This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File:                     _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier:          9sjI3OtrotRGpneFmfg6nTu2Qbky4kWYMTAq3FWkdx4=
Subject key identifier:   A0:80:A9:0B:91:44:34:EA:B9:0B:1D:31:5B:0A:59:28:5F:D6:9F:10
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer:       /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial:       019C420F9367C620D3E7FE058AFF6ED7FC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number:          1505
Signing time:             Mon 09 Feb 2026 11:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:42 +0000
Files and hashes:         1: OBjM2iKRMxSjqa98ychsixD6X5g.roa (hash: q2aIFop5k0Cp3GYeaHHvGFWE530UcdAx8s7zzr0tPgM=)
                          2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: YjtWXD9VdzL5tQ/n6HDilMK4Fziew7MoJCxVQGrmMhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:93:67:c6:20:d3:e7:fe:05:8a:ff:6e:d7:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
        Validity
            Not Before: Feb  9 11:00:42 2026 GMT
            Not After : Feb 10 11:00:42 2026 GMT
        Subject: CN=a080a90b914434eab90b1d315b0a59285fd69f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:e0:62:87:61:d2:49:45:15:4d:6c:7b:19:
                    c1:a0:73:f4:39:51:c9:aa:53:2a:d6:53:58:46:c5:
                    54:88:a8:a0:cf:33:dc:5b:51:cb:31:da:da:59:47:
                    36:93:da:09:b2:ed:64:5f:35:f6:04:10:60:d8:49:
                    a5:d8:4a:d0:c5:1e:45:e0:bc:5e:a8:67:a2:52:a2:
                    10:bc:ab:e8:90:86:ca:23:f1:df:6c:92:4c:ed:b2:
                    c4:de:93:56:ca:9e:ce:f8:8f:55:b3:4d:69:2d:cd:
                    fb:da:f4:14:7c:e5:02:56:10:f1:ce:d3:07:2d:ff:
                    26:df:87:93:e5:21:cb:d1:ea:05:5d:50:bb:d7:d9:
                    1c:86:c4:ae:c9:c7:1e:ac:d4:8b:69:09:55:34:9f:
                    97:72:56:73:16:24:b7:4b:5e:66:5b:a2:c7:33:31:
                    5b:58:f2:b8:c2:8a:aa:88:e2:ad:49:83:60:df:1f:
                    a2:70:44:05:be:16:7d:6f:09:5d:11:49:27:89:93:
                    74:55:c9:21:27:5e:ba:9b:5e:50:16:41:51:2b:87:
                    bb:65:b0:06:01:23:59:41:e6:c4:4e:1c:b1:2a:53:
                    ab:e2:3c:eb:83:7f:86:38:f8:33:9f:97:20:55:a6:
                    0f:20:50:f2:61:84:99:c9:d2:84:0d:e7:4d:4c:b2:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:80:A9:0B:91:44:34:EA:B9:0B:1D:31:5B:0A:59:28:5F:D6:9F:10
            X509v3 Authority Key Identifier:
                keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:a4:3c:35:64:4b:20:d1:cf:01:ae:e0:36:a8:77:9a:9d:
         ec:23:89:b5:8d:dc:fa:71:87:fc:60:14:8e:cf:32:b0:ac:d1:
         e6:43:37:af:f8:22:bb:70:40:f8:6d:b1:16:e3:0c:50:d5:4f:
         89:f8:3e:a4:87:76:89:d1:1a:02:8c:b6:51:4e:3f:98:1c:1d:
         b3:16:c6:c0:8f:6b:9c:62:f3:bd:99:6d:79:06:b3:63:ff:73:
         bc:74:99:04:9a:53:6a:c2:73:7d:b4:09:e4:f4:41:24:15:3c:
         4c:40:12:f4:ba:49:fd:c2:98:8c:bd:6b:1b:1a:f8:dd:9e:d4:
         96:d2:a1:f3:ab:fa:30:8c:22:b7:30:f5:84:22:14:bb:ad:b0:
         98:8e:4a:cf:9e:7d:92:d8:30:a3:b0:1b:6d:6a:8e:68:c1:82:
         79:df:89:e4:69:f2:a6:19:9e:1b:c0:46:52:fd:c8:ee:da:c6:
         e2:87:38:93:63:f2:92:8d:45:63:85:ab:f8:3f:b6:6f:ed:29:
         e2:db:a6:43:4b:69:af:69:e6:c2:57:20:c8:d3:5d:fc:0a:f5:
         25:e4:2d:e5:f7:c0:52:71:93:30:d1:52:e2:88:16:8d:bd:39:
         77:af:9a:d9:c7:cc:79:80:4e:31:c4:56:28:82:76:cd:c7:ab:
         7f:68:71:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD5NnxiDT5/4Fiv9u1/wJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMDE3Zjg3ODQzMmIyZmUzMWY1ODE1M2I0NGE4MTY1OWQ1
MGJhMjAwHhcNMjYwMjA5MTEwMDQyWhcNMjYwMjEwMTEwMDQyWjAzMTEwLwYDVQQD
EyhhMDgwYTkwYjkxNDQzNGVhYjkwYjFkMzE1YjBhNTkyODVmZDY5ZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46rgYodh0klFFU1sexnBoHP0OVHJ
qlMq1lNYRsVUiKigzzPcW1HLMdraWUc2k9oJsu1kXzX2BBBg2Eml2ErQxR5F4Lxe
qGeiUqIQvKvokIbKI/HfbJJM7bLE3pNWyp7O+I9Vs01pLc372vQUfOUCVhDxztMH
Lf8m34eT5SHL0eoFXVC719kchsSuyccerNSLaQlVNJ+XclZzFiS3S15mW6LHMzFb
WPK4woqqiOKtSYNg3x+icEQFvhZ9bwldEUkniZN0VckhJ166m15QFkFRK4e7ZbAG
ASNZQebEThyxKlOr4jzrg3+GOPgzn5cgVaYPIFDyYYSZydKEDedNTLKVeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCAqQuRRDTquQsdMVsKWShf1p8QMB8GA1UdIwQY
MBaAFP8Bf4eEMrL+MfWBU7RKgWWdULogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3dGX2g0UXlzdjR4OVlGVHRFcUJaWjFRdWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YTRmZmItMDI4OS00NjZjLWEyZjUt
MzAyMDc3NzNmNzYwLzEvX3dGX2g0UXlzdjR4OVlGVHRFcUJaWjFRdWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YTRmZmItMDI4OS00NjZjLWEyZjUtMzAyMDc3NzNmNzYw
LzEvX3dGX2g0UXlzdjR4OVlGVHRFcUJaWjFRdWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+ykPDVk
SyDRzwGu4Daod5qd7COJtY3c+nGH/GAUjs8ysKzR5kM3r/giu3BA+G2xFuMMUNVP
ifg+pId2idEaAoy2UU4/mBwdsxbGwI9rnGLzvZlteQazY/9zvHSZBJpTasJzfbQJ
5PRBJBU8TEAS9LpJ/cKYjL1rGxr43Z7UltKh86v6MIwitzD1hCIUu62wmI5Kz559
ktgwo7AbbWqOaMGCed+J5GnyphmeG8BGUv3I7trG4oc4k2Pyko1FY4Wr+D+2b+0p
4tumQ0tpr2nmwlcgyNNd/Ar1JeQt5ffAUnGTMNFS4ogWjb05d6+a2cfMeYBOMcRW
KIJ2zcerf2hxVg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:38 2026 by rpki-client