This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
File:                     VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json)
Hash identifier:          6Do6YaXJ7/1oCOQTU+qfub55GlSdYkHZCBQZutXbF2M=
Subject key identifier:   AC:53:4D:BD:3F:41:0E:80:8C:96:A5:17:96:D9:26:61:94:E7:56:F3
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       019C435948057244456D550B8E716732E698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
Manifest number:          0C68
Signing time:             Mon 09 Feb 2026 17:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:50 +0000
Files and hashes:         1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=)
                          2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=)
                          3: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=)
                          4: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=)
                          5: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=)
                          6: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=)
                          7: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=)
                          8: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=)
                          9: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: EsQooruZhBQKXg42pGTR4nTH1hwthp1XUQu7uy8zHs4=)
                          10: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (hash: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=)
                          11: cCcoJczTWU7z14x2e422NZsz480.roa (hash: bBa0oWEppS8B1jHvMKDUcr46ilH8W6XeewKjKspDnPQ=)
                          12: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=)
                          13: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=)
                          14: kD9r2BSjKFazEYZ-CJU10Fned7o.roa (hash: uFgbV/8h9jMNryiWR5QfYdbYD5HwXj0XKBD49uDOBMI=)
                          15: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=)
                          16: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=)
                          17: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:48:05:72:44:45:6d:55:0b:8e:71:67:32:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Feb  9 17:00:50 2026 GMT
            Not After : Feb 10 17:00:50 2026 GMT
        Subject: CN=ac534dbd3f410e808c96a51796d9266194e756f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:a7:f5:44:32:17:27:fd:01:4e:b0:0e:bf:
                    3e:58:cd:94:a4:31:df:3f:54:7d:c7:23:34:4f:b6:
                    fc:71:7a:1e:d8:0a:75:4c:e7:cb:7e:ed:21:f8:ef:
                    da:c1:96:7f:7b:d1:8a:1b:dc:53:8b:4c:79:b2:7e:
                    0c:a3:76:e4:15:3f:f6:ae:39:5f:29:4a:4a:7a:21:
                    dd:4f:1d:ca:53:ee:02:ce:62:ff:d5:b3:6a:6e:54:
                    d8:e3:ae:3d:da:29:8d:1f:f8:98:a3:9e:ea:9d:1d:
                    56:6e:3f:a7:47:dd:5b:b1:67:21:c6:81:d2:16:9a:
                    09:1a:b4:eb:29:a3:b6:d9:3f:61:80:54:91:3a:e1:
                    93:27:1a:fe:0c:d6:3f:2c:fa:66:0a:88:db:38:27:
                    dd:fc:42:b6:e9:67:9a:ad:02:90:4f:23:81:b4:0f:
                    d8:3c:2a:70:1e:42:b9:8d:52:ce:da:43:1d:5e:9d:
                    d7:06:c7:b7:63:a6:2c:c7:29:85:f9:f7:b0:5d:13:
                    7a:f6:87:5d:e9:01:4f:90:8b:dd:f2:2b:0e:74:71:
                    35:a7:86:19:07:31:08:3f:05:08:a6:b5:a2:45:1e:
                    93:05:15:c8:82:19:c3:52:39:b7:9c:10:fe:54:64:
                    d2:34:ca:77:e7:ea:c6:73:d3:f5:56:fb:ee:34:65:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:53:4D:BD:3F:41:0E:80:8C:96:A5:17:96:D9:26:61:94:E7:56:F3
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c7:50:9a:c5:24:f6:9c:81:32:59:a6:88:65:44:91:58:a0:
         2b:2f:97:72:8c:81:b3:4a:52:9d:2e:60:b6:de:1f:41:9e:a1:
         85:96:47:6d:0e:f4:46:9c:63:13:25:39:06:c6:af:27:2d:b2:
         b6:74:b0:fd:e4:60:4e:33:16:ca:7a:5b:d8:64:89:a0:c9:9e:
         ff:69:4a:de:ed:52:e6:d1:51:40:7f:bc:85:85:36:c9:86:ad:
         75:c5:4e:bc:46:f9:2e:9a:15:f7:a8:18:77:ed:e6:9f:74:2c:
         bb:dd:62:fd:45:76:c5:1d:d1:ac:95:f0:9e:6c:f4:b7:cc:1f:
         84:f1:d4:e9:22:24:d4:bf:39:d8:92:77:e9:bc:8d:ac:85:e8:
         f7:1e:0c:71:29:07:b8:bf:6b:ee:d4:5a:9e:90:5a:c7:40:ae:
         09:e1:11:87:10:f4:5e:85:1e:33:3f:52:6c:d1:b2:67:97:bc:
         31:81:7f:19:2f:22:b9:3a:fe:96:55:7d:39:8a:4a:dc:ba:06:
         99:34:e5:85:0a:c6:09:36:ad:19:6a:9e:2f:19:ff:51:41:95:
         0d:23:3c:2a:47:ec:e8:2a:bf:38:c6:ab:9d:8a:6b:b0:1b:eb:
         77:11:9b:bf:5a:22:e1:88:59:2b:83:80:0a:f2:1d:e7:e7:c3:
         cc:9c:d6:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWUgFckRFbVULjnFnMuaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl
NjdiOTcwHhcNMjYwMjA5MTcwMDUwWhcNMjYwMjEwMTcwMDUwWjAzMTEwLwYDVQQD
EyhhYzUzNGRiZDNmNDEwZTgwOGM5NmE1MTc5NmQ5MjY2MTk0ZTc1NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArein9UQyFyf9AU6wDr8+WM2UpDHf
P1R9xyM0T7b8cXoe2Ap1TOfLfu0h+O/awZZ/e9GKG9xTi0x5sn4Mo3bkFT/2rjlf
KUpKeiHdTx3KU+4CzmL/1bNqblTY46492imNH/iYo57qnR1Wbj+nR91bsWchxoHS
FpoJGrTrKaO22T9hgFSROuGTJxr+DNY/LPpmCojbOCfd/EK26WearQKQTyOBtA/Y
PCpwHkK5jVLO2kMdXp3XBse3Y6YsxymF+fewXRN69odd6QFPkIvd8isOdHE1p4YZ
BzEIPwUIprWiRR6TBRXIghnDUjm3nBD+VGTSNMp35+rGc9P1VvvuNGULgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxTTb0/QQ6AjJalF5bZJmGU51bzMB8GA1UdIwQY
MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt
ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4
LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8dQmsUk
9pyBMlmmiGVEkVigKy+XcoyBs0pSnS5gtt4fQZ6hhZZHbQ70RpxjEyU5BsavJy2y
tnSw/eRgTjMWynpb2GSJoMme/2lK3u1S5tFRQH+8hYU2yYatdcVOvEb5LpoV96gY
d+3mn3Qsu91i/UV2xR3RrJXwnmz0t8wfhPHU6SIk1L852JJ36byNrIXo9x4McSkH
uL9r7tRanpBax0CuCeERhxD0XoUeMz9SbNGyZ5e8MYF/GS8iuTr+llV9OYpK3LoG
mTTlhQrGCTatGWqeLxn/UUGVDSM8Kkfs6Cq/OMarnYprsBvrdxGbv1oi4YhZK4OA
CvId5+fDzJzWXg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:51:41 2026 by rpki-client