This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File:                     5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier:          2FR0I+j6Ic/6Z91X3y/RGRUn6s5A9yJSWcfqFPTrCnE=
Subject key identifier:   BF:07:34:7B:C1:81:DD:CA:44:2E:A8:6B:FC:A3:F1:D0:4B:CA:44:27
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer:       /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial:       019C43C69AF057D0AE7E89D5FD9A44F0821F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number:          17A0
Signing time:             Mon 09 Feb 2026 19:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:15 +0000
Files and hashes:         1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
                          2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: U6EQqrX2evEqwykVNKOTQ0R6Cv+W2g6fZy6E+2BJkkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:9a:f0:57:d0:ae:7e:89:d5:fd:9a:44:f0:82:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
        Validity
            Not Before: Feb  9 19:00:15 2026 GMT
            Not After : Feb 10 19:00:15 2026 GMT
        Subject: CN=bf07347bc181ddca442ea86bfca3f1d04bca4427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:35:87:35:07:93:89:14:cf:e4:ee:12:6f:
                    3f:91:cd:f3:a6:36:46:e1:ca:55:77:5d:a6:36:e5:
                    e0:08:f8:a3:76:1e:81:16:e2:d6:98:5f:ba:36:08:
                    f4:5c:37:d4:61:d2:e9:80:9e:79:e9:c8:c5:53:ac:
                    49:6d:33:f6:c9:d3:18:7e:20:de:eb:e8:14:74:6b:
                    df:ad:c4:f8:43:be:3d:4c:81:5f:7b:d3:76:e9:97:
                    04:94:6e:c0:86:3d:01:7a:01:f6:5a:70:ed:b9:8f:
                    52:19:9a:5c:e7:c2:0f:85:41:f0:e2:45:4d:4a:c0:
                    21:13:6b:0e:69:5c:53:fc:40:83:39:ee:71:8f:67:
                    6a:2a:eb:22:ba:02:21:9d:dd:78:8b:c4:e9:bb:4d:
                    ea:d0:d1:c3:27:7d:7c:64:03:8c:3b:97:54:d2:03:
                    0b:5f:c2:90:ba:08:81:b2:eb:7a:f9:4a:72:28:f1:
                    09:02:7e:e2:12:3b:f5:10:be:c4:09:9a:9f:3e:0b:
                    63:07:5a:30:e7:b0:a8:3d:1a:3a:ba:6d:e1:af:6f:
                    52:b2:db:da:72:0d:cc:76:fe:ab:38:f8:95:9f:09:
                    27:7e:83:d1:b1:f3:28:fc:e0:b8:7c:44:98:a4:bc:
                    b5:59:29:70:20:eb:f0:db:0d:46:19:10:bb:31:29:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:07:34:7B:C1:81:DD:CA:44:2E:A8:6B:FC:A3:F1:D0:4B:CA:44:27
            X509v3 Authority Key Identifier:
                keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ee:9d:d8:ec:24:cb:ba:9a:12:fc:51:2e:94:0a:b2:1e:ae:
         10:1f:2d:ec:97:d7:4d:03:f9:6c:b8:8f:72:05:f2:18:73:d8:
         82:39:b6:45:a7:e7:c1:0e:f2:21:a3:bb:4f:ea:c9:3f:eb:59:
         7b:b1:6b:11:90:5b:76:9b:b4:37:d3:99:a4:29:7a:14:15:28:
         93:99:e5:f4:e0:97:05:7e:07:31:4c:4c:d8:ee:fb:17:74:8b:
         eb:37:14:50:9a:58:f4:af:2a:d0:4d:b3:53:3c:f1:e6:78:ac:
         2e:ea:e8:63:49:4f:6e:f1:04:68:d8:dd:4f:6f:d0:20:04:18:
         97:31:99:02:2a:d6:0e:be:87:7b:12:84:75:b8:35:19:a3:84:
         fb:a0:b3:a3:4b:c4:3a:84:b9:c1:96:d6:02:b4:b5:9e:68:60:
         94:de:fb:71:89:76:2a:e7:54:c4:d8:fa:a2:65:92:2e:b1:2a:
         a5:8a:42:95:5e:08:02:de:af:f4:c3:06:e2:6c:07:11:25:b4:
         8b:2c:8d:66:ea:10:93:e0:b1:f4:df:cd:bb:50:be:b7:40:1f:
         ed:1d:5d:9d:e7:b4:8b:5e:f3:53:97:17:61:39:63:94:2d:ef:
         fc:c2:b4:67:2d:91:b6:39:23:89:cf:19:9b:7b:ce:0f:c1:e2:
         37:22:95:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxprwV9CufonV/ZpE8IIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MjM0ZWQzZDhjYTk2ZGM1MThkMzVjMWU3YzkyYmViZmNm
NmNlNGQwHhcNMjYwMjA5MTkwMDE1WhcNMjYwMjEwMTkwMDE1WjAzMTEwLwYDVQQD
EyhiZjA3MzQ3YmMxODFkZGNhNDQyZWE4NmJmY2EzZjFkMDRiY2E0NDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKM1hzUHk4kUz+TuEm8/kc3zpjZG
4cpVd12mNuXgCPijdh6BFuLWmF+6Ngj0XDfUYdLpgJ556cjFU6xJbTP2ydMYfiDe
6+gUdGvfrcT4Q749TIFfe9N26ZcElG7Ahj0BegH2WnDtuY9SGZpc58IPhUHw4kVN
SsAhE2sOaVxT/ECDOe5xj2dqKusiugIhnd14i8Tpu03q0NHDJ318ZAOMO5dU0gML
X8KQugiBsut6+UpyKPEJAn7iEjv1EL7ECZqfPgtjB1ow57CoPRo6um3hr29Sstva
cg3Mdv6rOPiVnwknfoPRsfMo/OC4fESYpLy1WSlwIOvw2w1GGRC7MSnSRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8HNHvBgd3KRC6oa/yj8dBLykQnMB8GA1UdIwQY
MBaAFOYjTtPYypbcUY01wefJK+v89s5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMt
M2Y3MDQwOTk3NjgyLzEvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMtM2Y3MDQwOTk3Njgy
LzEvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgu6d2Owk
y7qaEvxRLpQKsh6uEB8t7JfXTQP5bLiPcgXyGHPYgjm2RafnwQ7yIaO7T+rJP+tZ
e7FrEZBbdpu0N9OZpCl6FBUok5nl9OCXBX4HMUxM2O77F3SL6zcUUJpY9K8q0E2z
Uzzx5nisLuroY0lPbvEEaNjdT2/QIAQYlzGZAirWDr6HexKEdbg1GaOE+6Czo0vE
OoS5wZbWArS1nmhglN77cYl2KudUxNj6omWSLrEqpYpClV4IAt6v9MMG4mwHESW0
iyyNZuoQk+Cx9N/Nu1C+t0Af7R1dnee0i17zU5cXYTljlC3v/MK0Zy2Rtjkjic8Z
m3vOD8HiNyKVbw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:05 2026 by rpki-client