQD
EygyOGQ5OWFiOGZlZGE2MmZmYjJhMDc1YzgzNjIxZGMzNGI0ZjkyNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNpcRj/K7/EQd/1cLg+Rag88H4pW
APmZPPYh0p8m0LwIlgWlbj5ZIXiG33imWHY9k2OpeXLpwuQ93Kubv5SzX/iqQUhj
n6PZwTjVUISYQHRqZaN4+b3Xbyl28ngIs1U5dFF8UIRALUnr3yptYb6TaTYHBuYu
9U7oMiCK28uPfbS3OzDry8S0q02jnbNQbNO44put8FgR9N7cY7e1rKbLkPurJ2xj
Xt3HyNOc3LevYO95IZvSZZh6E46BdsDljlVc2q9M66Z5F6NZLyGRo9Vrp0yBLgLS
7cWfE1Z4WTs/LI+c92i0PpNVnY01P54wRliAMEyxj93YSBhcy/UpfLpxMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjZmrj+2mL/sqB1yDYh3DS0+SZ1MB8GA1UdIwQY
MBaAFEtk+MDhs52KjvjoyLWg/+4rU7WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUt
OTVkNWUxNmNkZGVmLzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUtOTVkNWUxNmNkZGVm
LzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscRPhOKf
0A1V3ahZFauKv4AsngGTDB8s4vfBJQ7UFlfG1F0ZTyxTdetWwfXud+t9yEUPG+TM
FXfMOp/fWGH8IOqLZ0NEaOX3YMJs2rfcxU0OebtFLUzZ//6xmvohq8bIbOOGuzfA
jaUQCNqwewYHI6tMLNHRAg/NSOKSNMMhQbHK639kpdboI2i+TC81FhttjUzhzzPD
ikfRY/QovLtQIR1mToqf2xelqWv/DwbyJ/K0FmTUhmROs/i8/stdp1UmNpdp3eJ3
47OQvR8DrAXB6I/hOqr9OXgrjGNtEOLuBuKjvi+U5vEk6R+qz1s3CxzwM56dvKY8
XalamSxbSfmZEA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:41 2026 by rpki-client