This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File:                     23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier:          g3wsR9TdG06YWRB2eTW7Na0zWpE3WVGDx8fzOzIaYBc=
Subject key identifier:   30:C3:AE:61:8D:0F:AC:C8:76:D7:5D:22:D8:C5:0D:62:2C:B5:4C:08
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer:       /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial:       019C42B449602E7CA06EE5CCD1575CE7DB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number:          14C2
Signing time:             Mon 09 Feb 2026 14:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:37 +0000
Files and hashes:         1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: 8tQFgd7ojWDzAqyFYfCq6zQaMLmj7IFoK7MrK1gjYEE=)
                          2: NRwgJUwXk3BWkcpGjCMp97lO_U4.roa (hash: cqI/kILVJcAeJ0Tz95y2zzvYBTUTuf7X5Zw7I2eBtl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:49:60:2e:7c:a0:6e:e5:cc:d1:57:5c:e7:db:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
        Validity
            Not Before: Feb  9 14:00:37 2026 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=30c3ae618d0facc876d75d22d8c50d622cb54c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:56:0a:35:7a:21:56:65:17:d5:13:b8:e5:
                    d6:b1:5e:88:2f:a3:af:22:36:a3:6e:8f:1d:6d:80:
                    d4:00:33:e9:b3:f3:bd:eb:da:13:5a:f8:4d:67:d3:
                    68:ea:8d:2b:41:0f:f7:39:2c:58:a2:90:77:02:21:
                    d2:6d:c0:7e:f4:40:cd:f0:e7:2a:01:f6:b8:4b:a5:
                    c4:96:bd:04:07:1e:90:44:62:ec:50:4f:84:fb:9a:
                    55:76:54:9a:5f:b4:41:a9:19:0e:89:91:27:2a:ca:
                    a4:72:02:2e:a8:e0:96:13:6e:a9:96:a8:cf:46:38:
                    80:10:01:a4:d6:db:b0:7f:96:e3:cc:9f:f1:6e:23:
                    2b:db:ff:d8:bd:28:2b:0f:ff:74:c6:4c:f6:79:89:
                    0c:81:79:ed:45:8c:e6:a2:f0:b0:1f:db:36:76:93:
                    c0:3b:f8:ed:20:b9:f9:20:15:a7:10:c2:14:ec:c2:
                    b5:84:62:61:ad:14:9a:f6:0b:20:9f:2b:de:99:ba:
                    94:17:14:e3:27:dd:a3:91:5f:37:fe:0f:97:87:50:
                    ba:1e:50:6b:ec:b1:3c:5e:80:1e:32:70:13:0d:9a:
                    5a:75:b7:46:da:0e:16:e7:82:c0:c8:68:f1:db:64:
                    5e:6a:7b:8e:b4:6a:34:34:e4:11:0a:70:bd:53:ee:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:AE:61:8D:0F:AC:C8:76:D7:5D:22:D8:C5:0D:62:2C:B5:4C:08
            X509v3 Authority Key Identifier:
                keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:68:55:58:4f:19:d2:7b:5b:9a:da:18:ab:4a:a7:57:d2:5e:
         db:a7:71:9f:5f:d0:2a:f8:07:15:12:b8:35:91:90:18:3a:68:
         d1:55:78:7b:45:96:0d:6d:e6:8d:ec:85:7f:d8:6f:63:e9:dd:
         69:07:9f:c3:c4:01:b2:ed:2b:ba:c3:56:f9:fc:65:4f:85:55:
         18:18:d7:c2:d7:45:e2:ba:db:a1:c0:13:5a:0c:3d:f4:2b:a6:
         80:db:24:3f:00:7d:61:10:34:0a:ca:ac:a1:45:46:13:c2:af:
         f8:99:71:d6:ea:e8:ae:a6:57:ec:06:b4:a1:1b:fd:8c:c4:bf:
         45:f6:a2:f1:6e:d8:98:60:69:8f:3b:2e:c0:a1:1b:ff:f6:04:
         d0:44:cc:87:77:11:e8:39:bf:ad:b2:c7:0c:0b:37:b8:c8:4a:
         55:bc:68:b2:78:e7:c9:f5:41:7f:ea:e3:19:1f:44:7c:b1:7b:
         9d:26:78:58:07:63:9e:46:e3:b2:5f:54:85:0a:6f:cc:2d:79:
         2f:41:7a:73:0e:1c:42:4f:53:88:57:da:0d:44:a7:d2:65:98:
         fb:9a:01:23:b7:4b:e3:d8:0d:92:bd:3a:42:53:68:74:d1:e6:
         14:d3:ac:fd:a0:d6:14:6f:c2:c2:ab:5f:a5:9f:2f:ce:64:18:
         32:19:5f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtElgLnygbuXM0Vdc59t/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk
MWViYmUwHhcNMjYwMjA5MTQwMDM3WhcNMjYwMjEwMTQwMDM3WjAzMTEwLwYDVQQD
EygzMGMzYWU2MThkMGZhY2M4NzZkNzVkMjJkOGM1MGQ2MjJjYjU0YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tBWCjV6IVZlF9UTuOXWsV6IL6Ov
Ijajbo8dbYDUADPps/O969oTWvhNZ9No6o0rQQ/3OSxYopB3AiHSbcB+9EDN8Ocq
Afa4S6XElr0EBx6QRGLsUE+E+5pVdlSaX7RBqRkOiZEnKsqkcgIuqOCWE26plqjP
RjiAEAGk1tuwf5bjzJ/xbiMr2//YvSgrD/90xkz2eYkMgXntRYzmovCwH9s2dpPA
O/jtILn5IBWnEMIU7MK1hGJhrRSa9gsgnyvembqUFxTjJ92jkV83/g+Xh1C6HlBr
7LE8XoAeMnATDZpadbdG2g4W54LAyGjx22ReanuOtGo0NOQRCnC9U+7y0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDDrmGND6zIdtddItjFDWIstUwIMB8GA1UdIwQY
MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt
ZjIyZWI2NWZjYzcyLzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy
LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2hVWE8Z
0ntbmtoYq0qnV9Je26dxn1/QKvgHFRK4NZGQGDpo0VV4e0WWDW3mjeyFf9hvY+nd
aQefw8QBsu0rusNW+fxlT4VVGBjXwtdF4rrbocATWgw99CumgNskPwB9YRA0Csqs
oUVGE8Kv+Jlx1urorqZX7Aa0oRv9jMS/Rfai8W7YmGBpjzsuwKEb//YE0ETMh3cR
6Dm/rbLHDAs3uMhKVbxosnjnyfVBf+rjGR9EfLF7nSZ4WAdjnkbjsl9UhQpvzC15
L0F6cw4cQk9TiFfaDUSn0mWY+5oBI7dL49gNkr06QlNodNHmFNOs/aDWFG/Cwqtf
pZ8vzmQYMhlfDQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:35 2026 by rpki-client