This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File:                     Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier:          AAk2WB64F2Tzl/jRJr8eUCz46dHoqPg9zbNaNWagxW8=
Subject key identifier:   93:C5:D8:96:71:58:16:6B:25:EF:F4:F7:FF:3A:B3:00:1D:07:67:4E
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer:       /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial:       019C42EB1F8438604905448B3DD806D3F6F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number:          1443
Signing time:             Mon 09 Feb 2026 15:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:30 +0000
Files and hashes:         1: EPMtahwabHgPl-W83_5vNZdf4gw.roa (hash: 0H56HrlbNZtyDi9oYIVx2+vNE4jYkmDivR3ycZsjoTk=)
                          2: R1nUUzzOw929lhAIpfJDOOJ-S-A.roa (hash: Tp1cYDsUeKBDmtrgetF5KzqUAJ8NNp9SsVUJU5MzEDg=)
                          3: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: J+CKvj4aT/vTUeQ7xGokiFoY1VFCFE9ObWTmmNLNxLg=)
                          4: les8ej1VpPxKoITRniTQx3Kf-wE.roa (hash: tEw4ct/fRvtKjfw/ec52txtnKNrt4GJfraUVLHoBE0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:1f:84:38:60:49:05:44:8b:3d:d8:06:d3:f6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
        Validity
            Not Before: Feb  9 15:00:30 2026 GMT
            Not After : Feb 10 15:00:30 2026 GMT
        Subject: CN=93c5d8967158166b25eff4f7ff3ab3001d07674e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:e1:e1:c5:2c:a2:ae:9e:65:f0:02:e6:48:
                    0a:08:71:b8:eb:86:58:ec:b9:32:83:30:84:63:2c:
                    c4:7e:0f:1b:f8:67:e8:42:d8:8b:79:b3:4e:ca:cf:
                    58:d9:e2:58:66:9e:04:01:81:ba:8e:ba:12:5b:1c:
                    17:f9:11:7c:12:85:2d:20:67:bc:52:0d:83:53:e2:
                    c5:3a:9b:cb:c1:fa:8d:33:fa:b8:2d:75:78:a2:70:
                    e8:53:9c:03:6f:a6:1c:b2:c4:7b:2c:12:2b:08:f5:
                    d2:84:ed:6e:9f:a3:dd:b0:50:e9:c1:ba:72:35:3a:
                    ce:01:bf:2d:5b:35:39:5d:bd:68:59:38:6b:e1:22:
                    bd:4e:db:e7:94:9d:4b:05:5e:9e:ea:52:9d:d6:bb:
                    80:47:1f:20:4e:55:5f:d0:79:cb:4a:53:91:9b:d8:
                    4f:f0:4b:53:4f:e0:fb:86:0a:1a:51:01:69:99:3a:
                    b8:7e:93:12:90:8f:a4:57:94:6f:c9:04:c7:3d:42:
                    de:ba:cb:ae:cb:80:44:3f:45:49:53:ac:c8:98:85:
                    98:5c:2a:1d:7b:0c:ef:3f:32:6f:dc:fe:50:32:56:
                    31:d1:a1:40:17:b4:88:69:d0:ff:21:d0:0c:61:3a:
                    bd:14:48:d4:5c:da:c4:60:31:7a:1d:91:19:d7:13:
                    17:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C5:D8:96:71:58:16:6B:25:EF:F4:F7:FF:3A:B3:00:1D:07:67:4E
            X509v3 Authority Key Identifier:
                keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:91:05:f5:9e:57:c7:09:53:75:57:b6:6d:68:5d:26:f0:65:
         fe:81:00:9f:d5:bb:c1:56:50:6a:0b:b0:78:68:e6:28:8d:cb:
         c0:fa:cb:24:2c:99:8d:bf:14:bb:99:bb:c0:80:45:08:80:8a:
         b3:0f:a7:23:48:7a:a0:77:c6:6a:71:63:2b:0a:b2:bc:9f:d8:
         01:4f:88:50:a4:2b:b1:0a:fd:a9:5f:69:8e:f6:f9:d4:c3:f7:
         27:6d:29:11:15:2e:75:6a:54:89:78:04:bf:ea:ea:b2:08:8e:
         3e:f9:22:c6:c1:8a:42:44:d5:35:74:9e:bf:a9:fb:74:72:64:
         e6:3b:c1:e0:8e:ef:6c:6a:61:f0:98:ce:30:93:91:ae:38:a2:
         6d:9e:06:3d:2e:72:dd:1d:c1:13:4e:5d:95:bb:ef:39:46:c5:
         ec:8f:4f:e3:87:f5:b1:be:65:1b:44:e6:c7:e3:8f:76:ba:4a:
         82:cc:de:88:75:fd:2a:fc:b8:8f:6b:1e:d7:24:c3:56:76:6b:
         00:7d:5a:b9:57:db:c7:d9:8a:6b:84:82:93:e1:73:07:10:38:
         b7:5d:82:a7:4f:5a:ee:15:fe:34:8f:13:c3:5a:dd:2c:c4:26:
         51:e5:91:13:3e:73:99:aa:fc:cf:c0:80:b0:79:e7:52:7e:31:
         5b:11:87:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6x+EOGBJBUSLPdgG0/bzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmQzMzc0YzdhYzNjMDM3Nzg3MDdmMzY3ZjkxNDhmMWZl
MDM5MGQwHhcNMjYwMjA5MTUwMDMwWhcNMjYwMjEwMTUwMDMwWjAzMTEwLwYDVQQD
Eyg5M2M1ZDg5NjcxNTgxNjZiMjVlZmY0ZjdmZjNhYjMwMDFkMDc2NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU7h4cUsoq6eZfAC5kgKCHG464ZY
7LkygzCEYyzEfg8b+GfoQtiLebNOys9Y2eJYZp4EAYG6jroSWxwX+RF8EoUtIGe8
Ug2DU+LFOpvLwfqNM/q4LXV4onDoU5wDb6YcssR7LBIrCPXShO1un6PdsFDpwbpy
NTrOAb8tWzU5Xb1oWThr4SK9TtvnlJ1LBV6e6lKd1ruARx8gTlVf0HnLSlORm9hP
8EtTT+D7hgoaUQFpmTq4fpMSkI+kV5RvyQTHPULeusuuy4BEP0VJU6zImIWYXCod
ewzvPzJv3P5QMlYx0aFAF7SIadD/IdAMYTq9FEjUXNrEYDF6HZEZ1xMXywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPF2JZxWBZrJe/09/86swAdB2dOMB8GA1UdIwQY
MBaAFEX9M3THrDwDd4cH82f5FI8f4DkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODA5YmItMjQ2OC00MWU2LThhNDIt
ZGUyNWNkYzhmMjExLzEvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ODA5YmItMjQ2OC00MWU2LThhNDItZGUyNWNkYzhmMjEx
LzEvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5EF9Z5X
xwlTdVe2bWhdJvBl/oEAn9W7wVZQaguweGjmKI3LwPrLJCyZjb8Uu5m7wIBFCICK
sw+nI0h6oHfGanFjKwqyvJ/YAU+IUKQrsQr9qV9pjvb51MP3J20pERUudWpUiXgE
v+rqsgiOPvkixsGKQkTVNXSev6n7dHJk5jvB4I7vbGph8JjOMJORrjiibZ4GPS5y
3R3BE05dlbvvOUbF7I9P44f1sb5lG0Tmx+OPdrpKgszeiHX9Kvy4j2se1yTDVnZr
AH1auVfbx9mKa4SCk+FzBxA4t12Cp09a7hX+NI8Tw1rdLMQmUeWREz5zmar8z8CA
sHnnUn4xWxGHUA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:57 2026 by rpki-client