This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File:                     AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier:          ACp9cRKSwzXhjdLO4Z+MEfozvR4wdXnMl3fklmD9CtU=
Subject key identifier:   AF:27:F5:9A:F0:E1:5B:57:D1:F2:4C:77:39:DE:34:0E:CF:18:39:4F
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer:       /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial:       019C420F414F2C49117CB25FD06E22CA3508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number:          16D6
Signing time:             Mon 09 Feb 2026 11:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:21 +0000
Files and hashes:         1: 6uyLPr7GcIkDSRR1cBioO7oGEF0.roa (hash: FfvCuloLAdVXrZLuuHrf1reVNj9KC+EjXSXR/em79FA=)
                          2: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: d6Xl5+h1IBGgBmzZDZtV0zuvsfGuZef1cNIQv91buDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:41:4f:2c:49:11:7c:b2:5f:d0:6e:22:ca:35:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
        Validity
            Not Before: Feb  9 11:00:21 2026 GMT
            Not After : Feb 10 11:00:21 2026 GMT
        Subject: CN=af27f59af0e15b57d1f24c7739de340ecf18394f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:64:3f:94:e2:16:e5:fe:55:a7:68:39:fe:
                    76:cf:54:f5:24:15:46:17:17:d6:87:20:d9:ca:14:
                    0b:53:f7:24:89:cc:be:44:85:50:dc:52:94:63:bd:
                    c4:fb:8e:cf:a4:91:36:6c:80:c5:e7:99:c3:39:a8:
                    37:8d:23:0e:3a:70:d0:7e:66:a3:25:43:16:4d:b3:
                    a1:63:8e:16:9d:3a:4a:3a:7f:62:78:88:30:ca:91:
                    ed:8c:e8:7d:c0:33:24:cd:83:7c:bf:b9:50:7e:18:
                    c6:e9:99:34:67:23:66:2e:67:6e:87:27:9b:ee:de:
                    66:2c:1f:2a:f3:0e:12:48:4c:6e:9d:a5:a0:a4:37:
                    7d:91:f6:98:3e:1c:fc:3a:16:94:1b:11:8b:fb:10:
                    0b:0c:a3:02:5c:4a:fb:fd:8f:5e:80:3e:f7:29:16:
                    b7:f1:00:20:ce:23:31:76:95:f8:8a:5f:11:85:31:
                    ee:55:a6:f5:54:aa:5c:f7:47:7d:93:f2:26:20:25:
                    5a:30:20:ca:00:4b:4e:10:d0:f3:ac:04:a5:27:b5:
                    5e:f2:ee:f6:c5:50:44:55:07:06:5b:27:e9:63:df:
                    4e:2a:b0:cf:83:4c:b9:44:63:75:31:b9:ad:7f:9d:
                    09:a8:32:bc:91:b4:c2:7e:41:7d:db:de:9d:81:87:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:27:F5:9A:F0:E1:5B:57:D1:F2:4C:77:39:DE:34:0E:CF:18:39:4F
            X509v3 Authority Key Identifier:
                keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:89:97:83:8f:18:8f:ec:79:80:a6:12:08:a8:78:7b:c6:21:
         93:5d:f9:d1:02:d5:56:d9:f1:7a:fd:86:8b:66:83:bb:21:40:
         b9:a2:4e:c6:72:af:bd:70:32:4d:48:ee:b4:ef:8f:92:3c:1b:
         89:d4:d2:f8:c2:d8:ff:21:27:f2:71:04:9c:82:04:55:3d:1e:
         18:8f:32:c3:de:8d:ee:c6:fb:5d:d0:41:e8:03:5d:83:ce:7b:
         81:a0:86:82:62:a3:bc:60:25:ca:49:50:35:b2:8e:0b:3a:b9:
         99:23:7b:0e:1c:46:c6:b7:d8:31:cd:eb:11:cb:bf:5d:0b:58:
         3b:83:64:f5:89:1a:a9:2c:83:8a:d3:9d:7d:2b:52:fd:06:29:
         12:e7:c9:b4:1a:0f:a6:79:a6:e9:1f:62:fd:97:89:b1:fc:e0:
         3c:48:fb:30:7b:5f:d3:2f:eb:03:d0:8f:a9:2b:a5:d7:50:ea:
         34:17:7f:8a:97:19:1a:82:1f:cf:e5:c3:9c:fd:e2:06:1b:b9:
         1a:1c:a9:a3:63:9a:01:27:9f:25:18:0f:94:81:b9:73:78:49:
         70:3e:ec:e9:52:5f:2a:d3:38:37:82:a1:37:c1:4d:91:f3:47:
         51:ed:1b:50:74:93:61:29:c9:70:d8:c9:d8:78:06:cf:92:e4:
         71:1d:0a:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD0FPLEkRfLJf0G4iyjUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDhkMmNhOGEyYjQzYjZjYWQyNWIyMjI2NTM1NGZlMzAz
OTExYTAwHhcNMjYwMjA5MTEwMDIxWhcNMjYwMjEwMTEwMDIxWjAzMTEwLwYDVQQD
EyhhZjI3ZjU5YWYwZTE1YjU3ZDFmMjRjNzczOWRlMzQwZWNmMTgzOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT1kP5TiFuX+VadoOf52z1T1JBVG
FxfWhyDZyhQLU/ckicy+RIVQ3FKUY73E+47PpJE2bIDF55nDOag3jSMOOnDQfmaj
JUMWTbOhY44WnTpKOn9ieIgwypHtjOh9wDMkzYN8v7lQfhjG6Zk0ZyNmLmduhyeb
7t5mLB8q8w4SSExunaWgpDd9kfaYPhz8OhaUGxGL+xALDKMCXEr7/Y9egD73KRa3
8QAgziMxdpX4il8RhTHuVab1VKpc90d9k/ImICVaMCDKAEtOENDzrASlJ7Ve8u72
xVBEVQcGWyfpY99OKrDPg0y5RGN1Mbmtf50JqDK8kbTCfkF9296dgYe20wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8n9Zrw4VtX0fJMdzneNA7PGDlPMB8GA1UdIwQY
MBaAFAFI0sqKK0O2ytJbIiZTVP4wORGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjct
MWJmODY4YTAzNTM4LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjctMWJmODY4YTAzNTM4
LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqImXg48Y
j+x5gKYSCKh4e8Yhk1350QLVVtnxev2Gi2aDuyFAuaJOxnKvvXAyTUjutO+Pkjwb
idTS+MLY/yEn8nEEnIIEVT0eGI8yw96N7sb7XdBB6ANdg857gaCGgmKjvGAlyklQ
NbKOCzq5mSN7DhxGxrfYMc3rEcu/XQtYO4Nk9YkaqSyDitOdfStS/QYpEufJtBoP
pnmm6R9i/ZeJsfzgPEj7MHtf0y/rA9CPqSul11DqNBd/ipcZGoIfz+XDnP3iBhu5
Ghypo2OaASefJRgPlIG5c3hJcD7s6VJfKtM4N4KhN8FNkfNHUe0bUHSTYSnJcNjJ
2HgGz5LkcR0KKA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:23 2026 by rpki-client