This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File:                     d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier:          AzDxvG4hnVMfsOL0WojbfTIksqCp+eOZH7JduT09Hdk=
Subject key identifier:   BF:E9:DE:F9:AD:21:07:0A:71:C6:ED:68:2B:62:86:B3:D5:9C:85:E8
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer:       /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial:       019C42461FA0CD3C1655E9735D0949465E3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number:          12B4
Signing time:             Mon 09 Feb 2026 12:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:17 +0000
Files and hashes:         1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
                          2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
                          3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: PLO+t90JOux7QO7Tqgohf2bOwK5w5pgEV5heqoQIalM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:1f:a0:cd:3c:16:55:e9:73:5d:09:49:46:5e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
        Validity
            Not Before: Feb  9 12:00:17 2026 GMT
            Not After : Feb 10 12:00:17 2026 GMT
        Subject: CN=bfe9def9ad21070a71c6ed682b6286b3d59c85e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:f3:c0:49:4e:93:b0:5b:7c:f0:10:52:7c:
                    34:cc:38:fb:21:b6:71:37:79:7a:89:8a:ff:ce:54:
                    9e:31:5c:41:b8:24:59:8f:0b:a5:5b:64:fe:0b:7e:
                    c1:a3:27:6d:cb:0a:ab:1f:47:a5:6c:13:82:d0:38:
                    a0:25:35:13:60:8b:79:fc:be:c1:cf:18:a6:52:1c:
                    ae:a4:78:dd:5d:5f:98:ac:7c:1d:b8:c0:2b:1b:0a:
                    b3:42:6c:b1:cb:4f:75:37:41:40:76:31:7b:ca:82:
                    69:fd:74:9d:bf:7d:3a:86:a8:18:64:44:99:83:a8:
                    6a:23:5a:4b:1e:30:aa:a9:0d:e1:1c:90:bc:f7:ea:
                    b5:62:82:f8:eb:ef:27:04:50:8f:1c:b3:51:b0:4b:
                    3b:b1:74:5e:f6:42:7b:d9:45:60:45:52:ae:d7:e3:
                    39:dd:7f:6e:ec:6f:6d:ef:69:09:5c:a2:48:54:c2:
                    4e:f0:f1:78:ce:5b:7d:38:58:71:ac:6d:76:04:b7:
                    93:a6:86:79:cb:ab:b7:ca:c2:32:84:73:28:93:22:
                    fe:1f:6c:5b:58:40:9e:af:91:0d:82:01:74:0c:af:
                    4f:65:c9:88:f6:17:84:d8:b3:b9:28:27:3b:de:87:
                    ff:9f:78:05:0a:b5:3b:22:2e:71:df:b5:b1:2c:82:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E9:DE:F9:AD:21:07:0A:71:C6:ED:68:2B:62:86:B3:D5:9C:85:E8
            X509v3 Authority Key Identifier:
                keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:23:38:79:99:17:88:1d:40:c4:e9:9f:87:a1:ac:56:6e:
         3f:dd:a9:3b:c2:a2:5a:bd:be:bc:16:b9:9b:58:16:5a:21:6b:
         9c:c4:05:cf:7b:3b:49:99:7b:31:18:80:ef:bc:57:41:3b:ed:
         db:ce:b9:53:db:eb:09:1c:20:8b:b4:c1:f7:a7:0f:11:81:5b:
         02:50:27:4f:df:41:40:e6:cf:84:07:a2:60:14:4b:f7:b8:b7:
         83:f6:51:0a:ac:78:51:b7:67:ca:05:46:85:04:f3:13:fe:39:
         09:5c:98:af:a9:f0:78:e6:45:08:7c:a7:60:d3:2c:51:5c:ff:
         e4:2b:7e:ef:c3:e9:53:74:2a:8c:ef:50:7b:2c:70:24:69:cb:
         f1:7e:24:e2:1c:d5:a1:32:cf:f4:9c:50:32:25:f7:e4:eb:7e:
         d5:ee:59:59:6c:af:95:6c:45:17:8d:7d:1b:b6:a3:0e:98:45:
         10:61:18:20:c8:bf:03:4c:6e:b9:bc:20:2c:28:e9:7a:89:0c:
         c9:70:32:44:2e:63:b1:60:91:7f:45:98:4d:d4:8a:2f:66:84:
         c2:e7:ba:b9:28:e9:e5:a7:42:ae:13:a7:3c:59:05:13:98:e3:
         dc:3b:2c:25:af:dc:b2:ce:ad:86:01:d4:f7:9f:9c:4b:27:14:
         86:d8:47:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRh+gzTwWVelzXQlJRl4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4
OWE1YzIwHhcNMjYwMjA5MTIwMDE3WhcNMjYwMjEwMTIwMDE3WjAzMTEwLwYDVQQD
EyhiZmU5ZGVmOWFkMjEwNzBhNzFjNmVkNjgyYjYyODZiM2Q1OWM4NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1HzwElOk7BbfPAQUnw0zDj7IbZx
N3l6iYr/zlSeMVxBuCRZjwulW2T+C37BoydtywqrH0elbBOC0DigJTUTYIt5/L7B
zximUhyupHjdXV+YrHwduMArGwqzQmyxy091N0FAdjF7yoJp/XSdv306hqgYZESZ
g6hqI1pLHjCqqQ3hHJC89+q1YoL46+8nBFCPHLNRsEs7sXRe9kJ72UVgRVKu1+M5
3X9u7G9t72kJXKJIVMJO8PF4zlt9OFhxrG12BLeTpoZ5y6u3ysIyhHMokyL+H2xb
WECer5ENggF0DK9PZcmI9heE2LO5KCc73of/n3gFCrU7Ii5x37WxLIITmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/p3vmtIQcKccbtaCtihrPVnIXoMB8GA1UdIwQY
MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt
YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0
LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXg4jOHmZ
F4gdQMTpn4ehrFZuP92pO8KiWr2+vBa5m1gWWiFrnMQFz3s7SZl7MRiA77xXQTvt
2865U9vrCRwgi7TB96cPEYFbAlAnT99BQObPhAeiYBRL97i3g/ZRCqx4UbdnygVG
hQTzE/45CVyYr6nweOZFCHynYNMsUVz/5Ct+78PpU3QqjO9QeyxwJGnL8X4k4hzV
oTLP9JxQMiX35Ot+1e5ZWWyvlWxFF419G7ajDphFEGEYIMi/A0xuubwgLCjpeokM
yXAyRC5jsWCRf0WYTdSKL2aEwue6uSjp5adCrhOnPFkFE5jj3DssJa/css6thgHU
95+cSycUhthHXQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:28 2026 by rpki-client