This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File:                     d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier:          6+KZHTlG4Yyr7N9wdOIHDjxoMwn4RuZOFIDSAQSbOQE=
Subject key identifier:   E8:38:9D:A1:22:84:DA:85:C0:D3:31:AA:00:1B:A4:5A:DD:12:8D:35
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer:       /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial:       019C438FA8EEE1054D4A25F954F68F79629D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number:          0866
Signing time:             Mon 09 Feb 2026 18:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:14 +0000
Files and hashes:         1: aJHKOA-DMpMHSd964JXfuSmBfY0.roa (hash: oXACImzHioTx7c3QtWHlpndieWC52eNkX76flIoPyqE=)
                          2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: A8c7ttnDlbJ8kBY5CSd2jEMIU+S41O9YxSCvEbhNGQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:a8:ee:e1:05:4d:4a:25:f9:54:f6:8f:79:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
        Validity
            Not Before: Feb  9 18:00:14 2026 GMT
            Not After : Feb 10 18:00:14 2026 GMT
        Subject: CN=e8389da12284da85c0d331aa001ba45add128d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:46:bf:57:b6:06:f4:92:c0:a3:54:4e:99:
                    36:99:92:af:da:9d:ae:68:b3:c6:ef:64:43:0b:0c:
                    95:c1:fa:7c:80:a2:ef:33:20:f2:15:39:5e:5c:5d:
                    33:c5:ec:3a:1e:40:50:ea:df:44:aa:4f:61:e0:3b:
                    11:dd:2f:dc:e6:80:b0:19:f9:b1:d7:b9:e1:09:26:
                    b2:bd:1e:b5:31:46:f7:ce:17:80:40:cf:ee:cd:d5:
                    14:d5:8c:04:cc:b7:2f:9d:60:b2:c4:dd:db:5a:b6:
                    04:d4:7b:42:06:3c:97:bf:7a:27:a6:85:03:f3:03:
                    63:08:1c:b1:5c:f1:20:42:2f:03:4c:48:85:ff:16:
                    03:ac:54:59:67:a1:79:f9:36:e8:bd:31:fc:b2:3f:
                    95:b4:e5:de:8a:b7:f2:8d:f1:19:1b:56:6e:34:8d:
                    61:2c:0b:38:37:10:0f:7c:93:7d:80:5e:5c:7c:64:
                    d5:de:8b:39:f4:6f:b0:b2:d6:9c:68:59:24:f1:a0:
                    ee:46:f7:53:4c:9e:1b:c9:c9:8c:c3:f6:a7:42:97:
                    2d:c7:d3:d6:66:30:f9:e9:30:23:88:8d:6f:db:82:
                    ff:af:96:4c:25:53:da:68:cc:ae:10:5e:ee:88:15:
                    90:51:fa:01:dc:dd:8a:fa:0a:a8:e4:7d:4c:f7:0a:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:9D:A1:22:84:DA:85:C0:D3:31:AA:00:1B:A4:5A:DD:12:8D:35
            X509v3 Authority Key Identifier:
                keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:29:db:54:2d:20:6a:13:ca:ab:a3:06:ff:10:a7:a4:2b:5f:
         51:ca:3d:a9:2b:ce:24:98:ae:17:ca:fc:14:56:ea:b3:c2:e4:
         d4:f6:0d:8b:e7:2b:b7:25:da:d1:ea:e2:37:22:1c:e9:dd:8c:
         cb:cb:07:34:6c:88:62:4e:82:c4:66:61:1d:48:07:fa:eb:b4:
         f1:8f:c5:78:47:56:c8:d5:9c:d7:7d:71:07:8f:5a:79:4e:5b:
         0b:cb:82:91:b9:3c:dc:95:a5:0d:35:bb:fe:a9:07:cc:03:86:
         3f:24:e1:95:46:9b:76:ab:a9:7b:82:07:d3:04:0d:7b:58:23:
         94:b3:89:a8:29:bb:0a:72:3e:7d:c2:42:3d:d6:5e:6a:ca:30:
         e8:7b:4c:c1:05:12:95:fa:7c:61:36:f2:69:f3:cb:82:4b:83:
         02:c5:3c:fd:46:74:f9:52:3a:f2:75:f0:a0:80:22:13:a9:da:
         d7:5f:cd:32:f6:d0:e4:02:8a:8f:68:1d:1e:30:ce:f1:92:eb:
         c5:ba:f8:ce:87:ce:e8:9a:c6:02:8a:96:5b:43:d6:fa:33:12:
         0f:f1:cd:27:64:e8:40:ca:81:df:41:3b:c5:82:0a:63:ee:00:
         de:4f:16:59:43:4c:c3:98:dd:a5:4b:59:6f:45:46:54:7b:f4:
         fd:1e:d7:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj6ju4QVNSiX5VPaPeWKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzJkOGE2MDE5N2ZjN2JkZTY0ZmMzZmFkMTBlYjJkYTRm
ZTg3NzkwHhcNMjYwMjA5MTgwMDE0WhcNMjYwMjEwMTgwMDE0WjAzMTEwLwYDVQQD
EyhlODM4OWRhMTIyODRkYTg1YzBkMzMxYWEwMDFiYTQ1YWRkMTI4ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GpGv1e2BvSSwKNUTpk2mZKv2p2u
aLPG72RDCwyVwfp8gKLvMyDyFTleXF0zxew6HkBQ6t9Eqk9h4DsR3S/c5oCwGfmx
17nhCSayvR61MUb3zheAQM/uzdUU1YwEzLcvnWCyxN3bWrYE1HtCBjyXv3onpoUD
8wNjCByxXPEgQi8DTEiF/xYDrFRZZ6F5+TbovTH8sj+VtOXeirfyjfEZG1ZuNI1h
LAs4NxAPfJN9gF5cfGTV3os59G+wstacaFkk8aDuRvdTTJ4bycmMw/anQpctx9PW
ZjD56TAjiI1v24L/r5ZMJVPaaMyuEF7uiBWQUfoB3N2K+gqo5H1M9wqKAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg4naEihNqFwNMxqgAbpFrdEo01MB8GA1UdIwQY
MBaAFHfC2KYBl/x73mT8P60Q6y2k/od5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAt
OGYyYWY5YjUxYzViLzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAtOGYyYWY5YjUxYzVi
LzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCnbVC0g
ahPKq6MG/xCnpCtfUco9qSvOJJiuF8r8FFbqs8Lk1PYNi+crtyXa0eriNyIc6d2M
y8sHNGyIYk6CxGZhHUgH+uu08Y/FeEdWyNWc131xB49aeU5bC8uCkbk83JWlDTW7
/qkHzAOGPyThlUabdqupe4IH0wQNe1gjlLOJqCm7CnI+fcJCPdZeasow6HtMwQUS
lfp8YTbyafPLgkuDAsU8/UZ0+VI68nXwoIAiE6na11/NMvbQ5AKKj2gdHjDO8ZLr
xbr4zofO6JrGAoqWW0PW+jMSD/HNJ2ToQMqB30E7xYIKY+4A3k8WWUNMw5jdpUtZ
b0VGVHv0/R7X7Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:15 2026 by rpki-client