This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File:                     z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier:          XevUeczefeK7AwNgjWu2eSjmfD3pVVpP28YHfvnFwa4=
Subject key identifier:   78:BB:97:20:40:45:2D:60:FB:EC:9B:2F:8E:0E:6F:BA:92:8F:33:6F
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer:       /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial:       019C420FFD24F271C02481A58F4484CEBDD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number:          0C62
Signing time:             Mon 09 Feb 2026 11:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:09 +0000
Files and hashes:         1: 6Jo867Q7kI_xg37Z2hR0Zp-bKLA.roa (hash: nuQ+eCxmU3VLRBrNEQL/R2CLOaS7uJaHx+gJkQcGWrE=)
                          2: bpCdtlID1rH2DrjVzMcBmork2aQ.roa (hash: BSKDPkYhU8I5fR9wBcNo+U5cc/fHr2mCsZj2Lep7Q84=)
                          3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: WKrGag74LwjtkezZekHLxYqoYz49DVmI0Y7WJM+UqoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:fd:24:f2:71:c0:24:81:a5:8f:44:84:ce:bd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
        Validity
            Not Before: Feb  9 11:01:09 2026 GMT
            Not After : Feb 10 11:01:09 2026 GMT
        Subject: CN=78bb972040452d60fbec9b2f8e0e6fba928f336f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:fd:8d:07:71:f2:8f:1b:40:55:fe:c1:53:
                    65:54:f5:f3:1c:b6:be:20:26:d6:4a:78:f1:3f:9a:
                    30:3f:33:cc:d2:0d:fa:c5:da:c0:7e:c7:d6:f6:c8:
                    52:7f:69:d4:9b:f5:f9:4b:27:dc:0e:4e:a5:45:af:
                    c7:a0:7a:dc:2d:eb:f7:3f:62:36:a1:d0:82:63:a6:
                    23:b3:2e:4c:db:26:2b:b9:12:13:9b:03:ea:16:5c:
                    de:88:d1:b4:73:5d:45:3e:cb:4f:e0:61:40:f0:47:
                    fc:47:31:78:fb:05:92:16:13:cc:00:0d:08:f7:1e:
                    5c:fe:bc:4f:18:d8:6f:2a:36:f5:67:72:b2:a2:56:
                    43:75:42:41:bf:3a:37:d3:73:9d:53:47:41:dc:0a:
                    d2:be:38:96:a9:99:4e:ab:83:d0:b7:45:d3:00:6f:
                    92:fb:b6:0c:8c:53:d4:ed:f4:e8:df:81:84:0f:72:
                    34:06:76:60:56:79:b0:45:24:e6:68:a0:e0:7e:e9:
                    65:3a:35:4c:9e:15:d5:dd:e2:b5:16:be:9c:e8:04:
                    fe:97:b4:63:c1:f5:20:d5:74:b9:0d:ed:09:75:bd:
                    47:b6:a9:53:62:fa:6e:d8:e1:d5:2f:8c:58:32:b5:
                    6d:69:88:e3:38:8e:19:dd:93:98:d0:de:8e:b3:37:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:97:20:40:45:2D:60:FB:EC:9B:2F:8E:0E:6F:BA:92:8F:33:6F
            X509v3 Authority Key Identifier:
                keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:19:e9:f3:3e:1d:ad:ae:74:67:38:a5:ed:4c:bb:ef:ed:ec:
         93:72:72:a7:2f:9b:1c:b3:e1:ad:5a:c6:19:43:54:54:29:fe:
         72:70:1a:74:d3:d3:e2:88:33:3d:1f:c4:ce:da:37:31:f8:5b:
         10:86:10:ae:5b:97:d6:c8:21:54:74:aa:9d:ce:d1:8b:e2:bb:
         9e:7f:7f:d2:67:6b:1d:8a:c5:6d:e2:ea:d8:cb:74:03:2d:e7:
         2e:52:58:df:ca:87:31:61:e3:db:74:3d:58:c1:70:b5:0d:2f:
         76:04:22:77:18:63:35:d6:2e:3c:a3:c2:ca:ba:a9:cf:ad:2d:
         06:79:47:59:85:8c:21:eb:50:a1:6b:9b:7a:b1:3b:d2:30:70:
         0d:b5:e3:fe:a8:3c:f6:fa:6f:0b:dc:ec:3b:a8:a5:98:3f:08:
         e6:89:ab:72:45:1b:14:0f:33:d0:15:e8:b9:28:56:4b:84:b2:
         87:53:ca:29:47:f1:80:5e:9e:a3:f1:a0:6d:8b:5a:e2:8b:a4:
         45:c0:54:64:b0:28:eb:5e:44:37:0c:a4:66:53:7d:81:0f:93:
         8b:59:d9:77:ab:b0:6f:5a:ee:3c:6e:c2:ee:53:2f:39:a7:b6:
         08:b0:95:d3:cb:25:9f:31:97:82:aa:2c:50:28:75:c6:65:98:
         bb:17:74:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD/0k8nHAJIGlj0SEzr3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk
ZWJiMGYwHhcNMjYwMjA5MTEwMTA5WhcNMjYwMjEwMTEwMTA5WjAzMTEwLwYDVQQD
Eyg3OGJiOTcyMDQwNDUyZDYwZmJlYzliMmY4ZTBlNmZiYTkyOGYzMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAP9jQdx8o8bQFX+wVNlVPXzHLa+
ICbWSnjxP5owPzPM0g36xdrAfsfW9shSf2nUm/X5SyfcDk6lRa/HoHrcLev3P2I2
odCCY6Yjsy5M2yYruRITmwPqFlzeiNG0c11FPstP4GFA8Ef8RzF4+wWSFhPMAA0I
9x5c/rxPGNhvKjb1Z3KyolZDdUJBvzo303OdU0dB3ArSvjiWqZlOq4PQt0XTAG+S
+7YMjFPU7fTo34GED3I0BnZgVnmwRSTmaKDgfullOjVMnhXV3eK1Fr6c6AT+l7Rj
wfUg1XS5De0Jdb1HtqlTYvpu2OHVL4xYMrVtaYjjOI4Z3ZOY0N6OszfzqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHi7lyBARS1g++ybL44Ob7qSjzNvMB8GA1UdIwQY
MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt
MzgyOTIwMTU1ZmZiLzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi
LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBnp8z4d
ra50Zzil7Uy77+3sk3Jypy+bHLPhrVrGGUNUVCn+cnAadNPT4ogzPR/Ezto3Mfhb
EIYQrluX1sghVHSqnc7Ri+K7nn9/0mdrHYrFbeLq2Mt0Ay3nLlJY38qHMWHj23Q9
WMFwtQ0vdgQidxhjNdYuPKPCyrqpz60tBnlHWYWMIetQoWuberE70jBwDbXj/qg8
9vpvC9zsO6ilmD8I5omrckUbFA8z0BXouShWS4Syh1PKKUfxgF6eo/GgbYta4ouk
RcBUZLAo615ENwykZlN9gQ+Ti1nZd6uwb1ruPG7C7lMvOae2CLCV08slnzGXgqos
UCh1xmWYuxd0XQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:36 2026 by rpki-client