This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File:                     _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier:          gYt2vbt81NIxCItBtAdelC5sxOosDtuPeMpYjrZ9un4=
Subject key identifier:   D4:3A:E3:89:54:28:AE:76:92:81:5B:99:78:C9:9A:EB:64:0A:20:4E
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer:       /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial:       019C43FDFADB90C015EA0A910BDFE2F4217A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number:          0BF8
Signing time:             Mon 09 Feb 2026 20:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:44 +0000
Files and hashes:         1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
                          2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: 8RR0d7bcrhFMWenKqbqZRtONsX7wvHUNLPjZF0gl//Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:fa:db:90:c0:15:ea:0a:91:0b:df:e2:f4:21:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
        Validity
            Not Before: Feb  9 20:00:44 2026 GMT
            Not After : Feb 10 20:00:44 2026 GMT
        Subject: CN=d43ae3895428ae7692815b9978c99aeb640a204e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:12:f9:5e:19:59:c8:46:0d:04:fa:3a:3a:4e:
                    7f:3d:c5:fc:de:00:1e:95:1d:e5:40:5d:96:77:39:
                    8b:e2:99:81:8e:b7:3a:5a:3e:8d:f2:bc:cf:27:92:
                    f4:d1:2f:f3:75:3c:14:99:36:71:45:f7:18:fc:e7:
                    ad:3b:e5:c1:8c:bd:79:7f:3b:89:e6:3d:1d:76:bc:
                    73:0a:32:62:c6:66:fb:89:58:4e:6f:b5:2f:0c:0c:
                    79:21:8a:56:18:fe:7d:22:3c:ec:06:c6:30:25:d1:
                    32:3c:23:da:fb:db:e7:94:b4:92:59:79:cd:6e:29:
                    ac:30:0c:e8:56:44:95:8e:a7:13:d2:41:08:f9:28:
                    c9:d6:4f:49:f4:b1:01:f6:fb:e1:d3:31:ea:5c:33:
                    e8:a8:f7:9b:73:d9:02:6e:18:e6:b3:df:29:d6:7c:
                    ab:ce:36:c2:36:ae:1a:0e:10:65:0a:67:ff:00:8f:
                    78:6c:62:52:2b:e7:90:80:2c:80:84:32:cb:ce:e6:
                    7d:9d:b1:f6:05:14:f4:3f:0d:45:67:51:4f:10:a1:
                    e3:57:f8:81:3a:b7:1f:79:cc:ee:92:68:c6:9e:50:
                    cd:50:69:77:35:7f:08:2d:df:e9:ba:bf:1a:df:e4:
                    48:01:bb:3a:12:97:e1:43:67:fd:07:49:df:e9:ee:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3A:E3:89:54:28:AE:76:92:81:5B:99:78:C9:9A:EB:64:0A:20:4E
            X509v3 Authority Key Identifier:
                keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:fc:32:c3:d1:10:08:fd:b5:27:ce:71:29:26:63:35:10:
         18:b0:61:b3:d7:d2:4b:97:47:85:88:81:0f:a9:1a:c8:15:b9:
         15:ed:1f:e9:27:5f:5b:d5:b0:7d:16:b0:3f:5f:54:f1:99:0d:
         9b:d6:93:ef:f5:f8:01:7c:e5:43:f3:21:6b:48:fc:38:11:36:
         1d:a5:ab:c6:2e:2a:85:ef:e6:45:4e:a0:59:50:12:96:8d:ff:
         38:f9:ba:73:4a:be:f8:c1:a6:e1:f2:dd:c1:33:15:bb:de:f9:
         73:1c:3b:ed:cd:88:fe:94:8c:99:79:18:43:24:0e:52:3b:da:
         fe:35:03:a4:25:ce:4d:4b:a7:0d:0a:32:23:ff:74:f8:4c:d7:
         a9:ef:c2:56:89:af:ca:77:8c:ea:6a:35:0c:79:50:65:13:04:
         5a:85:35:67:f0:5f:cf:dc:0a:0d:28:00:10:0a:1f:26:8d:5a:
         7f:37:31:53:e9:aa:80:51:72:fe:bb:f3:9b:4a:6b:94:0b:42:
         9e:a3:fb:52:e8:30:f7:c6:3b:46:d5:e6:da:1e:9a:90:4c:fb:
         9d:49:b0:e8:9f:d3:69:1c:6b:b2:71:df:5c:20:ad:b6:bd:ac:
         e8:72:54:ec:12:f7:09:35:c0:df:39:55:09:22:92:51:a6:54:
         b1:ec:2c:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/frbkMAV6gqRC9/i9CF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOGI0OTQ0NTUyNzdmZjUzMDAyNWNlZjJkNTFkZjdlYWI4
ZTQ1MTAwHhcNMjYwMjA5MjAwMDQ0WhcNMjYwMjEwMjAwMDQ0WjAzMTEwLwYDVQQD
EyhkNDNhZTM4OTU0MjhhZTc2OTI4MTViOTk3OGM5OWFlYjY0MGEyMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hL5XhlZyEYNBPo6Ok5/PcX83gAe
lR3lQF2WdzmL4pmBjrc6Wj6N8rzPJ5L00S/zdTwUmTZxRfcY/OetO+XBjL15fzuJ
5j0ddrxzCjJixmb7iVhOb7UvDAx5IYpWGP59IjzsBsYwJdEyPCPa+9vnlLSSWXnN
bimsMAzoVkSVjqcT0kEI+SjJ1k9J9LEB9vvh0zHqXDPoqPebc9kCbhjms98p1nyr
zjbCNq4aDhBlCmf/AI94bGJSK+eQgCyAhDLLzuZ9nbH2BRT0Pw1FZ1FPEKHjV/iB
OrcfeczukmjGnlDNUGl3NX8ILd/pur8a3+RIAbs6EpfhQ2f9B0nf6e4s2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ644lUKK52koFbmXjJmutkCiBOMB8GA1UdIwQY
MBaAFP6LSURVJ3/1MAJc7y1R336rjkUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYt
YzhjYzViMmQwYWVkLzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYtYzhjYzViMmQwYWVk
LzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAz8MsPR
EAj9tSfOcSkmYzUQGLBhs9fSS5dHhYiBD6kayBW5Fe0f6SdfW9WwfRawP19U8ZkN
m9aT7/X4AXzlQ/Mha0j8OBE2HaWrxi4qhe/mRU6gWVASlo3/OPm6c0q++MGm4fLd
wTMVu975cxw77c2I/pSMmXkYQyQOUjva/jUDpCXOTUunDQoyI/90+EzXqe/CVomv
yneM6mo1DHlQZRMEWoU1Z/Bfz9wKDSgAEAofJo1afzcxU+mqgFFy/rvzm0prlAtC
nqP7Uugw98Y7RtXm2h6akEz7nUmw6J/TaRxrsnHfXCCttr2s6HJU7BL3CTXA3zlV
CSKSUaZUsews8w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:00 2026 by rpki-client