This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File:                     A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier:          bVfWe4yIZtHFizIjKBncPbyyzIk0LVC8oN/ZEuhxe18=
Subject key identifier:   BE:88:08:D1:19:D8:10:7E:A3:03:27:97:1C:47:61:67:23:53:35:B6
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer:       /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial:       019C42EB82C7D72516A59315EC72A9366C00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number:          0684
Signing time:             Mon 09 Feb 2026 15:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:56 +0000
Files and hashes:         1: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: 8il5YtgZB3vR/+bSacVWr6nhm3g0XNDWgrfsJecZOow=)
                          2: INMcxslKzA9lQLIaiuC7po-TrrY.roa (hash: 9IPb8qBlhTZBbDZdvzgQp75cg/Es1qM9VUEr2AAlDW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:82:c7:d7:25:16:a5:93:15:ec:72:a9:36:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
        Validity
            Not Before: Feb  9 15:00:56 2026 GMT
            Not After : Feb 10 15:00:56 2026 GMT
        Subject: CN=be8808d119d8107ea30327971c476167235335b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:f2:7a:d4:f3:13:9a:45:f3:2a:56:0b:ce:
                    b7:ce:39:d3:d2:05:d8:39:85:78:44:46:07:a3:09:
                    4d:30:e5:ae:cd:07:c8:8f:aa:57:1e:39:fa:e1:15:
                    73:a4:f8:dc:12:08:4c:9a:d7:ed:ac:3c:e0:6c:4f:
                    e3:15:be:09:4b:bd:7b:4f:c8:7c:13:b8:d5:df:46:
                    da:91:a5:b9:78:a1:5f:a4:38:ce:4f:d1:24:0b:98:
                    63:40:36:22:ea:39:9a:8d:93:78:a8:d9:d7:a6:34:
                    ec:bd:1e:5f:57:d8:15:b5:d2:d3:5d:bc:d4:52:5b:
                    55:de:17:c7:28:e4:95:93:b3:34:fb:66:09:c5:15:
                    2e:14:61:f3:76:37:0f:8d:48:b1:fc:94:d8:2c:68:
                    20:93:05:3c:6a:b6:33:a1:e3:75:9a:19:69:6d:84:
                    5b:5e:f9:d3:70:fc:6d:b3:56:3d:2a:8a:7d:4f:e3:
                    ce:28:0c:9d:d3:88:77:7a:fa:d2:9e:dd:a9:94:d9:
                    58:5c:28:61:ff:84:fa:89:e7:33:7f:fc:7b:76:cc:
                    b6:26:9d:67:36:0e:49:79:68:b5:c3:81:a2:c8:26:
                    85:63:b5:7a:59:74:d0:d7:1e:78:8d:08:9c:d1:33:
                    7a:67:b6:56:87:73:50:61:97:a3:1e:5c:3a:58:00:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:08:D1:19:D8:10:7E:A3:03:27:97:1C:47:61:67:23:53:35:B6
            X509v3 Authority Key Identifier:
                keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:3a:58:38:ab:23:d7:74:6f:a4:6a:a6:b8:76:5a:8b:c0:
         58:f7:2a:04:b5:3d:85:c1:fe:d5:91:47:34:ef:a4:b2:7f:ba:
         ee:85:74:00:8a:26:8f:f2:e9:04:0b:4d:3d:00:07:81:32:b1:
         e6:26:f4:5d:55:d2:05:80:41:e7:d4:e1:e2:55:d4:2f:8d:11:
         00:f0:6b:b1:20:30:1c:c1:d1:dc:a6:dc:4d:ab:8b:76:a4:78:
         07:54:0a:ea:bd:a5:56:6b:f4:22:1b:a1:f4:11:5d:43:0d:6f:
         1b:83:13:3d:c6:61:1e:b8:b3:7b:1a:09:bf:d5:34:35:de:7d:
         ed:97:b6:86:43:62:38:60:21:12:a9:85:63:ea:b4:01:0c:11:
         c9:5b:97:2d:1a:49:d8:00:3c:94:ee:31:ef:76:c6:c5:e3:03:
         ad:68:b9:64:ea:48:ae:65:87:23:63:a5:02:3b:40:21:bf:f0:
         3e:01:85:f7:c0:78:b8:6d:5e:8d:58:8e:de:0e:a1:27:0b:14:
         4e:f7:fe:aa:43:12:1e:09:ec:86:d5:7a:7e:61:fd:d1:0a:b3:
         6b:81:bd:a3:42:17:c1:11:43:ff:6f:0a:75:c4:dd:10:69:56:
         10:67:f6:88:de:1c:33:a7:f4:09:6f:0c:4f:d4:ee:0b:24:ee:
         fa:99:bf:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC64LH1yUWpZMV7HKpNmwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm
MjhjNzcwHhcNMjYwMjA5MTUwMDU2WhcNMjYwMjEwMTUwMDU2WjAzMTEwLwYDVQQD
EyhiZTg4MDhkMTE5ZDgxMDdlYTMwMzI3OTcxYzQ3NjE2NzIzNTMzNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruLyetTzE5pF8ypWC863zjnT0gXY
OYV4REYHowlNMOWuzQfIj6pXHjn64RVzpPjcEghMmtftrDzgbE/jFb4JS717T8h8
E7jV30bakaW5eKFfpDjOT9EkC5hjQDYi6jmajZN4qNnXpjTsvR5fV9gVtdLTXbzU
UltV3hfHKOSVk7M0+2YJxRUuFGHzdjcPjUix/JTYLGggkwU8arYzoeN1mhlpbYRb
XvnTcPxts1Y9Kop9T+POKAyd04h3evrSnt2plNlYXChh/4T6ieczf/x7dsy2Jp1n
Ng5JeWi1w4GiyCaFY7V6WXTQ1x54jQic0TN6Z7ZWh3NQYZejHlw6WAB3fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6ICNEZ2BB+owMnlxxHYWcjUzW2MB8GA1UdIwQY
MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt
MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi
LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7I6WDir
I9d0b6Rqprh2WovAWPcqBLU9hcH+1ZFHNO+ksn+67oV0AIomj/LpBAtNPQAHgTKx
5ib0XVXSBYBB59Th4lXUL40RAPBrsSAwHMHR3KbcTauLdqR4B1QK6r2lVmv0Ihuh
9BFdQw1vG4MTPcZhHrizexoJv9U0Nd597Ze2hkNiOGAhEqmFY+q0AQwRyVuXLRpJ
2AA8lO4x73bGxeMDrWi5ZOpIrmWHI2OlAjtAIb/wPgGF98B4uG1ejViO3g6hJwsU
Tvf+qkMSHgnshtV6fmH90Qqza4G9o0IXwRFD/28KdcTdEGlWEGf2iN4cM6f0CW8M
T9TuCyTu+pm/RQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:59 2026 by rpki-client