This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File:                     n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier:          lgBputrF8B4vG18VLX+n17kAn7h91RHQ+7zHINKg/RE=
Subject key identifier:   0B:AF:FF:93:9D:2B:F6:DC:00:18:43:F6:C5:C2:9E:6C:59:C1:9C:2A
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer:       /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial:       019C420F26934CFB403FB88FCF23B14C3AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number:          0C7D
Signing time:             Mon 09 Feb 2026 11:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:14 +0000
Files and hashes:         1: 3YrPqOPm2HTyKR3X-5RSXy5Hk4U.roa (hash: 5vGo/rzHCgJgztw1UHKfY47yWsIJL5OxKuVDeP97MLA=)
                          2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: BLGlHMLXzI58ADPs8XUOijcqJCNnCbjjGEpF1Act9Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:26:93:4c:fb:40:3f:b8:8f:cf:23:b1:4c:3a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
        Validity
            Not Before: Feb  9 11:00:14 2026 GMT
            Not After : Feb 10 11:00:14 2026 GMT
        Subject: CN=0bafff939d2bf6dc001843f6c5c29e6c59c19c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:62:39:75:55:6c:3f:e7:11:10:e0:e5:44:06:
                    e7:a2:c0:6f:d7:99:8a:7e:d9:2c:88:5f:33:48:90:
                    5e:34:dc:16:0f:07:4b:a3:f5:68:21:12:de:76:c0:
                    43:aa:18:13:73:61:4f:23:7b:8f:10:df:de:fc:fa:
                    8e:6c:6e:e2:ce:5b:98:dd:f3:0f:5f:5d:05:32:18:
                    09:4d:fa:22:e3:25:d9:f7:31:49:8d:f6:6c:16:e1:
                    81:08:2a:ae:ed:fe:3d:eb:ca:5e:61:c4:99:83:31:
                    46:89:bc:71:bb:15:cb:ea:f1:9c:22:0b:b3:98:99:
                    ce:40:2c:e6:7d:a3:ce:fc:23:55:64:2c:c0:82:5b:
                    0f:02:0c:3a:f1:5c:45:91:ce:1a:d3:b0:16:42:45:
                    5d:fd:4b:55:36:13:cf:1e:5a:cb:40:c4:d3:17:64:
                    5e:a2:59:1d:15:85:92:af:bc:03:64:14:d5:62:b3:
                    66:a4:b7:21:98:6d:01:09:61:63:e0:50:d1:96:df:
                    67:3c:be:79:a4:77:2d:46:bc:d6:0e:e6:f5:ee:76:
                    6c:39:07:64:01:54:e4:be:71:ac:83:68:1b:95:d1:
                    7c:25:46:96:a4:e5:12:dd:84:12:34:f8:4f:c4:be:
                    ae:e6:b0:79:22:bc:2f:f2:e0:10:43:fe:47:d4:be:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AF:FF:93:9D:2B:F6:DC:00:18:43:F6:C5:C2:9E:6C:59:C1:9C:2A
            X509v3 Authority Key Identifier:
                keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:3d:ae:66:73:6e:8a:7d:50:8f:ab:5d:ee:f6:90:b8:9c:4a:
         82:42:0f:40:a5:d9:c2:99:a0:ec:8b:a0:9e:67:1b:81:9d:6e:
         0f:77:2e:51:11:31:e4:f3:4b:e2:00:ad:31:44:b5:7f:92:32:
         35:8c:5e:2b:c5:45:7f:33:1d:6b:14:48:5a:c4:13:f3:c7:cb:
         00:82:69:63:f9:ac:06:f4:26:a7:de:29:3a:46:e1:7d:42:bd:
         11:15:60:59:98:ca:64:4c:02:7e:d6:48:9e:55:dc:85:3e:b6:
         2b:64:4e:eb:5d:fc:be:8b:d7:f5:84:2a:9c:07:e0:69:9f:a1:
         56:73:0a:cd:7e:f6:9f:7b:32:26:f8:24:86:14:fe:79:cc:87:
         95:d2:4e:7a:22:78:5e:5a:07:5a:8e:93:d2:1d:17:d1:4d:0b:
         a3:e6:fb:36:af:d3:26:9c:fc:d9:4a:0f:a3:e4:47:aa:05:b3:
         00:3d:c0:ad:cf:cc:18:48:6a:78:42:1d:98:57:85:3c:49:00:
         c5:ba:53:3a:52:08:e4:09:56:56:7c:f3:8f:e6:da:01:9b:57:
         9a:00:36:2e:cb:30:81:ca:f4:aa:57:e7:95:ac:c3:40:61:0e:
         79:80:30:f1:1b:24:d7:16:e8:71:ab:31:08:f6:f5:22:37:5d:
         d9:83:b1:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDyaTTPtAP7iPzyOxTDrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOGEzYzlhOWVkZjY0NDczNWE5NGViMDlmMDFjYWIzOTg1
NWQyNzgwHhcNMjYwMjA5MTEwMDE0WhcNMjYwMjEwMTEwMDE0WjAzMTEwLwYDVQQD
EygwYmFmZmY5MzlkMmJmNmRjMDAxODQzZjZjNWMyOWU2YzU5YzE5YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GI5dVVsP+cREODlRAbnosBv15mK
ftksiF8zSJBeNNwWDwdLo/VoIRLedsBDqhgTc2FPI3uPEN/e/PqObG7izluY3fMP
X10FMhgJTfoi4yXZ9zFJjfZsFuGBCCqu7f4968peYcSZgzFGibxxuxXL6vGcIguz
mJnOQCzmfaPO/CNVZCzAglsPAgw68VxFkc4a07AWQkVd/UtVNhPPHlrLQMTTF2Re
olkdFYWSr7wDZBTVYrNmpLchmG0BCWFj4FDRlt9nPL55pHctRrzWDub17nZsOQdk
AVTkvnGsg2gbldF8JUaWpOUS3YQSNPhPxL6u5rB5Irwv8uAQQ/5H1L4S/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuv/5OdK/bcABhD9sXCnmxZwZwqMB8GA1UdIwQY
MBaAFJ+KPJqe32RHNalOsJ8ByrOYVdJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjIt
NjM2ZDZmYzAwNDhmLzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjItNjM2ZDZmYzAwNDhm
LzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1D2uZnNu
in1Qj6td7vaQuJxKgkIPQKXZwpmg7IugnmcbgZ1uD3cuUREx5PNL4gCtMUS1f5Iy
NYxeK8VFfzMdaxRIWsQT88fLAIJpY/msBvQmp94pOkbhfUK9ERVgWZjKZEwCftZI
nlXchT62K2RO6138vovX9YQqnAfgaZ+hVnMKzX72n3syJvgkhhT+ecyHldJOeiJ4
XloHWo6T0h0X0U0Lo+b7Nq/TJpz82UoPo+RHqgWzAD3Arc/MGEhqeEIdmFeFPEkA
xbpTOlII5AlWVnzzj+baAZtXmgA2Lsswgcr0qlfnlazDQGEOeYAw8Rsk1xbocasx
CPb1Ijdd2YOxSw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:09 2026 by rpki-client