This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          OSYxBXUVnxDzCle8adTZS8yyM8XsalWL82nXqzs5CIA=
Subject key identifier:   CC:CD:96:BF:48:83:12:BA:F5:11:CB:72:09:9C:89:0A:F2:AB:01:FB
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       019C42EB3986516757D6F7504CEC5E3A8D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          120A
Signing time:             Mon 09 Feb 2026 15:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:37 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: tpvFlnulO+0t73et1VDJY7XgZHaKITiOTIiGMbCWG4Q=)
                          2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:39:86:51:67:57:d6:f7:50:4c:ec:5e:3a:8d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: Feb  9 15:00:37 2026 GMT
            Not After : Feb 10 15:00:37 2026 GMT
        Subject: CN=cccd96bf488312baf511cb72099c890af2ab01fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:24:52:46:1f:15:78:61:b0:61:54:41:e0:
                    21:39:c5:f1:27:3a:c1:fb:f9:80:6d:4e:6d:11:6b:
                    a9:dc:10:61:6f:a3:9e:d4:d2:e3:8e:db:21:ad:6d:
                    7c:f5:2f:2d:26:a2:d7:20:d1:50:50:ca:5d:60:9b:
                    d0:f3:37:96:2a:83:1a:91:c9:e0:7b:ec:42:88:af:
                    50:f1:4f:f7:20:62:5b:d6:5c:5f:f5:c7:e5:f7:e5:
                    d5:c5:05:ee:6a:97:a1:48:d5:51:06:40:18:c6:f0:
                    97:0a:2f:a0:b0:c8:9f:e8:23:70:34:41:85:c1:24:
                    b2:e1:f3:13:a1:91:c2:07:76:2b:9c:7d:e2:89:cb:
                    5b:32:44:71:2e:e4:f0:cb:0d:a0:2e:fd:09:a5:1b:
                    71:b2:e7:7e:c2:f3:2e:1e:73:8c:6c:b7:0b:51:cb:
                    eb:dd:e5:cf:9f:48:7a:92:c0:12:3e:25:20:42:a4:
                    e7:aa:e7:5f:ee:4c:be:05:7b:8a:5b:6d:98:73:43:
                    be:61:ab:07:39:b0:0b:3b:18:7e:58:2e:66:3c:83:
                    62:51:34:5b:89:68:70:70:f5:76:6b:af:21:c3:bd:
                    87:e8:69:c9:dd:90:81:2d:c2:b2:11:56:db:42:77:
                    9e:5d:7b:70:22:9f:58:a1:a8:6d:bf:72:39:e2:bd:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CD:96:BF:48:83:12:BA:F5:11:CB:72:09:9C:89:0A:F2:AB:01:FB
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:54:80:e6:c6:86:61:5c:12:13:08:3b:69:45:4a:cf:72:
         0f:9b:be:f0:1a:45:69:12:3b:df:d9:4f:73:1f:19:ca:78:c2:
         97:34:52:07:e1:32:06:ed:89:ac:9c:87:2f:38:36:fe:37:b9:
         f1:53:fa:74:d1:b9:03:ee:88:36:5d:dc:3b:61:da:a5:dc:06:
         22:03:ff:0a:78:42:59:fd:9f:f5:c8:3f:72:70:e0:22:63:2f:
         cc:97:cf:c4:fe:b2:eb:f6:8c:c5:92:48:1b:aa:d8:bb:a4:6c:
         9e:e9:24:41:ee:de:eb:f8:0c:06:d2:11:69:7d:75:3a:33:2e:
         a9:85:2c:82:64:79:5b:44:47:2b:63:94:d0:f2:d6:9c:fd:96:
         78:d7:7f:4b:5e:06:76:dc:a3:5a:f4:da:9a:62:40:f5:4c:53:
         8c:86:e4:3e:fd:2b:36:94:0d:1b:3a:f7:95:70:18:19:01:7a:
         16:6f:31:1f:c4:d3:fc:27:8a:94:2d:f8:f0:bf:e7:83:19:55:
         c7:9c:48:6c:a1:d5:58:be:f0:f4:bb:07:74:6e:9f:49:ef:07:
         8f:98:89:ba:32:d3:28:39:f7:e4:c6:3f:7a:b2:2a:4f:55:e3:
         02:cb:45:ab:78:24:c6:9d:86:1f:66:ab:e5:16:e4:68:33:54:
         17:1f:5f:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6zmGUWdX1vdQTOxeOo0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmNlZjk3NjY0MmQ1NGI0YjRhMTk5OGYwYjNmZjQ4ODQ1
YTkyNmQwHhcNMjYwMjA5MTUwMDM3WhcNMjYwMjEwMTUwMDM3WjAzMTEwLwYDVQQD
EyhjY2NkOTZiZjQ4ODMxMmJhZjUxMWNiNzIwOTljODkwYWYyYWIwMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pskUkYfFXhhsGFUQeAhOcXxJzrB
+/mAbU5tEWup3BBhb6Oe1NLjjtshrW189S8tJqLXINFQUMpdYJvQ8zeWKoMakcng
e+xCiK9Q8U/3IGJb1lxf9cfl9+XVxQXuapehSNVRBkAYxvCXCi+gsMif6CNwNEGF
wSSy4fMToZHCB3YrnH3iictbMkRxLuTwyw2gLv0JpRtxsud+wvMuHnOMbLcLUcvr
3eXPn0h6ksASPiUgQqTnqudf7ky+BXuKW22Yc0O+YasHObALOxh+WC5mPINiUTRb
iWhwcPV2a68hw72H6GnJ3ZCBLcKyEVbbQneeXXtwIp9Yoahtv3I54r0HCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzNlr9IgxK69RHLcgmciQryqwH7MB8GA1UdIwQY
MBaAFAO875dmQtVLS0oZmPCz/0iEWpJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYt
ZjFlOWJmMmJmZjIxLzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYtZjFlOWJmMmJmZjIx
LzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGlUgObG
hmFcEhMIO2lFSs9yD5u+8BpFaRI739lPcx8ZynjClzRSB+EyBu2JrJyHLzg2/je5
8VP6dNG5A+6INl3cO2HapdwGIgP/CnhCWf2f9cg/cnDgImMvzJfPxP6y6/aMxZJI
G6rYu6RsnukkQe7e6/gMBtIRaX11OjMuqYUsgmR5W0RHK2OU0PLWnP2WeNd/S14G
dtyjWvTammJA9UxTjIbkPv0rNpQNGzr3lXAYGQF6Fm8xH8TT/CeKlC348L/ngxlV
x5xIbKHVWL7w9LsHdG6fSe8Hj5iJujLTKDn35MY/erIqT1XjAstFq3gkxp2GH2ar
5RbkaDNUFx9f5g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:04 2026 by rpki-client