This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File:                     i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier:          ps3O3l+T1bZLsLyxUYVvC7942LxiQAgB5BWR90vkfJ0=
Subject key identifier:   5A:3B:55:D4:C8:F3:3C:0D:1B:07:EE:47:0C:F3:20:4F:06:A7:2A:8B
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer:       /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial:       019C427E061AAA0BEA93D7D94BA2034D5A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number:          121F
Signing time:             Mon 09 Feb 2026 13:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:21 +0000
Files and hashes:         1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
                          2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: KOv6AxQ1miWxHVEIzVyTVEe/5PiDxb+cEeyV4F8fJc8=)
                          3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:06:1a:aa:0b:ea:93:d7:d9:4b:a2:03:4d:5a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
        Validity
            Not Before: Feb  9 13:01:21 2026 GMT
            Not After : Feb 10 13:01:21 2026 GMT
        Subject: CN=5a3b55d4c8f33c0d1b07ee470cf3204f06a72a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:39:0c:21:19:45:e7:0e:54:cb:7f:5e:40:67:
                    7f:f7:2e:81:5b:55:5e:e1:7c:ec:77:cd:2f:56:1d:
                    1b:9f:c8:bd:41:77:3d:cd:74:d7:36:42:89:3e:78:
                    99:d6:14:2c:37:8d:2d:fa:27:d6:54:4d:b5:4e:e8:
                    1a:6e:41:89:43:82:d7:9d:66:6f:d5:cf:f4:18:f6:
                    bd:3d:f1:a7:8b:a4:b8:97:03:1f:6f:15:b6:d0:c3:
                    28:6f:7d:ba:fb:b5:0a:ae:79:d9:25:52:69:e4:69:
                    a9:20:87:99:63:f9:a9:0c:55:be:c3:00:ee:0a:18:
                    48:45:34:ed:5b:e0:0d:d2:8d:bb:5c:c5:75:75:68:
                    b0:7a:65:9e:5a:19:f3:bd:30:d1:c4:e3:c6:c9:d3:
                    c0:89:c9:f7:76:cb:ab:16:d1:3f:b6:78:e1:3b:a5:
                    ea:fb:df:d6:10:75:b4:ad:8d:b6:43:07:86:49:44:
                    7c:f5:24:e8:fb:f6:9e:05:7a:cb:b3:06:0e:55:a8:
                    27:33:df:01:23:c2:bd:d4:6b:aa:f7:d7:e9:8f:fa:
                    0a:91:1d:c8:3c:f0:f3:9b:13:42:3b:90:8b:ca:be:
                    c3:e5:26:b0:cd:ea:c2:91:22:77:4a:84:8b:85:6b:
                    98:24:69:ef:01:90:3d:45:dd:dc:d6:d4:6d:38:63:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3B:55:D4:C8:F3:3C:0D:1B:07:EE:47:0C:F3:20:4F:06:A7:2A:8B
            X509v3 Authority Key Identifier:
                keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:63:a4:0e:68:1d:e9:5b:44:b4:d7:94:eb:53:cd:90:f5:
         ab:3c:8c:11:99:d6:b4:1f:48:c3:7a:e7:3f:65:44:63:22:2c:
         17:03:c2:ab:4a:b8:07:11:5d:92:d1:db:78:73:ae:55:00:bf:
         e0:84:2d:4a:3a:72:61:85:81:db:25:7f:06:62:fa:80:11:6e:
         b8:9b:41:4c:f1:1f:bd:b3:5a:f2:fb:6f:29:b4:d1:8a:c5:23:
         de:97:5b:fa:fe:9b:ef:9f:81:1b:f2:79:ee:fa:d5:f3:8c:23:
         c0:9f:32:c9:84:33:fb:bb:41:c8:29:9e:8f:70:dc:6e:b5:e2:
         f9:ed:6a:fc:5a:cb:5c:54:5f:dc:70:99:d8:d2:f3:53:f0:14:
         9e:b8:87:96:f6:0c:26:a7:02:36:21:70:62:c7:77:88:96:2e:
         76:f6:3d:5a:58:7c:70:c3:ab:26:22:38:00:75:f8:97:f3:5b:
         ee:95:3d:b7:85:45:ba:09:b9:cf:ff:32:22:6f:b9:d0:89:c5:
         eb:9a:d1:53:95:86:90:61:ca:68:cb:e1:9f:d7:c2:60:b1:19:
         b3:c7:28:9f:03:fa:1a:a2:54:5c:e7:02:eb:d2:a0:56:b2:4c:
         61:7f:25:ce:2a:e4:21:ea:00:5f:3f:df:71:e3:90:61:82:b5:
         41:10:b3:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfgYaqgvqk9fZS6IDTVpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTFlMGExMDRiNWIzZGRmMWY1ZDA4ZTdhY2IyYjc5ZTBk
NTY2ZjkwHhcNMjYwMjA5MTMwMTIxWhcNMjYwMjEwMTMwMTIxWjAzMTEwLwYDVQQD
Eyg1YTNiNTVkNGM4ZjMzYzBkMWIwN2VlNDcwY2YzMjA0ZjA2YTcyYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zkMIRlF5w5Uy39eQGd/9y6BW1Ve
4Xzsd80vVh0bn8i9QXc9zXTXNkKJPniZ1hQsN40t+ifWVE21TugabkGJQ4LXnWZv
1c/0GPa9PfGni6S4lwMfbxW20MMob326+7UKrnnZJVJp5GmpIIeZY/mpDFW+wwDu
ChhIRTTtW+AN0o27XMV1dWiwemWeWhnzvTDRxOPGydPAicn3dsurFtE/tnjhO6Xq
+9/WEHW0rY22QweGSUR89STo+/aeBXrLswYOVagnM98BI8K91Guq99fpj/oKkR3I
PPDzmxNCO5CLyr7D5SawzerCkSJ3SoSLhWuYJGnvAZA9Rd3c1tRtOGNJ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo7VdTI8zwNGwfuRwzzIE8GpyqLMB8GA1UdIwQY
MBaAFIuR4KEEtbPd8fXQjnrLK3ng1Wb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYt
YThjNTc2MjI0YmEyLzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYtYThjNTc2MjI0YmEy
LzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd41jpA5o
HelbRLTXlOtTzZD1qzyMEZnWtB9Iw3rnP2VEYyIsFwPCq0q4BxFdktHbeHOuVQC/
4IQtSjpyYYWB2yV/BmL6gBFuuJtBTPEfvbNa8vtvKbTRisUj3pdb+v6b75+BG/J5
7vrV84wjwJ8yyYQz+7tByCmej3DcbrXi+e1q/FrLXFRf3HCZ2NLzU/AUnriHlvYM
JqcCNiFwYsd3iJYudvY9Wlh8cMOrJiI4AHX4l/Nb7pU9t4VFugm5z/8yIm+50InF
65rRU5WGkGHKaMvhn9fCYLEZs8conwP6GqJUXOcC69KgVrJMYX8lzirkIeoAXz/f
ceOQYYK1QRCz4g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:57 2026 by rpki-client