This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File:                     NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier:          W5isPfj8cKtgoYdO1FY4NF2044tiOaQBNDFzAaLxGQA=
Subject key identifier:   CE:84:60:98:BF:07:EF:99:79:73:32:2F:BB:75:AA:0E:56:59:99:39
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer:       /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial:       019C42100353A2191531A4E1C014621329F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number:          14A2
Signing time:             Mon 09 Feb 2026 11:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:11 +0000
Files and hashes:         1: I5fzdJCzLFrR9wNTsga_tOMPXh4.roa (hash: 0AweIDgWya6VM5E4CtElUS8whqXsBUXH8jRWGfH9rhs=)
                          2: LOvD5EwzbUXufLKBeuukoX61MEQ.roa (hash: eV3twutKHrIqu2Hm8QSddNGhB24fmUU3/K7sFbBo9AE=)
                          3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: A30ZxtKe5fMtaxBu6gB7ydqTozC+7jgitco7Aq7uOMg=)
                          4: fjoBq7cUoJrRC1EG6pKDwLfdkWo.roa (hash: PIJVCUNM2lCSZBzxydlr8AgpZlMx3agile2sKdoLeqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:03:53:a2:19:15:31:a4:e1:c0:14:62:13:29:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
        Validity
            Not Before: Feb  9 11:01:11 2026 GMT
            Not After : Feb 10 11:01:11 2026 GMT
        Subject: CN=ce846098bf07ef997973322fbb75aa0e56599939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:14:e6:65:21:54:41:76:df:e6:ce:cf:35:
                    94:09:24:84:56:ad:82:13:cf:c4:a8:e7:7a:38:bb:
                    2c:9c:50:86:3d:20:23:95:60:59:c3:dd:f7:25:a9:
                    4b:38:ef:c3:42:de:b7:db:e4:83:d3:ee:ba:63:34:
                    41:bd:72:7d:8d:58:24:aa:7a:85:6e:f9:86:8b:7d:
                    c5:ec:1f:1f:79:d1:78:15:51:99:ff:6e:e3:25:e9:
                    00:b0:18:b0:cb:64:06:79:b6:ce:d8:88:39:7b:51:
                    f3:82:7f:a6:8c:28:d5:d5:2e:02:c2:62:b1:c7:05:
                    c3:a1:71:e7:8a:20:34:2d:af:0a:3e:5f:50:f3:b6:
                    d4:ae:a3:44:f8:fe:f7:85:db:8b:ef:83:07:06:2b:
                    be:ac:10:b6:fa:fb:30:a8:07:83:aa:9e:6b:ac:46:
                    6a:d9:ad:c6:7e:fa:1c:36:bb:52:7b:ea:61:c1:ae:
                    b2:6e:36:24:f6:46:c5:9b:c3:cd:23:46:62:47:3a:
                    44:d0:10:82:b9:01:2e:9f:1b:8b:76:f6:17:cb:3e:
                    f4:f4:75:db:c8:b6:b8:09:35:04:f3:be:6d:91:47:
                    f8:1f:70:98:de:48:91:84:c1:05:e1:48:e7:fa:99:
                    24:80:b7:95:a5:a5:99:fb:ca:c5:ad:26:4b:4f:17:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:84:60:98:BF:07:EF:99:79:73:32:2F:BB:75:AA:0E:56:59:99:39
            X509v3 Authority Key Identifier:
                keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:02:11:d8:41:c5:a2:ab:03:92:58:24:e8:ff:f2:2b:7a:09:
         d3:3b:31:ef:d7:2d:81:9e:c7:ef:7d:14:cc:f7:7b:4c:f3:90:
         29:af:54:22:d7:41:37:5e:c3:30:93:e8:8f:d8:ad:07:4c:ce:
         87:0a:be:42:5c:82:7a:b2:49:93:13:87:c9:47:c9:ac:e3:5f:
         44:32:1c:ca:1d:e8:e3:c9:4b:40:21:7a:de:01:96:c9:f7:7b:
         e2:62:29:a7:e2:66:ca:c3:85:31:0f:6d:d2:6e:6c:e5:d2:fb:
         76:25:97:f8:be:08:ac:9a:b0:71:ad:71:58:59:ae:e0:1d:40:
         c7:31:86:66:84:22:e6:25:3c:b9:71:5e:19:f8:74:4b:53:bb:
         c5:e5:f8:00:78:9a:24:50:23:51:72:97:f5:8a:92:40:f7:1e:
         7a:07:23:52:69:ce:6d:47:34:a5:92:68:82:06:aa:d1:d3:35:
         f8:42:69:84:0b:9d:a3:de:82:05:33:75:7a:09:db:d7:3f:ba:
         31:a6:c4:8f:46:34:72:39:90:3f:c5:03:59:82:12:79:84:51:
         bf:fa:36:1b:5b:75:f7:d4:50:4b:e8:b6:b4:c0:b5:6a:b5:81:
         37:f6:b1:82:00:18:fb:f4:39:b8:8a:c7:5d:06:75:b0:6c:f3:
         ef:0d:f9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEANTohkVMaThwBRiEyn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YmNhOTRmNmI2MWUxMDEwMGRjM2E3MTg2ZmZhM2Y5YjAw
YzY5ZGQwHhcNMjYwMjA5MTEwMTExWhcNMjYwMjEwMTEwMTExWjAzMTEwLwYDVQQD
EyhjZTg0NjA5OGJmMDdlZjk5Nzk3MzMyMmZiYjc1YWEwZTU2NTk5OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmIU5mUhVEF23+bOzzWUCSSEVq2C
E8/EqOd6OLssnFCGPSAjlWBZw933JalLOO/DQt632+SD0+66YzRBvXJ9jVgkqnqF
bvmGi33F7B8fedF4FVGZ/27jJekAsBiwy2QGebbO2Ig5e1Hzgn+mjCjV1S4CwmKx
xwXDoXHniiA0La8KPl9Q87bUrqNE+P73hduL74MHBiu+rBC2+vswqAeDqp5rrEZq
2a3GfvocNrtSe+phwa6ybjYk9kbFm8PNI0ZiRzpE0BCCuQEunxuLdvYXyz709HXb
yLa4CTUE875tkUf4H3CY3kiRhMEF4Ujn+pkkgLeVpaWZ+8rFrSZLTxcz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6EYJi/B++ZeXMyL7t1qg5WWZk5MB8GA1UdIwQY
MBaAFDS8qU9rYeEBANw6cYb/o/mwDGndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkx5cFQydGg0UUVBM0RweGh2LWotYkFNYWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGVhNTktMTgxMC00MjEwLTk4ZjMt
NzA5ZjAzNjI0ZTdlLzEvTkx5cFQydGg0UUVBM0RweGh2LWotYkFNYWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNGVhNTktMTgxMC00MjEwLTk4ZjMtNzA5ZjAzNjI0ZTdl
LzEvTkx5cFQydGg0UUVBM0RweGh2LWotYkFNYWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggIR2EHF
oqsDklgk6P/yK3oJ0zsx79ctgZ7H730UzPd7TPOQKa9UItdBN17DMJPoj9itB0zO
hwq+QlyCerJJkxOHyUfJrONfRDIcyh3o48lLQCF63gGWyfd74mIpp+JmysOFMQ9t
0m5s5dL7diWX+L4IrJqwca1xWFmu4B1AxzGGZoQi5iU8uXFeGfh0S1O7xeX4AHia
JFAjUXKX9YqSQPceegcjUmnObUc0pZJoggaq0dM1+EJphAudo96CBTN1egnb1z+6
MabEj0Y0cjmQP8UDWYISeYRRv/o2G1t199RQS+i2tMC1arWBN/axggAY+/Q5uIrH
XQZ1sGzz7w35/g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:04 2026 by rpki-client