This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File:                     Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier:          vwq1JC9mkLefU+aKRQq/nEKP1RN5osdGG6pCphj/scs=
Subject key identifier:   8D:C9:9F:C0:63:9A:16:75:41:4E:97:05:30:CA:08:2B:F9:85:D1:36
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       019C43909FC19326E42B34460EBA1F511144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number:          28
Signing time:             Mon 09 Feb 2026 18:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:17 +0000
Files and hashes:         1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: vrnqMbzMAG1/RUItgx+2/s2MyjqwaEt7xB93fcmy40Q=)
                          2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:9f:c1:93:26:e4:2b:34:46:0e:ba:1f:51:11:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: Feb  9 18:01:17 2026 GMT
            Not After : Feb 10 18:01:17 2026 GMT
        Subject: CN=8dc99fc0639a1675414e970530ca082bf985d136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:1d:cd:3a:dd:e7:7a:32:fb:51:cb:be:26:
                    d8:d3:7a:f9:f9:b6:ce:f0:e6:94:18:65:bc:57:9b:
                    da:fd:4e:dd:df:50:6d:16:a8:7c:bf:54:c2:69:b5:
                    ce:05:5f:c7:a6:9e:4e:ee:5b:80:c0:04:2c:ba:eb:
                    77:83:d6:f3:ba:4e:9c:d6:da:0c:71:22:69:fb:0d:
                    94:3f:e8:7d:d3:a1:52:65:59:be:06:b5:45:d8:5a:
                    f2:07:50:77:6a:52:c7:83:71:3e:43:66:e5:05:38:
                    6d:44:23:c6:2a:e8:99:c5:41:99:09:55:5e:0f:11:
                    89:e8:64:4c:5f:e4:27:f4:b4:a9:c9:e2:2e:70:59:
                    9e:db:34:76:14:ba:00:f3:49:ed:e2:a0:fa:07:bb:
                    ba:d7:e0:1d:8f:65:e3:c4:e3:c6:98:4f:b7:35:8e:
                    ce:3d:51:8d:4e:a9:aa:92:3b:6a:95:c5:89:e5:99:
                    48:38:78:0d:74:ba:eb:cb:51:2a:7f:7c:11:0d:12:
                    b2:79:6c:e3:3b:fe:65:31:43:f2:c4:89:df:c7:cd:
                    fd:78:d3:78:0d:e4:31:e1:79:37:da:47:6a:02:47:
                    c6:4b:35:43:85:51:31:49:1f:d4:68:01:f8:11:ae:
                    bd:08:02:5f:5a:35:c1:c3:06:1c:37:c9:ef:c9:41:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C9:9F:C0:63:9A:16:75:41:4E:97:05:30:CA:08:2B:F9:85:D1:36
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:da:6f:6c:c5:7b:3c:4d:07:b0:39:99:11:d2:c7:e3:cb:93:
         f6:cd:bd:13:c7:b5:24:ec:14:df:f2:5d:af:9d:b9:e2:62:e9:
         0c:d1:32:9e:73:f4:7e:e7:82:6e:0a:2b:30:99:bf:2b:23:c1:
         ca:aa:cc:86:2e:59:8c:69:9e:0c:02:a2:ed:d9:f6:97:d3:9f:
         1e:1a:af:5d:8b:76:a1:eb:48:6e:a8:7c:44:2b:0a:1c:35:8f:
         38:8c:f7:ec:ec:2c:65:62:4b:ce:29:fa:21:56:31:95:8c:67:
         d8:53:66:69:3e:b0:54:55:47:19:ab:c0:8b:e2:d1:4b:a7:99:
         7d:bb:16:7e:8a:73:32:74:13:31:9e:04:f0:b7:c8:e7:76:45:
         0f:cc:10:1b:45:5f:c3:cf:84:11:ac:b2:01:4c:ee:df:6c:89:
         e3:f2:ca:5c:ce:c1:a3:0e:cd:a9:62:6d:39:e6:a4:4c:7e:fa:
         b4:2c:99:7b:c9:2e:94:68:ab:88:ea:d0:85:90:b8:d9:d0:ba:
         17:88:05:dc:5f:9a:40:47:d5:57:07:de:2c:0c:82:70:d5:21:
         b9:de:48:b2:43:f7:86:d7:9d:9c:3f:32:9a:6c:f0:a5:a6:5d:
         49:f5:d4:86:55:dd:ae:fc:85:f9:c2:af:8e:12:19:14:80:f5:
         6e:39:ea:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkJ/BkybkKzRGDrofURFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjc3NjljMWEwMWUxMjUwZjFmMjhhNjA1YjVjOWQ5YjZk
MzQxOWEwHhcNMjYwMjA5MTgwMTE3WhcNMjYwMjEwMTgwMTE3WjAzMTEwLwYDVQQD
Eyg4ZGM5OWZjMDYzOWExNjc1NDE0ZTk3MDUzMGNhMDgyYmY5ODVkMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo14dzTrd53oy+1HLvibY03r5+bbO
8OaUGGW8V5va/U7d31BtFqh8v1TCabXOBV/Hpp5O7luAwAQsuut3g9bzuk6c1toM
cSJp+w2UP+h906FSZVm+BrVF2FryB1B3alLHg3E+Q2blBThtRCPGKuiZxUGZCVVe
DxGJ6GRMX+Qn9LSpyeIucFme2zR2FLoA80nt4qD6B7u61+Adj2XjxOPGmE+3NY7O
PVGNTqmqkjtqlcWJ5ZlIOHgNdLrry1Eqf3wRDRKyeWzjO/5lMUPyxInfx839eNN4
DeQx4Xk32kdqAkfGSzVDhVExSR/UaAH4Ea69CAJfWjXBwwYcN8nvyUECWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3Jn8BjmhZ1QU6XBTDKCCv5hdE2MB8GA1UdIwQY
MBaAFAMndpwaAeElDx8opgW1ydm200GaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTIt
NjUzM2I3MmM2YTZiLzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTItNjUzM2I3MmM2YTZi
LzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNpvbMV7
PE0HsDmZEdLH48uT9s29E8e1JOwU3/Jdr5254mLpDNEynnP0fueCbgorMJm/KyPB
yqrMhi5ZjGmeDAKi7dn2l9OfHhqvXYt2oetIbqh8RCsKHDWPOIz37OwsZWJLzin6
IVYxlYxn2FNmaT6wVFVHGavAi+LRS6eZfbsWfopzMnQTMZ4E8LfI53ZFD8wQG0Vf
w8+EEayyAUzu32yJ4/LKXM7Bow7NqWJtOeakTH76tCyZe8kulGiriOrQhZC42dC6
F4gF3F+aQEfVVwfeLAyCcNUhud5IskP3htednD8ymmzwpaZdSfXUhlXdrvyF+cKv
jhIZFID1bjnqlw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:44 2026 by rpki-client