This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          KlojhWrvt6pbH+3g+xghIfC71MPaf1dS083c9jhMqN0=
Subject key identifier:   21:03:75:9D:1D:70:CE:A3:F8:82:07:13:21:A8:2A:A2:6D:C0:52:64
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       019C420F818644F817EC42E8B5D51A90C2EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          0B42
Signing time:             Mon 09 Feb 2026 11:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:38 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: GavL35EV43eD35jlnxI/423hy4A2S4/1038mgmWE2Jw=)
                          2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=)
                          3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=)
                          4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:81:86:44:f8:17:ec:42:e8:b5:d5:1a:90:c2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Feb  9 11:00:38 2026 GMT
            Not After : Feb 10 11:00:38 2026 GMT
        Subject: CN=2103759d1d70cea3f882071321a82aa26dc05264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:f8:ff:51:3b:17:ce:f7:50:aa:a1:0e:70:
                    01:b5:13:22:a0:1e:d2:12:de:3c:d9:da:5f:63:59:
                    e9:6b:d7:4a:5d:27:79:00:52:f4:c1:90:9e:95:58:
                    7b:fb:bb:75:62:a3:05:89:4b:dc:2b:36:5d:23:dc:
                    90:0a:54:86:f9:0f:c2:3c:8b:2a:2e:59:e7:78:45:
                    27:55:c8:51:48:57:99:a8:c7:e0:27:0a:08:84:5d:
                    aa:42:a6:7f:ca:4b:79:cd:09:e4:4f:5a:50:67:56:
                    d8:ba:14:ba:7c:b7:71:88:9e:5a:cb:5a:0d:a6:70:
                    7a:9b:01:57:bb:32:10:f5:49:e2:9a:02:4e:ae:d0:
                    06:b9:51:ee:3b:1c:e0:be:ec:da:e8:98:d0:1e:85:
                    78:49:19:61:66:56:36:34:f8:21:4e:43:21:be:3b:
                    e2:05:ca:b8:3f:fe:55:27:fc:e2:c1:6f:8a:eb:26:
                    d8:0d:07:31:3f:a2:35:98:55:8d:a7:a9:a1:f2:0c:
                    21:13:cb:d2:af:f0:0e:86:35:90:5e:75:9a:f1:4a:
                    69:43:b5:3d:ff:d0:2d:44:11:cb:ee:20:81:97:18:
                    b9:15:d0:af:bc:48:4a:57:33:f2:8f:fd:8c:61:95:
                    2b:a5:c0:ac:ac:aa:1d:cb:ee:e3:87:9f:ce:a7:0f:
                    2d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:03:75:9D:1D:70:CE:A3:F8:82:07:13:21:A8:2A:A2:6D:C0:52:64
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:96:bd:3a:24:16:76:60:0d:d8:bb:7c:6f:5b:98:a1:ae:89:
         ef:b1:b0:5c:09:ff:65:21:ed:be:de:d5:f4:eb:e0:11:1c:05:
         7d:b7:bd:36:32:4b:da:f6:e9:af:57:5a:45:bc:88:a5:17:48:
         0e:30:cc:f2:0c:d4:ac:a8:13:e0:24:50:f4:78:c1:34:75:25:
         90:cd:de:d5:00:19:25:e2:f2:26:e6:a2:0d:40:43:a2:f8:80:
         53:ad:70:53:15:54:b1:4d:a7:bc:ba:e5:e6:9f:82:ef:f5:43:
         26:73:43:f5:e3:16:a9:5a:4b:0a:42:45:0e:03:d4:c8:6c:d0:
         e2:e5:15:71:67:9a:5e:09:aa:61:5a:4f:dd:a4:43:43:5a:7a:
         d9:96:b4:93:1d:02:76:3e:09:8b:5e:14:e3:96:54:9e:e9:11:
         1c:1c:a2:49:97:e5:ae:ce:e7:86:26:65:24:29:12:37:e0:7b:
         58:5e:4a:07:0a:06:e1:a5:15:e3:22:17:45:23:12:97:83:05:
         45:80:49:01:08:b9:ec:a3:43:9f:37:9b:53:d0:a1:46:fc:82:
         20:98:ae:9f:ed:cf:b2:06:6e:3f:b9:1a:b0:8d:88:ee:33:bf:
         35:6d:51:39:ef:30:fe:0b:7f:13:3d:f0:ad:19:72:ed:61:0d:
         00:a3:e1:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD4GGRPgX7ELotdUakMLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw
OWQ3YTIwHhcNMjYwMjA5MTEwMDM4WhcNMjYwMjEwMTEwMDM4WjAzMTEwLwYDVQQD
EygyMTAzNzU5ZDFkNzBjZWEzZjg4MjA3MTMyMWE4MmFhMjZkYzA1MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/D4/1E7F873UKqhDnABtRMioB7S
Et482dpfY1npa9dKXSd5AFL0wZCelVh7+7t1YqMFiUvcKzZdI9yQClSG+Q/CPIsq
LlnneEUnVchRSFeZqMfgJwoIhF2qQqZ/ykt5zQnkT1pQZ1bYuhS6fLdxiJ5ay1oN
pnB6mwFXuzIQ9UnimgJOrtAGuVHuOxzgvuza6JjQHoV4SRlhZlY2NPghTkMhvjvi
Bcq4P/5VJ/ziwW+K6ybYDQcxP6I1mFWNp6mh8gwhE8vSr/AOhjWQXnWa8UppQ7U9
/9AtRBHL7iCBlxi5FdCvvEhKVzPyj/2MYZUrpcCsrKody+7jh5/Opw8towIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEDdZ0dcM6j+IIHEyGoKqJtwFJkMB8GA1UdIwQY
MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt
NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk
LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspa9OiQW
dmAN2Lt8b1uYoa6J77GwXAn/ZSHtvt7V9OvgERwFfbe9NjJL2vbpr1daRbyIpRdI
DjDM8gzUrKgT4CRQ9HjBNHUlkM3e1QAZJeLyJuaiDUBDoviAU61wUxVUsU2nvLrl
5p+C7/VDJnND9eMWqVpLCkJFDgPUyGzQ4uUVcWeaXgmqYVpP3aRDQ1p62Za0kx0C
dj4Ji14U45ZUnukRHByiSZflrs7nhiZlJCkSN+B7WF5KBwoG4aUV4yIXRSMSl4MF
RYBJAQi57KNDnzebU9ChRvyCIJiun+3PsgZuP7kasI2I7jO/NW1ROe8w/gt/Ez3w
rRly7WENAKPhow==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:26 2026 by rpki-client