This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File:                     n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier:          K5k7y2XjeFDBK8YNLWcC/dOGYi7fx+41mtCTlEuxhOk=
Subject key identifier:   BF:73:A1:3A:B9:B8:72:D6:AA:3D:C5:7E:39:48:34:20:F2:9A:57:68
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer:       /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial:       019C427DAF5A980AE094DE8F800615AE5C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number:          137A
Signing time:             Mon 09 Feb 2026 13:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:58 +0000
Files and hashes:         1: jrXfTMtV6H8gigUiywKcsYuAQWc.roa (hash: mgcQY3R0XYxNLA95issP8LL8M3tboWLY7IU4hd9EG4w=)
                          2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: qhbhuvSzHiopdrCAX+GiKNSct8fIEAGMeZ38bT1i4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:af:5a:98:0a:e0:94:de:8f:80:06:15:ae:5c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
        Validity
            Not Before: Feb  9 13:00:58 2026 GMT
            Not After : Feb 10 13:00:58 2026 GMT
        Subject: CN=bf73a13ab9b872d6aa3dc57e39483420f29a5768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:89:8d:e3:b6:02:10:7e:cb:6c:57:aa:d0:
                    e9:74:1a:01:ee:74:df:92:70:fc:df:7d:d5:57:90:
                    5b:dd:9d:c3:60:34:8e:6c:db:8a:39:e8:20:85:37:
                    dd:3a:97:31:e1:7c:3c:b1:3c:60:92:9c:5f:fb:0e:
                    fb:da:df:34:d1:de:5e:60:60:7e:9d:fe:78:35:b3:
                    46:67:b7:35:13:82:b6:8d:c1:92:4e:62:15:2d:ff:
                    8e:d0:49:f0:a6:d7:4c:96:30:3c:20:4f:8d:0f:f6:
                    ea:f5:52:8d:41:63:bb:7a:ab:0e:3d:f8:43:89:13:
                    6c:f2:2e:5c:cd:f5:3d:c5:10:56:bd:4f:d9:1d:ff:
                    37:b6:f8:0a:76:1d:36:fd:12:a4:ef:cc:68:fb:5c:
                    c0:eb:93:7f:16:f3:85:5b:88:59:4b:7e:8b:af:62:
                    ed:a7:e3:5e:40:47:87:3d:de:a9:4e:e7:95:b2:63:
                    ef:c7:cc:3e:29:fc:6e:cb:d3:b0:fa:10:44:13:1e:
                    a1:77:75:d8:27:7b:74:d4:01:ab:60:38:b2:fa:7e:
                    27:d0:0c:fe:5a:fe:eb:84:1a:fa:0f:fb:df:85:78:
                    0d:5c:98:de:56:a7:68:59:9e:d3:92:1e:91:64:01:
                    0f:28:39:3d:e1:15:1e:09:ad:34:8e:69:81:4b:22:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:73:A1:3A:B9:B8:72:D6:AA:3D:C5:7E:39:48:34:20:F2:9A:57:68
            X509v3 Authority Key Identifier:
                keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:99:37:e7:c3:6a:d3:b8:66:5f:39:d6:c7:39:bd:5a:10:91:
         06:12:da:0f:a7:0d:c9:f8:59:6c:ab:3b:c7:14:99:6a:f6:e2:
         25:18:f0:03:c5:e5:9a:dd:d6:00:9d:3b:7c:fd:49:ef:de:63:
         58:60:cf:f5:a3:75:a2:40:e1:4f:70:1c:15:64:64:58:be:3e:
         c2:71:fb:4d:83:9d:89:94:07:11:ab:02:99:29:5a:c4:f7:d3:
         9e:0c:32:90:27:ad:1e:7d:86:6f:e6:c3:f4:0e:86:7e:99:cf:
         67:98:35:92:bc:39:fd:cb:34:64:9c:76:c5:0f:80:c9:b8:cf:
         3e:10:a2:a6:b2:2f:08:6f:78:75:12:a3:cc:58:fb:0f:01:d4:
         cf:fd:8e:eb:e9:78:63:bd:5b:a7:34:c9:28:83:a2:cb:b9:94:
         c9:f3:37:a2:82:62:69:69:9b:7b:ee:7a:55:c1:75:b2:a3:83:
         de:4d:1a:99:9f:43:da:66:5b:55:6b:2c:c4:30:62:ee:df:0b:
         4e:c9:30:b8:ad:00:76:45:7d:89:2a:d2:eb:fc:89:e1:ca:76:
         b5:62:73:20:cf:d6:35:2a:b4:f1:97:f2:50:a3:ae:35:12:ea:
         d8:29:d4:82:29:76:19:f9:2b:22:dc:d3:5a:fb:03:2c:31:35:
         b8:10:34:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfa9amArglN6PgAYVrlx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYmRkYzYzMTNlZmM0YjY3MmE3ZTJiMzJhZTNjNDQ4NGZl
NWY2MzAwHhcNMjYwMjA5MTMwMDU4WhcNMjYwMjEwMTMwMDU4WjAzMTEwLwYDVQQD
EyhiZjczYTEzYWI5Yjg3MmQ2YWEzZGM1N2UzOTQ4MzQyMGYyOWE1NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZuJjeO2AhB+y2xXqtDpdBoB7nTf
knD8333VV5Bb3Z3DYDSObNuKOegghTfdOpcx4Xw8sTxgkpxf+w772t800d5eYGB+
nf54NbNGZ7c1E4K2jcGSTmIVLf+O0EnwptdMljA8IE+ND/bq9VKNQWO7eqsOPfhD
iRNs8i5czfU9xRBWvU/ZHf83tvgKdh02/RKk78xo+1zA65N/FvOFW4hZS36Lr2Lt
p+NeQEeHPd6pTueVsmPvx8w+Kfxuy9Ow+hBEEx6hd3XYJ3t01AGrYDiy+n4n0Az+
Wv7rhBr6D/vfhXgNXJjeVqdoWZ7Tkh6RZAEPKDk94RUeCa00jmmBSyLinQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9zoTq5uHLWqj3FfjlINCDymldoMB8GA1UdIwQY
MBaAFJ+93GMT78S2cqfisyrjxEhP5fYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTA2OWEtMzQyMS00MGFiLTllMGMt
NDVjYzJkZDZlNDkxLzEvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZTA2OWEtMzQyMS00MGFiLTllMGMtNDVjYzJkZDZlNDkx
LzEvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZk358Nq
07hmXznWxzm9WhCRBhLaD6cNyfhZbKs7xxSZavbiJRjwA8Xlmt3WAJ07fP1J795j
WGDP9aN1okDhT3AcFWRkWL4+wnH7TYOdiZQHEasCmSlaxPfTngwykCetHn2Gb+bD
9A6GfpnPZ5g1krw5/cs0ZJx2xQ+AybjPPhCiprIvCG94dRKjzFj7DwHUz/2O6+l4
Y71bpzTJKIOiy7mUyfM3ooJiaWmbe+56VcF1sqOD3k0amZ9D2mZbVWssxDBi7t8L
TskwuK0AdkV9iSrS6/yJ4cp2tWJzIM/WNSq08ZfyUKOuNRLq2CnUgil2GfkrItzT
WvsDLDE1uBA0WQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:12 2026 by rpki-client