This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File:                     aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier:          zS8c87r4ZnYdIXIT57EVNBT8FzwORRdSOOBSFh72nEM=
Subject key identifier:   9E:73:2D:78:31:5F:E6:C5:73:13:6C:8F:DB:C5:F9:2C:0C:1A:DE:50
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer:       /CN=690a263249847cf97344742213644f929beaa997
Certificate serial:       019C41D8B3D9522C86F8E2DDB73FF16D301F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number:          0A6F
Signing time:             Mon 09 Feb 2026 10:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:46 +0000
Files and hashes:         1: 1QpbjmDLVcUMqnNrCbGP4FA5FaY.roa (hash: 5prhYgOZoGVGdhCQditPaOssQQZBoW2n1oXkHDCQF6E=)
                          2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: dzQNX1FpLCyhDlKQTwB711bkzh+HP/1z+a7tzpskb78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:b3:d9:52:2c:86:f8:e2:dd:b7:3f:f1:6d:30:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690a263249847cf97344742213644f929beaa997
        Validity
            Not Before: Feb  9 10:00:46 2026 GMT
            Not After : Feb 10 10:00:46 2026 GMT
        Subject: CN=9e732d78315fe6c573136c8fdbc5f92c0c1ade50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:db:bc:48:d8:25:65:0a:e3:8c:e6:e5:23:
                    1b:bd:f9:bf:3f:e9:74:7a:6c:b2:2e:b5:30:af:68:
                    d8:84:bd:f3:f5:7b:8b:ac:d5:b1:81:9d:8d:84:8b:
                    52:36:da:f2:d8:b9:74:b0:57:8f:42:b0:d0:00:51:
                    15:a5:82:4a:e2:f7:8f:7d:29:ba:15:ad:06:c0:06:
                    45:1e:a4:ec:54:e7:c6:16:7d:83:23:a4:c1:74:38:
                    f8:d3:4d:39:cb:7b:91:3b:9d:b1:89:fa:0b:4c:b0:
                    b3:aa:15:ac:4d:47:98:36:2f:b2:2d:7c:81:3a:84:
                    87:6d:de:0d:c7:11:7e:c3:a7:44:15:b4:a5:ac:6d:
                    47:70:dd:5c:9d:51:12:2b:f2:9d:35:17:b4:c8:bc:
                    e7:b5:2d:7a:75:a2:f0:24:50:74:fd:8a:62:3d:d0:
                    9a:7c:8e:44:a3:98:6d:72:bf:f3:84:fc:06:a5:85:
                    8a:1e:68:8b:cb:28:fc:44:f2:e5:5c:3f:79:0c:d4:
                    0b:99:73:42:9b:8e:3d:b3:62:e5:94:6e:1e:12:31:
                    06:71:0b:c0:d6:38:ee:6a:16:77:fc:bc:c7:4b:5c:
                    42:48:44:6b:a2:9f:1b:97:3f:4f:b0:76:ef:59:ac:
                    db:69:d3:49:8a:6f:87:6e:fe:22:c0:11:43:90:d5:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:73:2D:78:31:5F:E6:C5:73:13:6C:8F:DB:C5:F9:2C:0C:1A:DE:50
            X509v3 Authority Key Identifier:
                keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:72:74:e1:f2:fd:5e:c6:95:c1:dc:88:14:93:54:d0:dc:
         83:22:46:ab:c3:7f:ee:97:e0:d0:fa:c0:df:26:7a:37:6a:57:
         ae:bb:c4:d4:bc:e7:22:d6:3b:5e:50:20:fe:f3:60:2d:67:48:
         39:17:5f:b8:e1:3b:a8:b2:c1:4a:be:53:55:1c:e2:6c:bc:d1:
         38:73:0e:a9:c2:16:e8:79:c6:22:e0:48:b4:8c:66:9b:4c:98:
         ba:ae:ca:b9:18:36:5f:f9:91:82:ae:74:9a:8b:a8:26:2d:8f:
         ea:74:31:07:a7:41:d8:3a:4b:0d:ec:ab:77:be:37:58:fd:ea:
         bc:dc:4d:54:f7:c3:e2:45:51:fb:65:72:5b:6d:4b:c1:f3:68:
         32:f9:80:9d:56:02:31:d6:55:90:3a:76:e6:f6:6e:b3:3e:15:
         f7:f0:4d:9f:21:ff:4f:47:7e:90:d3:8e:3a:2f:1c:d7:8b:ea:
         67:20:b1:41:dd:ea:ca:71:67:3f:ee:97:44:f7:08:ca:15:1a:
         a8:d6:77:e8:8d:7d:51:a3:0a:6f:d2:9f:50:92:d8:2c:68:16:
         61:f7:d8:0e:e7:89:5a:06:09:89:eb:ae:da:e3:10:69:8f:35:
         bc:57:4c:cd:50:53:9c:0c:1c:84:7c:d6:2a:ac:d2:22:a5:72:
         61:19:b3:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2LPZUiyG+OLdtz/xbTAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGEyNjMyNDk4NDdjZjk3MzQ0NzQyMjEzNjQ0ZjkyOWJl
YWE5OTcwHhcNMjYwMjA5MTAwMDQ2WhcNMjYwMjEwMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg5ZTczMmQ3ODMxNWZlNmM1NzMxMzZjOGZkYmM1ZjkyYzBjMWFkZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaHbvEjYJWUK44zm5SMbvfm/P+l0
emyyLrUwr2jYhL3z9XuLrNWxgZ2NhItSNtry2Ll0sFePQrDQAFEVpYJK4vePfSm6
Fa0GwAZFHqTsVOfGFn2DI6TBdDj40005y3uRO52xifoLTLCzqhWsTUeYNi+yLXyB
OoSHbd4NxxF+w6dEFbSlrG1HcN1cnVESK/KdNRe0yLzntS16daLwJFB0/YpiPdCa
fI5Eo5htcr/zhPwGpYWKHmiLyyj8RPLlXD95DNQLmXNCm449s2LllG4eEjEGcQvA
1jjuahZ3/LzHS1xCSERrop8blz9PsHbvWazbadNJim+Hbv4iwBFDkNXyoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5zLXgxX+bFcxNsj9vF+SwMGt5QMB8GA1UdIwQY
MBaAFGkKJjJJhHz5c0R0IhNkT5Kb6qmXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAt
MzFiMmE2MDdiYTk3LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAtMzFiMmE2MDdiYTk3
LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiZydOHy
/V7GlcHciBSTVNDcgyJGq8N/7pfg0PrA3yZ6N2pXrrvE1LznItY7XlAg/vNgLWdI
ORdfuOE7qLLBSr5TVRzibLzROHMOqcIW6HnGIuBItIxmm0yYuq7KuRg2X/mRgq50
mouoJi2P6nQxB6dB2DpLDeyrd743WP3qvNxNVPfD4kVR+2VyW21LwfNoMvmAnVYC
MdZVkDp25vZusz4V9/BNnyH/T0d+kNOOOi8c14vqZyCxQd3qynFnP+6XRPcIyhUa
qNZ36I19UaMKb9KfUJLYLGgWYffYDueJWgYJieuu2uMQaY81vFdMzVBTnAwchHzW
KqzSIqVyYRmz8A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:23 2026 by rpki-client