This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
File:                     bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft (raw, json)
Hash identifier:          mxZSVhnHYUb4gU4NohSQ2b3nHMZUSa9cLIV5e2963JY=
Subject key identifier:   1C:17:AB:02:FC:52:6E:01:C7:D6:A5:3D:3B:61:8D:44:8F:78:05:90
Authority key identifier: 6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
Certificate issuer:       /CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Certificate serial:       019C40FD93B84E78C0CCA8352EE3B0144C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
Manifest number:          159E
Signing time:             Mon 09 Feb 2026 06:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:25 +0000
Files and hashes:         1: ZQDRmVSAS-VQjlQwPz6YndLHMAk.roa (hash: HlwMeTdyXew+ZhiKaF8HUzGdDR+H+dDeb0Vxy+YC2Vo=)
                          2: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl (hash: Ia0lf48KcpTuyz1qQ5VupaLbzbAuN8xR6XKDy/e7+Z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:93:b8:4e:78:c0:cc:a8:35:2e:e3:b0:14:4c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
        Validity
            Not Before: Feb  9 06:01:25 2026 GMT
            Not After : Feb 10 06:01:25 2026 GMT
        Subject: CN=1c17ab02fc526e01c7d6a53d3b618d448f780590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:08:6e:91:d2:b5:3b:f2:e7:bf:13:68:00:
                    0d:4d:f0:d9:57:0f:44:86:b1:53:e0:7a:c1:6c:28:
                    d6:30:e6:65:1a:6f:5f:31:8f:76:6d:79:9a:0a:19:
                    d3:ae:ec:26:a9:6f:02:5f:fc:e9:e5:2f:7a:b1:85:
                    0d:e5:66:0c:0c:6b:8e:0a:ef:e6:bb:de:26:a0:e9:
                    11:69:0b:b3:a0:9b:52:e0:28:aa:29:86:85:80:00:
                    17:96:54:97:d1:85:41:65:4b:16:74:71:dc:e7:8a:
                    60:95:7e:c2:81:84:46:9c:b0:d0:42:e7:a9:44:31:
                    a9:b7:a5:9b:4d:ce:5d:65:98:14:99:10:05:5e:13:
                    a5:f1:9d:31:c1:15:d1:bd:b6:38:b8:f5:70:ef:70:
                    2e:9a:c5:6e:a5:37:58:ba:18:05:f0:73:b4:f2:d5:
                    2d:8b:95:ed:b5:74:08:59:ee:ba:83:55:cf:22:c9:
                    c4:d7:62:f3:a0:23:28:2e:5b:82:c5:ff:94:61:2b:
                    77:79:d0:e7:c5:ea:a7:61:9c:88:da:21:10:b5:80:
                    70:4f:c3:5d:a0:c9:59:f9:ef:5d:65:db:23:f5:19:
                    69:98:27:9e:2f:97:d6:8b:21:29:67:d2:81:ef:3a:
                    10:ee:2b:79:f8:97:08:bb:46:86:b2:19:74:cd:52:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:17:AB:02:FC:52:6E:01:C7:D6:A5:3D:3B:61:8D:44:8F:78:05:90
            X509v3 Authority Key Identifier:
                keyid:6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:4a:cc:cb:e5:5c:50:e4:96:87:1a:01:f6:a4:54:d5:38:92:
         a0:14:50:14:19:24:d4:e8:b2:df:10:e0:1b:8f:c9:5b:14:05:
         58:d7:76:51:77:84:bd:4a:6c:4c:d8:a2:c3:cd:3f:16:38:dc:
         4c:7d:1c:16:b2:23:61:1a:d7:74:01:59:b9:e5:de:06:f5:24:
         e3:fb:c4:73:e6:a8:57:ad:d8:c3:6c:fd:e3:97:dd:86:28:84:
         b3:85:e9:21:70:c4:99:49:e2:90:66:db:6d:00:6b:1c:11:1d:
         df:c5:dc:d7:f7:38:5b:29:b2:6b:65:24:77:c9:c9:ee:53:9b:
         10:d0:7a:c5:85:0e:2a:a4:66:f5:dd:3f:05:fc:3a:58:f5:ad:
         02:be:75:a2:d2:f1:7a:a7:bd:21:e5:a8:05:51:03:45:34:40:
         f2:b2:9e:0b:aa:44:a4:5f:f9:aa:73:68:72:43:cc:8c:a1:3c:
         74:5b:75:0b:0a:0f:9a:05:a5:df:fd:40:d3:96:46:d6:73:64:
         28:58:47:29:11:53:45:ac:ea:80:1c:b0:ed:21:0b:77:33:99:
         61:0a:e4:12:38:4a:ef:15:79:57:fc:7f:36:75:35:67:90:08:
         15:dd:63:7e:e8:3c:2a:8e:c3:1f:dc:31:fe:e3:06:66:40:ed:
         b8:8e:63:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/ZO4TnjAzKg1LuOwFEw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOGUwZTdlODY3NzViNDE1ZDNkNTc4MGNlNGNmZWMwYzg1
OTE4OWMwHhcNMjYwMjA5MDYwMTI1WhcNMjYwMjEwMDYwMTI1WjAzMTEwLwYDVQQD
EygxYzE3YWIwMmZjNTI2ZTAxYzdkNmE1M2QzYjYxOGQ0NDhmNzgwNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuAIbpHStTvy578TaAANTfDZVw9E
hrFT4HrBbCjWMOZlGm9fMY92bXmaChnTruwmqW8CX/zp5S96sYUN5WYMDGuOCu/m
u94moOkRaQuzoJtS4CiqKYaFgAAXllSX0YVBZUsWdHHc54pglX7CgYRGnLDQQuep
RDGpt6WbTc5dZZgUmRAFXhOl8Z0xwRXRvbY4uPVw73AumsVupTdYuhgF8HO08tUt
i5XttXQIWe66g1XPIsnE12LzoCMoLluCxf+UYSt3edDnxeqnYZyI2iEQtYBwT8Nd
oMlZ+e9dZdsj9RlpmCeeL5fWiyEpZ9KB7zoQ7it5+JcIu0aGshl0zVIOGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwXqwL8Um4Bx9alPTthjUSPeAWQMB8GA1UdIwQY
MBaAFG2ODn6Gd1tBXT1XgM5M/sDIWRicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wNTYyMzUtZGYzNi00ODcwLTg3NDYt
YWU1ZjRjMTJkZTc5LzEvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wNTYyMzUtZGYzNi00ODcwLTg3NDYtYWU1ZjRjMTJkZTc5
LzEvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy0rMy+Vc
UOSWhxoB9qRU1TiSoBRQFBkk1Oiy3xDgG4/JWxQFWNd2UXeEvUpsTNiiw80/Fjjc
TH0cFrIjYRrXdAFZueXeBvUk4/vEc+aoV63Yw2z945fdhiiEs4XpIXDEmUnikGbb
bQBrHBEd38Xc1/c4Wymya2Ukd8nJ7lObENB6xYUOKqRm9d0/Bfw6WPWtAr51otLx
eqe9IeWoBVEDRTRA8rKeC6pEpF/5qnNockPMjKE8dFt1CwoPmgWl3/1A05ZG1nNk
KFhHKRFTRazqgByw7SELdzOZYQrkEjhK7xV5V/x/NnU1Z5AIFd1jfug8Ko7DH9wx
/uMGZkDtuI5jpg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:20 2026 by rpki-client