This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File:                     aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier:          SmzefEAqV3Q6t2vg4op116WTiiQujs+/qEWiJa7Kmt8=
Subject key identifier:   AD:35:5F:91:75:FA:27:34:64:A3:DC:FF:32:36:75:D3:2E:05:42:D5
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer:       /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial:       019C41A155D47BC54E8FACFDD81604976D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number:          0871
Signing time:             Mon 09 Feb 2026 09:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:18 +0000
Files and hashes:         1: 7xsMIiVMy6lo8Sv2_KFkf6UUkd0.roa (hash: l9A1rvzhgMLewerazX4IIZZJCUhzRMMlFNIhGKIl2u8=)
                          2: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: l4i7KJO6OXO7gMtJ6FmXwTi5H6WJMj17nZWbYH9ExUI=)
                          3: sYc6H234_lhFJLVnD1s8r-M0x7Q.roa (hash: mwfgYtpAqD/0PLlomhnZdEd3pDLweTePVgRAfbIpDGg=)
                          4: wFb-sQ4RN7qQpWbL4eb3ysou4H8.roa (hash: cM0/WidCdHghkLHOhKrAG/w/jjB80DOAe9FkWCIQQq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:55:d4:7b:c5:4e:8f:ac:fd:d8:16:04:97:6d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
        Validity
            Not Before: Feb  9 09:00:18 2026 GMT
            Not After : Feb 10 09:00:18 2026 GMT
        Subject: CN=ad355f9175fa273464a3dcff323675d32e0542d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:38:9a:c6:4b:cd:cd:50:ac:92:ca:1d:82:
                    7c:ce:64:78:b1:63:d0:08:ee:e6:a0:de:d4:60:29:
                    81:89:e6:be:be:3c:61:e1:ac:cc:50:68:5a:4d:78:
                    71:1c:9c:c5:22:0b:2f:c7:8f:18:93:3d:cb:14:2f:
                    83:9a:84:87:46:bb:e4:83:a7:41:00:32:e5:07:35:
                    7c:72:74:7c:b8:25:96:75:15:27:a1:fe:83:83:d6:
                    6c:a0:de:67:2e:3d:a1:f4:8c:38:71:54:23:0a:91:
                    55:59:54:49:3c:e3:84:d6:75:f8:a0:b4:ea:5e:ca:
                    4a:d3:28:5a:05:3a:54:4d:8e:fd:08:d5:d6:8e:70:
                    3a:b4:14:33:1b:70:5e:95:9d:75:fa:90:82:ba:b2:
                    64:93:21:89:7c:53:97:2a:64:1f:9f:86:6a:ee:ae:
                    67:3e:2e:34:05:fa:f3:9d:ab:36:43:f3:d8:63:9b:
                    d5:e2:1d:40:d5:ed:75:e5:1d:b6:8f:f3:d1:f2:3a:
                    60:6a:37:c7:cf:b7:e6:b7:95:e6:c3:15:44:f2:4f:
                    6d:51:aa:3f:ea:b5:c7:8b:dc:fd:a4:55:56:99:28:
                    79:ec:b9:95:03:7e:84:af:fe:2e:26:95:d8:fd:6f:
                    a2:4d:59:b1:dc:09:8d:df:00:27:b6:72:ba:f9:f0:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:35:5F:91:75:FA:27:34:64:A3:DC:FF:32:36:75:D3:2E:05:42:D5
            X509v3 Authority Key Identifier:
                keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:60:f8:3f:a7:88:14:cc:21:33:3f:ad:c6:08:ce:76:5d:
         38:68:55:54:f3:76:c5:04:a1:4c:9e:c7:d8:55:f6:e5:3c:a6:
         48:0f:6d:84:15:c7:55:63:1d:b4:64:ca:6a:1b:70:1f:09:fb:
         68:9e:95:ec:21:79:f4:11:de:a4:39:73:70:55:0a:64:52:65:
         82:b6:b4:6c:d2:00:06:b9:79:83:8c:96:0e:d9:98:91:36:88:
         b4:f0:9a:74:cd:dd:21:ee:92:12:40:37:35:9a:09:e4:b5:c3:
         e5:04:24:bb:ea:6e:4b:fe:08:a5:fe:70:9d:d3:fa:aa:5d:4f:
         7c:96:5f:97:50:1e:0f:fa:ff:8c:8c:65:56:2b:95:ed:f2:fc:
         a6:db:e3:6a:44:49:13:d5:4e:fa:51:bb:54:ef:38:29:d9:f5:
         40:6e:1d:c3:75:a5:09:29:eb:dd:f0:4a:12:9a:4b:55:90:0d:
         81:74:90:3f:5a:18:a9:01:9b:d4:6d:64:19:eb:56:aa:ba:95:
         5a:bb:93:ce:f7:e3:0c:9b:13:7f:23:29:68:a6:49:f0:96:b4:
         2f:cf:79:5f:40:09:4a:8d:61:83:1a:aa:59:4d:37:50:bf:c6:
         ad:99:d1:de:38:e0:ce:4c:50:59:fa:67:ed:b3:79:b3:68:b4:
         e0:43:13:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoVXUe8VOj6z92BYEl207MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzM3YzZlMDYwMmJlMzgwNGUyNzc1ODBiYWI3ZTIxZTZl
MzM0NzQwHhcNMjYwMjA5MDkwMDE4WhcNMjYwMjEwMDkwMDE4WjAzMTEwLwYDVQQD
EyhhZDM1NWY5MTc1ZmEyNzM0NjRhM2RjZmYzMjM2NzVkMzJlMDU0MmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bw4msZLzc1QrJLKHYJ8zmR4sWPQ
CO7moN7UYCmBiea+vjxh4azMUGhaTXhxHJzFIgsvx48Ykz3LFC+DmoSHRrvkg6dB
ADLlBzV8cnR8uCWWdRUnof6Dg9ZsoN5nLj2h9Iw4cVQjCpFVWVRJPOOE1nX4oLTq
XspK0yhaBTpUTY79CNXWjnA6tBQzG3BelZ11+pCCurJkkyGJfFOXKmQfn4Zq7q5n
Pi40Bfrznas2Q/PYY5vV4h1A1e115R22j/PR8jpgajfHz7fmt5XmwxVE8k9tUao/
6rXHi9z9pFVWmSh57LmVA36Er/4uJpXY/W+iTVmx3AmN3wAntnK6+fDBawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK01X5F1+ic0ZKPc/zI2ddMuBULVMB8GA1UdIwQY
MBaAFGlzfG4GAr44BOJ3WAurfiHm4zR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEt
ODM4YTQ1MDU3MzVhLzEvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iNmFmOWQtNDdiYS00YjkyLWI0MWEtODM4YTQ1MDU3MzVh
LzEvYVhOOGJnWUN2amdFNG5kWUM2dC1JZWJqTkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZNg+D+n
iBTMITM/rcYIznZdOGhVVPN2xQShTJ7H2FX25TymSA9thBXHVWMdtGTKahtwHwn7
aJ6V7CF59BHepDlzcFUKZFJlgra0bNIABrl5g4yWDtmYkTaItPCadM3dIe6SEkA3
NZoJ5LXD5QQku+puS/4Ipf5wndP6ql1PfJZfl1AeD/r/jIxlViuV7fL8ptvjakRJ
E9VO+lG7VO84Kdn1QG4dw3WlCSnr3fBKEppLVZANgXSQP1oYqQGb1G1kGetWqrqV
WruTzvfjDJsTfyMpaKZJ8Ja0L895X0AJSo1hgxqqWU03UL/GrZnR3jjgzkxQWfpn
7bN5s2i04EMTLA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:39 2026 by rpki-client