This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
File:                     rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft (raw, json)
Hash identifier:          62PUCqtPHzsLvI7lHBm0djjTWkon7WDw6ymTy+Nhhao=
Subject key identifier:   95:DF:C4:D2:53:E8:C2:03:4B:4D:17:A7:CA:06:13:75:D7:21:7E:FB
Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
Certificate issuer:       /CN=ac328756dece8f29f97f41b81a087db524e159b7
Certificate serial:       019C4321D194AD7D4BB07D5CB757FCFEE1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
Manifest number:          145B
Signing time:             Mon 09 Feb 2026 16:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:15 +0000
Files and hashes:         1: W3MdpZwq4nd-n5ES7yDiCOVHqpo.roa (hash: 8BK9ZS1JvVx0ZUCH1KW40WgG0466nVGYcl484oqJH48=)
                          2: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl (hash: grriG1eAYRiKSvhtOGPiWOtSmaQq52XK20C29NOfNUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:d1:94:ad:7d:4b:b0:7d:5c:b7:57:fc:fe:e1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7
        Validity
            Not Before: Feb  9 16:00:15 2026 GMT
            Not After : Feb 10 16:00:15 2026 GMT
        Subject: CN=95dfc4d253e8c2034b4d17a7ca061375d7217efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a1:93:e4:78:69:4a:29:d5:7b:7c:b3:1e:e7:
                    c8:cb:f2:96:cb:8d:b0:fc:36:12:82:84:ca:fb:58:
                    5d:99:19:8e:7a:90:f5:b0:90:65:b5:f7:66:0e:08:
                    6c:2b:72:df:a8:f0:50:9b:82:b4:89:5f:27:11:9e:
                    59:08:60:00:bc:99:5d:f3:ef:01:47:37:64:28:8a:
                    02:1e:59:73:6c:66:a5:1a:51:69:65:9d:ad:4b:25:
                    d9:d1:36:28:44:18:76:c1:f5:a0:f5:04:be:5c:14:
                    fa:20:40:e3:18:f6:6e:a4:4a:7a:2d:db:de:96:50:
                    cd:e4:fb:27:ae:6c:45:85:2f:11:1d:91:5a:4f:2a:
                    ee:70:5c:19:38:78:19:4e:4c:4b:8e:86:fd:36:fe:
                    46:18:7b:66:93:e2:35:34:ee:31:f9:c7:ba:ea:5d:
                    ab:04:2b:b1:fb:e9:3e:76:6c:e0:d1:01:34:bb:ed:
                    bd:5c:b4:77:24:8f:d8:f3:36:20:ad:9f:99:87:29:
                    52:11:7c:3a:5c:62:e7:97:22:7f:33:85:e2:b1:5f:
                    46:3f:8e:90:e9:b0:6b:1c:61:78:8c:a0:59:c7:6a:
                    4b:90:9f:e7:75:5f:1d:29:14:76:b2:4e:9b:50:db:
                    2e:ed:f4:52:ec:61:90:8b:c5:5d:85:ac:4f:98:eb:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DF:C4:D2:53:E8:C2:03:4B:4D:17:A7:CA:06:13:75:D7:21:7E:FB
            X509v3 Authority Key Identifier:
                keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e0:f0:6e:42:1a:ee:95:d4:a9:68:85:84:62:34:b0:4d:b2:
         ac:2d:dc:8d:52:a2:bf:ec:4d:ce:b3:6e:94:ef:4c:fa:30:16:
         73:8c:36:20:12:35:4e:25:84:9a:4b:cb:b7:4d:f9:22:48:8f:
         a4:11:59:9d:95:98:b8:ad:90:a1:bf:cf:50:c0:67:fe:0a:83:
         dc:f3:3d:e4:80:dd:f3:96:3d:21:51:a3:50:35:de:17:4c:d7:
         7d:74:c8:04:db:ba:d7:d6:33:06:89:f0:13:33:aa:7a:35:13:
         52:e0:b8:ba:83:58:14:e9:aa:cc:48:19:78:04:09:d7:3f:36:
         33:68:77:58:49:28:7e:1b:3a:87:f9:f6:1a:ad:22:8f:f6:95:
         41:0f:85:f0:a7:47:14:67:ac:c3:ce:ce:70:35:5b:53:c9:25:
         35:b0:4d:4d:8d:e4:95:e6:a2:b6:b9:b5:e0:41:ba:cd:ab:4c:
         8f:43:fe:9c:d0:fc:6e:99:87:f8:3c:57:9b:1d:88:51:81:11:
         62:65:0c:19:04:2a:b3:36:d2:18:b8:64:bd:a4:2b:52:50:58:
         57:1a:b3:54:2a:bc:ee:8b:3f:cc:3e:fb:84:5b:e6:a5:04:22:
         46:42:59:41:6f:e5:99:5a:7f:16:e7:16:ec:13:8d:62:bc:e6:
         e2:3f:1d:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIdGUrX1LsH1ct1f8/uGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMzI4NzU2ZGVjZThmMjlmOTdmNDFiODFhMDg3ZGI1MjRl
MTU5YjcwHhcNMjYwMjA5MTYwMDE1WhcNMjYwMjEwMTYwMDE1WjAzMTEwLwYDVQQD
Eyg5NWRmYzRkMjUzZThjMjAzNGI0ZDE3YTdjYTA2MTM3NWQ3MjE3ZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKGT5HhpSinVe3yzHufIy/KWy42w
/DYSgoTK+1hdmRmOepD1sJBltfdmDghsK3LfqPBQm4K0iV8nEZ5ZCGAAvJld8+8B
RzdkKIoCHllzbGalGlFpZZ2tSyXZ0TYoRBh2wfWg9QS+XBT6IEDjGPZupEp6Ldve
llDN5PsnrmxFhS8RHZFaTyrucFwZOHgZTkxLjob9Nv5GGHtmk+I1NO4x+ce66l2r
BCux++k+dmzg0QE0u+29XLR3JI/Y8zYgrZ+ZhylSEXw6XGLnlyJ/M4XisV9GP46Q
6bBrHGF4jKBZx2pLkJ/ndV8dKRR2sk6bUNsu7fRS7GGQi8VdhaxPmOv+FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXfxNJT6MIDS00Xp8oGE3XXIX77MB8GA1UdIwQY
MBaAFKwyh1bezo8p+X9BuBoIfbUk4Vm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEt
MDI0YWQ0ZmIzNzA4LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEtMDI0YWQ0ZmIzNzA4
LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuDwbkIa
7pXUqWiFhGI0sE2yrC3cjVKiv+xNzrNulO9M+jAWc4w2IBI1TiWEmkvLt035IkiP
pBFZnZWYuK2Qob/PUMBn/gqD3PM95IDd85Y9IVGjUDXeF0zXfXTIBNu619YzBonw
EzOqejUTUuC4uoNYFOmqzEgZeAQJ1z82M2h3WEkofhs6h/n2Gq0ij/aVQQ+F8KdH
FGesw87OcDVbU8klNbBNTY3kleaitrm14EG6zatMj0P+nND8bpmH+DxXmx2IUYER
YmUMGQQqszbSGLhkvaQrUlBYVxqzVCq87os/zD77hFvmpQQiRkJZQW/lmVp/FucW
7BONYrzm4j8dFg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:42 2026 by rpki-client