This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File:                     SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier:          ZcODN8xGDKe2GDcRbHfxzFG/osDTHtzcf8UxlU0MAXc=
Subject key identifier:   72:1B:1F:DF:93:54:E9:24:65:55:D3:FC:2B:9C:9F:E2:BA:8C:F4:D3
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer:       /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial:       019C41A166E14F7632A54B73E2FF959C0DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number:          073B
Signing time:             Mon 09 Feb 2026 09:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:22 +0000
Files and hashes:         1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
                          2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: Gu+IoMy8uZ9pa9l9KTVU3HkDtl0DcGCqf+GEPjvzfyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:66:e1:4f:76:32:a5:4b:73:e2:ff:95:9c:0d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
        Validity
            Not Before: Feb  9 09:00:22 2026 GMT
            Not After : Feb 10 09:00:22 2026 GMT
        Subject: CN=721b1fdf9354e9246555d3fc2b9c9fe2ba8cf4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:73:ba:71:f3:58:cd:85:ba:7c:75:d4:31:3e:
                    47:47:16:35:07:e6:12:08:ea:5c:2c:98:ff:91:72:
                    8b:3e:9e:a2:af:0e:e4:fb:77:29:d2:85:fc:81:4b:
                    7e:bf:6b:53:9f:b4:ef:c6:29:07:c8:12:ec:13:3b:
                    eb:bf:5c:be:86:09:2a:2f:b8:50:52:b7:83:7b:92:
                    8b:09:3b:45:d9:a4:4c:8d:b2:a6:75:af:81:90:20:
                    45:33:82:98:7b:51:01:ad:47:8c:6a:33:d7:88:e3:
                    12:11:be:fc:64:d8:95:35:0f:c8:a3:a2:ab:86:46:
                    90:79:02:af:d3:f2:42:0e:34:9c:7d:32:0a:88:7d:
                    93:0e:3f:f3:a9:d5:f4:47:b5:1e:ad:f8:a2:77:ed:
                    41:b7:99:43:99:fe:d4:df:09:d5:2b:b8:7b:f4:c3:
                    ad:2f:30:2b:d0:cc:dd:df:e8:01:33:09:7b:76:97:
                    6d:c5:47:3c:cb:51:bb:65:b2:a2:77:b9:d6:bb:7a:
                    4f:c8:a3:27:fa:63:52:f3:08:7e:78:6a:9f:6e:a6:
                    cc:fd:b2:2a:52:de:3d:46:95:3a:59:06:e9:86:df:
                    42:c7:a0:28:7a:ca:42:b6:e6:8c:a0:2b:1d:57:2a:
                    6f:91:3b:1b:65:ab:58:7f:d4:5d:87:27:b0:3c:5e:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1B:1F:DF:93:54:E9:24:65:55:D3:FC:2B:9C:9F:E2:BA:8C:F4:D3
            X509v3 Authority Key Identifier:
                keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:26:f1:c4:8f:83:2d:3b:4a:ae:29:ab:b6:f6:e4:8c:42:32:
         f8:6a:4d:9c:0e:20:24:af:a6:f1:99:a4:e1:5a:34:16:bb:ac:
         00:fc:3f:6b:60:17:4e:b1:0a:61:44:db:95:15:93:9d:10:b8:
         af:ca:69:e0:87:4c:06:e8:b8:c1:d5:16:73:f9:97:55:53:5b:
         74:ba:9f:3b:de:10:29:06:48:d8:fa:77:37:67:ee:eb:6f:a3:
         f7:0f:5b:66:00:b3:ca:a6:11:64:4d:72:0d:95:53:d9:34:81:
         8b:a5:ba:3e:18:11:ef:85:10:5e:a9:ad:e0:d9:43:54:41:03:
         6d:ab:d2:34:68:46:ad:72:a0:b5:59:76:da:6f:ac:a2:81:8f:
         1e:28:e8:0f:65:fb:7c:0a:8a:e9:3a:ea:09:8a:d5:3f:32:fd:
         50:fa:b1:a5:c9:b8:84:ca:80:b4:fe:f4:23:88:7c:50:b8:68:
         23:04:33:af:51:d1:ef:98:f7:16:d3:fa:87:30:2a:d9:6d:e2:
         60:59:27:2e:dc:e0:8b:09:0a:45:40:4b:f3:6e:0b:1a:7e:85:
         fa:02:0d:87:14:16:56:a9:17:d3:63:6c:2f:b3:ff:dd:a1:97:
         18:7b:ba:02:02:25:96:fe:31:43:97:ba:03:9f:84:b5:fa:2f:
         e6:c7:b6:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoWbhT3YypUtz4v+VnA3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0
YWZjZWIwHhcNMjYwMjA5MDkwMDIyWhcNMjYwMjEwMDkwMDIyWjAzMTEwLwYDVQQD
Eyg3MjFiMWZkZjkzNTRlOTI0NjU1NWQzZmMyYjljOWZlMmJhOGNmNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3O6cfNYzYW6fHXUMT5HRxY1B+YS
COpcLJj/kXKLPp6irw7k+3cp0oX8gUt+v2tTn7TvxikHyBLsEzvrv1y+hgkqL7hQ
UreDe5KLCTtF2aRMjbKmda+BkCBFM4KYe1EBrUeMajPXiOMSEb78ZNiVNQ/Io6Kr
hkaQeQKv0/JCDjScfTIKiH2TDj/zqdX0R7Uerfiid+1Bt5lDmf7U3wnVK7h79MOt
LzAr0Mzd3+gBMwl7dpdtxUc8y1G7ZbKid7nWu3pPyKMn+mNS8wh+eGqfbqbM/bIq
Ut49RpU6WQbpht9Cx6AoespCtuaMoCsdVypvkTsbZatYf9RdhyewPF6K5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIbH9+TVOkkZVXT/Cucn+K6jPTTMB8GA1UdIwQY
MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt
MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx
LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACibxxI+D
LTtKrimrtvbkjEIy+GpNnA4gJK+m8Zmk4Vo0FrusAPw/a2AXTrEKYUTblRWTnRC4
r8pp4IdMBui4wdUWc/mXVVNbdLqfO94QKQZI2Pp3N2fu62+j9w9bZgCzyqYRZE1y
DZVT2TSBi6W6PhgR74UQXqmt4NlDVEEDbavSNGhGrXKgtVl22m+sooGPHijoD2X7
fAqK6TrqCYrVPzL9UPqxpcm4hMqAtP70I4h8ULhoIwQzr1HR75j3FtP6hzAq2W3i
YFknLtzgiwkKRUBL824LGn6F+gINhxQWVqkX02NsL7P/3aGXGHu6AgIllv4xQ5e6
A5+Etfov5se2hA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:28 2026 by rpki-client