This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
File:                     rfjUKjroBc6WqpT66fW0QG_0VZk.mft (raw, json)
Hash identifier:          ebWZwi0I66z/LIey37dMfl1eKks6kda6y6hluqTLC2Y=
Subject key identifier:   6D:7F:29:99:7A:1A:C2:00:B7:79:CD:A6:C6:BC:E7:83:8B:E6:71:AF
Authority key identifier: AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
Certificate issuer:       /CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Certificate serial:       019C41D84D963E07F978EC5178DBFE8A6F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
Manifest number:          0576
Signing time:             Mon 09 Feb 2026 10:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:20 +0000
Files and hashes:         1: rfjUKjroBc6WqpT66fW0QG_0VZk.crl (hash: /3JdVqzLVEAwDw9vQOQH0ruQGuAq151fW6FDHULMPsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:4d:96:3e:07:f9:78:ec:51:78:db:fe:8a:6f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
        Validity
            Not Before: Feb  9 10:00:20 2026 GMT
            Not After : Feb 10 10:00:20 2026 GMT
        Subject: CN=6d7f29997a1ac200b779cda6c6bce7838be671af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:e0:51:b8:44:d7:dd:2d:61:63:91:bb:64:
                    fa:96:7e:9c:ed:4e:4d:7e:43:cb:41:65:14:eb:7e:
                    b5:7e:7e:c1:08:79:23:d8:06:8f:05:aa:ae:15:7f:
                    6e:94:fa:25:22:b6:b7:9f:32:75:d8:e9:d7:75:0a:
                    8f:3c:ea:ff:dc:e8:5e:b4:0d:4f:42:54:a8:02:0d:
                    40:f4:a8:dc:c1:30:bc:83:32:95:c1:9a:86:d4:e4:
                    1a:f5:73:92:57:50:69:84:39:9a:5a:1b:78:bd:df:
                    09:76:96:54:18:30:0e:a8:87:78:8e:f8:1c:a7:6f:
                    c6:1d:66:09:42:c3:07:1c:b6:78:47:44:e8:84:03:
                    14:09:6b:f2:5d:53:61:84:6a:86:19:12:3c:ae:af:
                    ca:66:5e:3a:b0:00:43:02:59:d9:95:55:06:c1:56:
                    de:62:a2:e2:0f:87:1b:64:c2:07:0e:a4:e6:69:2a:
                    b5:08:53:24:81:bc:c5:b7:0c:fc:e2:f1:81:f9:04:
                    9e:33:85:4e:a8:78:8a:9b:e0:26:01:bf:05:75:4f:
                    eb:a6:64:9c:48:ac:a4:3f:60:15:61:9b:3c:94:03:
                    10:52:47:f7:9a:d2:0e:96:77:16:6c:6b:56:d6:34:
                    9f:33:ef:ba:6c:ce:89:4c:0a:2b:8a:c2:15:2c:14:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7F:29:99:7A:1A:C2:00:B7:79:CD:A6:C6:BC:E7:83:8B:E6:71:AF
            X509v3 Authority Key Identifier:
                keyid:AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:b8:63:e8:e8:de:aa:7d:97:fa:b3:b0:5c:ff:16:1f:53:
         1c:72:aa:6f:59:f3:6d:20:e1:57:61:a5:bc:a2:7a:52:69:8f:
         ed:9b:41:80:c2:06:ee:e9:3a:40:7a:1c:c2:c6:77:61:f4:dc:
         ee:be:4d:1b:21:88:1b:1c:91:39:39:d9:4b:76:fb:6d:bd:2a:
         ad:73:92:8e:86:0e:f9:64:a0:eb:b0:66:4c:5d:54:d5:55:46:
         62:2f:08:ed:b8:32:0f:c4:5f:66:54:17:f8:dd:d5:a2:6e:9a:
         55:3f:5f:55:09:ad:18:41:94:44:13:bf:df:b9:f5:04:ad:a6:
         9c:19:60:6d:3a:77:bb:d4:99:54:ec:35:44:96:0f:dc:6f:0c:
         b7:47:70:95:21:f4:0f:b6:1c:5f:cb:dd:4e:53:54:73:8c:0b:
         1f:6e:d5:5e:e6:45:69:ef:02:50:d8:e1:c7:9c:3e:7d:44:f9:
         78:be:27:14:9d:95:1f:0e:e0:97:81:a5:2f:6c:84:7e:e2:8e:
         ed:17:81:24:db:52:95:25:77:ca:e0:92:87:73:40:6e:e2:1b:
         93:e2:6b:21:56:03:c6:d3:fa:ed:d5:b4:9e:6e:c0:d7:b2:95:
         14:51:ff:85:a1:d8:41:db:e0:e9:c7:e4:14:58:82:e7:f0:a6:
         06:69:be:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2E2WPgf5eOxReNv+im98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjhkNDJhM2FlODA1Y2U5NmFhOTRmYWU5ZjViNDQwNmZm
NDU1OTkwHhcNMjYwMjA5MTAwMDIwWhcNMjYwMjEwMTAwMDIwWjAzMTEwLwYDVQQD
Eyg2ZDdmMjk5OTdhMWFjMjAwYjc3OWNkYTZjNmJjZTc4MzhiZTY3MWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxvgUbhE190tYWORu2T6ln6c7U5N
fkPLQWUU6361fn7BCHkj2AaPBaquFX9ulPolIra3nzJ12OnXdQqPPOr/3OhetA1P
QlSoAg1A9KjcwTC8gzKVwZqG1OQa9XOSV1BphDmaWht4vd8JdpZUGDAOqId4jvgc
p2/GHWYJQsMHHLZ4R0TohAMUCWvyXVNhhGqGGRI8rq/KZl46sABDAlnZlVUGwVbe
YqLiD4cbZMIHDqTmaSq1CFMkgbzFtwz84vGB+QSeM4VOqHiKm+AmAb8FdU/rpmSc
SKykP2AVYZs8lAMQUkf3mtIOlncWbGtW1jSfM++6bM6JTAorisIVLBTsYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1/KZl6GsIAt3nNpsa854OL5nGvMB8GA1UdIwQY
MBaAFK341Co66AXOlqqU+un1tEBv9FWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZqVUtqcm9CYzZXcXBUNjZmVzBRR18wVlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81YjIzMDUtOTdmZC00NzMwLWIxYTAt
YTc3OWI5OTNkZjU4LzEvcmZqVUtqcm9CYzZXcXBUNjZmVzBRR18wVlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81YjIzMDUtOTdmZC00NzMwLWIxYTAtYTc3OWI5OTNkZjU4
LzEvcmZqVUtqcm9CYzZXcXBUNjZmVzBRR18wVlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1C4Y+jo
3qp9l/qzsFz/Fh9THHKqb1nzbSDhV2GlvKJ6UmmP7ZtBgMIG7uk6QHocwsZ3YfTc
7r5NGyGIGxyROTnZS3b7bb0qrXOSjoYO+WSg67BmTF1U1VVGYi8I7bgyD8RfZlQX
+N3Vom6aVT9fVQmtGEGURBO/37n1BK2mnBlgbTp3u9SZVOw1RJYP3G8Mt0dwlSH0
D7YcX8vdTlNUc4wLH27VXuZFae8CUNjhx5w+fUT5eL4nFJ2VHw7gl4GlL2yEfuKO
7ReBJNtSlSV3yuCSh3NAbuIbk+JrIVYDxtP67dW0nm7A17KVFFH/haHYQdvg6cfk
FFiC5/CmBmm+7g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:16 2026 by rpki-client