This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File:                     bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier:          pvA/5/murOVg6w5Uh/EDWc46epwkJUlCwd229+PjP8Y=
Subject key identifier:   51:41:AA:62:19:B0:34:EF:CE:2C:E3:15:D9:4B:60:DE:EA:F7:48:75
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer:       /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial:       019C41A197EB9A5E0154F106777A69E71502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number:          1766
Signing time:             Mon 09 Feb 2026 09:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:34 +0000
Files and hashes:         1: NJmWkpvnLjr053EcyJcpZ7GQEJw.roa (hash: ilBT0fgXRzjOih9KSBqxwvMO7zW6K4l2Ts8OXGa2cVo=)
                          2: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: OtTuxYCvoI18Zxkb4H9bdSDo1J7qtJUGgAhA5qCmGO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:97:eb:9a:5e:01:54:f1:06:77:7a:69:e7:15:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
        Validity
            Not Before: Feb  9 09:00:34 2026 GMT
            Not After : Feb 10 09:00:34 2026 GMT
        Subject: CN=5141aa6219b034efce2ce315d94b60deeaf74875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:99:21:f5:ea:d9:37:b7:3c:f5:ce:17:f0:
                    7b:91:0f:aa:c9:f4:b1:36:fe:14:83:4c:cf:03:13:
                    70:43:63:80:72:02:ab:38:1b:2f:09:da:01:e1:4c:
                    92:66:aa:70:b4:07:2a:ea:36:75:2c:c6:06:41:10:
                    9d:5d:0e:6e:47:9b:77:ff:46:79:ac:ef:74:7d:38:
                    01:21:3a:3b:83:10:d3:96:cb:6f:8e:37:13:d8:ba:
                    6e:72:6e:a6:2c:5b:ac:06:12:18:77:4c:6e:3d:6a:
                    5e:6d:64:8b:50:f7:b1:ea:a6:91:b1:18:b9:8c:1a:
                    ef:93:78:79:30:0c:7f:c8:d5:ff:01:bc:51:79:8a:
                    23:a7:39:a1:fc:e1:4c:7d:af:05:03:94:a1:ac:ec:
                    3e:29:84:81:a6:a5:f2:f5:0d:ec:bc:6a:f3:42:b5:
                    b4:c1:33:f6:7f:d5:66:fa:d0:ec:bd:c9:6e:f0:62:
                    af:59:3c:b5:6e:e1:d6:23:55:a4:63:30:b8:c0:ab:
                    cc:53:8b:59:dd:80:54:36:47:7d:b4:b5:9c:00:c6:
                    0a:d4:0a:02:42:2c:2e:25:43:f2:6b:ab:90:ce:0d:
                    5a:4e:38:e6:65:1b:02:85:2e:99:35:1c:38:78:d6:
                    0a:0a:0e:78:7c:17:c3:23:f4:91:a4:92:f8:2e:59:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:AA:62:19:B0:34:EF:CE:2C:E3:15:D9:4B:60:DE:EA:F7:48:75
            X509v3 Authority Key Identifier:
                keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:8f:f7:28:8f:1c:bf:c9:2a:2a:dd:b7:ea:1d:88:cc:38:7a:
         1f:7a:1a:d6:d8:2f:05:21:43:7e:07:4f:22:09:09:bc:0a:3a:
         2e:c1:fa:3c:41:7f:03:19:f4:ee:7b:c9:1e:9a:d6:0c:ec:5d:
         56:81:82:90:28:6d:20:33:c3:20:d7:a3:70:01:24:af:63:2f:
         2c:80:84:75:2b:6e:e7:0b:14:c4:c9:bc:fb:ed:6a:9c:83:06:
         45:45:7d:a3:25:04:ed:cf:98:d6:c7:fa:b0:86:5b:28:9d:c9:
         60:05:6d:f1:a6:69:08:6e:9e:b0:d9:f8:58:a6:74:74:ff:b9:
         dc:6f:f4:ef:a2:5d:3e:5c:41:09:5b:20:13:c4:5c:47:fc:6b:
         46:09:82:28:26:05:94:cd:41:8c:d1:6d:4a:07:d2:32:c7:08:
         4d:e4:dc:38:22:62:c7:8e:32:11:03:b0:69:dd:3f:c7:c9:3d:
         5d:32:df:12:93:08:08:b9:e1:be:25:45:a2:97:81:35:b4:9f:
         d1:30:fc:54:47:d6:ae:c1:fe:cc:d3:53:95:5b:93:d4:0a:b5:
         37:a8:a7:13:e1:86:18:ad:75:37:e1:4f:cf:3b:79:7e:e9:e3:
         b1:1e:e4:86:9c:79:7a:b4:d7:52:76:14:de:da:4d:6a:1f:d0:
         f9:45:91:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoZfrml4BVPEGd3pp5xUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYmNiNTdlMmQ1ZTQwNjMwZTE5M2JkNWNlYjE2ZjFlZjE4
NzQzYTMwHhcNMjYwMjA5MDkwMDM0WhcNMjYwMjEwMDkwMDM0WjAzMTEwLwYDVQQD
Eyg1MTQxYWE2MjE5YjAzNGVmY2UyY2UzMTVkOTRiNjBkZWVhZjc0ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIWZIfXq2Te3PPXOF/B7kQ+qyfSx
Nv4Ug0zPAxNwQ2OAcgKrOBsvCdoB4UySZqpwtAcq6jZ1LMYGQRCdXQ5uR5t3/0Z5
rO90fTgBITo7gxDTlstvjjcT2Lpucm6mLFusBhIYd0xuPWpebWSLUPex6qaRsRi5
jBrvk3h5MAx/yNX/AbxReYojpzmh/OFMfa8FA5ShrOw+KYSBpqXy9Q3svGrzQrW0
wTP2f9Vm+tDsvclu8GKvWTy1buHWI1WkYzC4wKvMU4tZ3YBUNkd9tLWcAMYK1AoC
QiwuJUPya6uQzg1aTjjmZRsChS6ZNRw4eNYKCg54fBfDI/SRpJL4LlmNUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFBqmIZsDTvzizjFdlLYN7q90h1MB8GA1UdIwQY
MBaAFG68tX4tXkBjDhk71c6xbx7xh0OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgt
OWFkMThiYTFhM2Q5LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNDVmYTEtNDI5ZC00ZWFmLWIyNzgtOWFkMThiYTFhM2Q5
LzEvYnJ5MWZpMWVRR01PR1R2VnpyRnZIdkdIUTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzY/3KI8c
v8kqKt236h2IzDh6H3oa1tgvBSFDfgdPIgkJvAo6LsH6PEF/Axn07nvJHprWDOxd
VoGCkChtIDPDINejcAEkr2MvLICEdStu5wsUxMm8++1qnIMGRUV9oyUE7c+Y1sf6
sIZbKJ3JYAVt8aZpCG6esNn4WKZ0dP+53G/076JdPlxBCVsgE8RcR/xrRgmCKCYF
lM1BjNFtSgfSMscITeTcOCJix44yEQOwad0/x8k9XTLfEpMICLnhviVFopeBNbSf
0TD8VEfWrsH+zNNTlVuT1Aq1N6inE+GGGK11N+FPzzt5funjsR7khpx5erTXUnYU
3tpNah/Q+UWR8g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:09 2026 by rpki-client