This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File:                     _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier:          ntnzzEGW4vbKJwL07nggq/dWGLm6m7/i6SH0l+ujYqw=
Subject key identifier:   5A:5D:4D:E9:63:3A:4E:34:97:7B:19:30:C6:AD:D2:DD:7B:FA:96:35
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer:       /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial:       019C41D8E75F70D4EA82CAA74E0D1CB3B20D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number:          0263
Signing time:             Mon 09 Feb 2026 10:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:59 +0000
Files and hashes:         1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: MHhTuvVrgUgtlmjb1HZNCKCcIdQz2zRMiObwpdIFumg=)
                          2: tLR8Xx9kGTwthIYBMxfEvODUS6s.roa (hash: KHsotfa52tk8ozmtkTvPKINqIBAb1ObEd0CzRfZjCVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:e7:5f:70:d4:ea:82:ca:a7:4e:0d:1c:b3:b2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
        Validity
            Not Before: Feb  9 10:00:59 2026 GMT
            Not After : Feb 10 10:00:59 2026 GMT
        Subject: CN=5a5d4de9633a4e34977b1930c6add2dd7bfa9635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:08:64:d0:b1:db:37:11:81:70:44:93:e5:
                    44:f2:65:62:c3:2e:5a:b9:f1:bc:a4:c2:ca:9c:a6:
                    8e:20:91:0b:e4:8e:92:d1:89:d4:22:b8:78:e3:a5:
                    1c:65:a6:df:9f:6f:b5:17:f1:ad:9b:de:6d:aa:83:
                    e9:7c:97:f4:32:f8:54:72:fe:93:4e:cf:d5:0a:7d:
                    07:9b:f0:e8:e7:97:8c:26:49:8f:e9:b6:e6:2d:95:
                    63:e3:c8:f6:5c:86:b4:bb:71:21:41:b8:55:44:bd:
                    70:c3:e0:8f:92:37:66:03:23:69:46:5a:cc:93:d2:
                    fd:04:c0:05:66:d3:81:ec:0d:f4:90:47:43:eb:06:
                    c9:f5:84:d8:29:21:2f:92:95:67:15:0e:e9:66:a5:
                    4f:35:d4:a5:f2:40:c2:99:25:ee:a0:2d:36:52:60:
                    8e:d0:a9:ac:f8:49:84:1d:86:50:05:82:ba:86:74:
                    c7:33:63:09:52:b1:91:d2:2f:33:f8:c7:76:31:c1:
                    f1:6f:fd:07:78:ce:90:e1:ed:12:7f:ef:bb:f7:79:
                    0b:15:e8:ec:7b:50:cd:e8:a5:4c:bf:32:09:f4:d6:
                    cc:8c:3a:4a:24:69:f0:3e:09:f4:b7:ab:e4:20:f4:
                    5f:57:16:55:f2:ba:54:0d:92:9b:de:e9:41:6e:9c:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5D:4D:E9:63:3A:4E:34:97:7B:19:30:C6:AD:D2:DD:7B:FA:96:35
            X509v3 Authority Key Identifier:
                keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:17:19:93:47:cc:f7:e3:81:da:ba:75:4c:b5:3d:3a:40:
         fa:0f:a9:bf:38:9f:cd:2f:b7:f3:0d:37:c3:5c:6e:b7:04:b7:
         f3:73:8f:3f:dd:61:02:58:5e:5d:27:cd:56:39:73:db:0b:9e:
         07:e8:25:dc:f9:8f:f7:e5:8a:66:68:b4:8b:2b:39:f5:07:5b:
         3a:ad:7a:a6:8f:79:19:f6:b5:bd:59:46:92:27:d4:33:7d:55:
         73:8d:46:a3:53:09:f0:17:0d:31:f4:96:ac:3d:b3:a6:ee:77:
         32:ba:d4:df:c3:3a:64:13:77:47:94:50:15:81:77:f1:fb:e5:
         f5:7e:d3:a0:93:0e:ef:96:53:8c:64:d6:56:94:fc:e5:fa:47:
         88:87:a9:ba:d9:db:2a:c7:ea:0f:f5:28:0a:56:32:40:fc:c9:
         2e:a9:0f:4c:d2:c6:f3:f7:df:02:5d:9d:af:9e:d5:bf:5d:58:
         34:cd:a4:a6:de:12:9e:96:da:35:fd:ca:a1:5c:13:2b:3a:73:
         05:66:f6:7c:13:a8:36:77:04:f3:34:49:c8:b3:46:c1:ac:bb:
         b1:10:39:66:63:ca:18:75:ba:69:f6:43:49:29:e1:4b:95:c1:
         ba:9d:60:1f:40:32:c6:7c:18:d9:7f:38:73:44:56:70:66:c5:
         d2:30:3a:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2OdfcNTqgsqnTg0cs7INMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmM2YTYwNDIwM2UxOWJkMjM2YzBlMzY0MWFlNjk2NDRk
NGFhNzQwHhcNMjYwMjA5MTAwMDU5WhcNMjYwMjEwMTAwMDU5WjAzMTEwLwYDVQQD
Eyg1YTVkNGRlOTYzM2E0ZTM0OTc3YjE5MzBjNmFkZDJkZDdiZmE5NjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO4IZNCx2zcRgXBEk+VE8mViwy5a
ufG8pMLKnKaOIJEL5I6S0YnUIrh446UcZabfn2+1F/Gtm95tqoPpfJf0MvhUcv6T
Ts/VCn0Hm/Do55eMJkmP6bbmLZVj48j2XIa0u3EhQbhVRL1ww+CPkjdmAyNpRlrM
k9L9BMAFZtOB7A30kEdD6wbJ9YTYKSEvkpVnFQ7pZqVPNdSl8kDCmSXuoC02UmCO
0Kms+EmEHYZQBYK6hnTHM2MJUrGR0i8z+Md2McHxb/0HeM6Q4e0Sf++793kLFejs
e1DN6KVMvzIJ9NbMjDpKJGnwPgn0t6vkIPRfVxZV8rpUDZKb3ulBbpxnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpdTeljOk40l3sZMMat0t17+pY1MB8GA1UdIwQY
MBaAFP5samBCA+Gb0jbA42Qa5pZE1Kp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMWFjZWEtY2E3Ni00YTcyLWJjNzMt
MzE4NjM2YzRkYzg2LzEvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wMWFjZWEtY2E3Ni00YTcyLWJjNzMtMzE4NjM2YzRkYzg2
LzEvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZwXGZNH
zPfjgdq6dUy1PTpA+g+pvzifzS+38w03w1xutwS383OPP91hAlheXSfNVjlz2wue
B+gl3PmP9+WKZmi0iys59QdbOq16po95Gfa1vVlGkifUM31Vc41Go1MJ8BcNMfSW
rD2zpu53MrrU38M6ZBN3R5RQFYF38fvl9X7ToJMO75ZTjGTWVpT85fpHiIeputnb
KsfqD/UoClYyQPzJLqkPTNLG8/ffAl2dr57Vv11YNM2kpt4SnpbaNf3KoVwTKzpz
BWb2fBOoNncE8zRJyLNGway7sRA5ZmPKGHW6afZDSSnhS5XBup1gH0AyxnwY2X84
c0RWcGbF0jA6yQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:47 2026 by rpki-client