This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File:                     mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier:          hy14AD7sw9E8auPEAaF0XpsiD0Iuy+mI+1u0KWFBDk0=
Subject key identifier:   66:54:F1:1F:DC:B6:62:4F:8C:BD:D0:5F:88:FE:5A:B4:44:10:D0:C3
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer:       /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial:       019C4358CD254B9F458F56DD890DC3163AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number:          06D7
Signing time:             Mon 09 Feb 2026 17:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:18 +0000
Files and hashes:         1: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: GNzRLnci+1v8uOrgTgYuTxXErx5Q7/lNvxUNrwIUJaA=)
                          2: qqoPemYi4_pyOzOVoO62_Uat0so.roa (hash: Sdr4R7TpF1P6pqqGJyLye0mNOG4fczQyXXubw1Zcqyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:cd:25:4b:9f:45:8f:56:dd:89:0d:c3:16:3a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
        Validity
            Not Before: Feb  9 17:00:18 2026 GMT
            Not After : Feb 10 17:00:18 2026 GMT
        Subject: CN=6654f11fdcb6624f8cbdd05f88fe5ab44410d0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:02:14:16:e5:1f:cf:54:8d:58:df:7d:13:40:
                    a5:db:eb:28:0c:d2:00:8c:a7:39:d3:07:08:81:b0:
                    d3:a0:8d:72:46:52:e2:51:06:39:62:4f:7a:96:77:
                    7b:b3:0c:70:cd:48:ff:97:60:6b:c3:70:55:94:8f:
                    9f:21:28:4c:85:69:b8:b2:a6:fb:2e:5f:58:2f:b2:
                    1f:f1:61:62:9b:49:f1:d3:d9:95:e5:35:08:8b:40:
                    52:ef:8a:53:40:ff:a3:30:e0:48:98:f3:d2:15:6c:
                    cb:59:39:9c:a9:f0:5a:e1:e1:c1:e3:6e:ad:16:2e:
                    d3:bb:68:a0:1c:7b:41:14:61:50:c2:31:6e:0c:07:
                    59:74:5e:5c:2d:69:8b:93:ab:ad:96:a3:9c:50:fe:
                    ee:90:21:52:a8:c3:53:e4:8b:67:61:06:67:7f:cc:
                    f9:74:38:77:4e:c7:44:cf:8d:a8:6d:c9:cd:74:64:
                    7f:88:7a:a4:7a:4d:f7:28:f7:71:cd:7d:7e:fd:3e:
                    ef:2c:35:ed:29:33:98:10:38:f7:2d:35:5d:41:e7:
                    d9:8d:64:82:d2:9f:13:90:1a:b1:8a:28:d4:65:12:
                    46:58:81:99:b9:82:f6:d8:0b:98:bf:70:d1:ea:80:
                    2a:5b:47:1d:64:af:54:cf:d5:cd:a7:f8:7a:03:5e:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:54:F1:1F:DC:B6:62:4F:8C:BD:D0:5F:88:FE:5A:B4:44:10:D0:C3
            X509v3 Authority Key Identifier:
                keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:37:a1:8d:dd:54:d3:b7:a8:7b:f1:ce:50:18:20:b4:27:
         12:69:31:e5:b1:54:49:17:d9:bf:c0:7a:2d:57:1c:2f:42:68:
         fc:4e:a2:aa:de:9f:a9:0c:aa:7d:f9:6a:7c:38:53:2c:2e:27:
         1f:02:42:94:5a:b2:8e:fb:dc:70:f7:b9:80:b7:43:6c:42:5b:
         5e:f0:48:c1:e0:66:f7:5c:7b:62:f9:3d:66:c2:d8:de:8a:6d:
         e5:ea:eb:23:02:06:eb:eb:9f:fd:86:07:45:18:10:36:44:79:
         2f:65:59:4c:4a:6b:1d:46:73:34:87:3f:48:db:7b:04:10:6a:
         66:34:65:50:50:0a:72:af:2a:fd:e0:13:35:8d:34:ec:1d:f7:
         14:40:0c:d4:9d:73:ae:57:22:d5:8b:f4:02:95:2b:e1:43:1c:
         cd:c7:c2:b1:7c:64:7f:fd:ef:64:c5:dd:8f:0f:4f:fc:4d:c3:
         48:fa:32:ac:b5:46:92:35:bc:57:4c:bd:61:01:d9:aa:0c:43:
         36:83:e9:7d:80:b3:02:0b:1d:9e:dc:6c:47:50:22:db:6a:47:
         5d:bf:8c:38:30:7e:9a:d4:bf:d4:1f:63:55:df:34:ec:4d:33:
         ad:42:2e:0d:58:ae:8c:ba:af:a6:dd:fa:d6:16:b5:42:b6:e6:
         04:be:fb:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWM0lS59Fj1bdiQ3DFjrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4
ODA3NzEwHhcNMjYwMjA5MTcwMDE4WhcNMjYwMjEwMTcwMDE4WjAzMTEwLwYDVQQD
Eyg2NjU0ZjExZmRjYjY2MjRmOGNiZGQwNWY4OGZlNWFiNDQ0MTBkMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QIUFuUfz1SNWN99E0Cl2+soDNIA
jKc50wcIgbDToI1yRlLiUQY5Yk96lnd7swxwzUj/l2Brw3BVlI+fIShMhWm4sqb7
Ll9YL7If8WFim0nx09mV5TUIi0BS74pTQP+jMOBImPPSFWzLWTmcqfBa4eHB426t
Fi7Tu2igHHtBFGFQwjFuDAdZdF5cLWmLk6utlqOcUP7ukCFSqMNT5ItnYQZnf8z5
dDh3TsdEz42obcnNdGR/iHqkek33KPdxzX1+/T7vLDXtKTOYEDj3LTVdQefZjWSC
0p8TkBqxiijUZRJGWIGZuYL22AuYv3DR6oAqW0cdZK9Uz9XNp/h6A14t9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZU8R/ctmJPjL3QX4j+WrREENDDMB8GA1UdIwQY
MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt
ZGMyZmVhYzM3ODI5LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5
LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdE3oY3d
VNO3qHvxzlAYILQnEmkx5bFUSRfZv8B6LVccL0Jo/E6iqt6fqQyqfflqfDhTLC4n
HwJClFqyjvvccPe5gLdDbEJbXvBIweBm91x7Yvk9ZsLY3opt5errIwIG6+uf/YYH
RRgQNkR5L2VZTEprHUZzNIc/SNt7BBBqZjRlUFAKcq8q/eATNY007B33FEAM1J1z
rlci1Yv0ApUr4UMczcfCsXxkf/3vZMXdjw9P/E3DSPoyrLVGkjW8V0y9YQHZqgxD
NoPpfYCzAgsdntxsR1Ai22pHXb+MODB+mtS/1B9jVd807E0zrUIuDViujLqvpt36
1ha1QrbmBL775g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:29 2026 by rpki-client