This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File:                     o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier:          mbP/PbJov+EYYIAuyPSaEazcAFHH8cH17Id+aNEf+5c=
Subject key identifier:   B2:C9:B4:FA:6B:CE:4F:D1:AD:AB:D2:FC:C9:5D:2D:AE:45:80:90:A1
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer:       /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial:       019C4390BF755F83D7F0AFAA045B20BD12DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number:          06D4
Signing time:             Mon 09 Feb 2026 18:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:25 +0000
Files and hashes:         1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=)
                          2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: SQLVB2KKtbsH568Ol0gT+efOxHjaHm2HMsKyKjcWTJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:bf:75:5f:83:d7:f0:af:aa:04:5b:20:bd:12:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
        Validity
            Not Before: Feb  9 18:01:25 2026 GMT
            Not After : Feb 10 18:01:25 2026 GMT
        Subject: CN=b2c9b4fa6bce4fd1adabd2fcc95d2dae458090a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:3a:96:71:2a:7d:54:2a:fb:f8:9a:dd:36:
                    29:9f:ad:2a:01:eb:50:f3:2a:7d:1c:b2:c9:2a:50:
                    27:6c:68:cd:b6:68:9f:47:de:3b:e4:6b:5b:73:98:
                    d8:58:80:9a:ad:d1:64:4e:a8:c5:f3:0b:23:6d:2a:
                    8e:59:b6:f8:3a:ce:86:4a:1c:a7:2f:8e:21:2e:49:
                    ee:c6:08:27:70:d8:fc:c5:52:d5:2b:1e:eb:2d:bf:
                    59:cf:3b:07:ac:c6:8f:97:47:89:1f:69:d0:29:04:
                    30:dc:ce:bb:7a:c3:34:8b:8f:da:ee:4a:86:d4:35:
                    be:58:09:06:34:17:74:a2:67:9a:43:a7:25:6c:78:
                    07:f8:2d:a9:5d:92:cf:73:f1:91:95:cf:b2:55:59:
                    48:49:f8:b8:62:ce:db:7c:01:fe:38:5b:2f:ca:f8:
                    60:2a:e3:61:e9:10:73:78:82:93:d2:cf:f9:c3:20:
                    68:d9:b1:65:40:3f:54:2b:cb:d9:67:80:1c:1f:39:
                    a6:50:db:46:29:7c:ea:7f:61:51:07:a7:95:49:e0:
                    40:54:be:19:93:2b:45:97:11:71:8b:5c:3d:25:0e:
                    ca:a4:57:c9:c9:19:d7:43:eb:ab:d3:65:b0:84:55:
                    9e:ea:ce:19:3c:9d:49:3a:a5:5e:5f:66:ea:d7:3d:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C9:B4:FA:6B:CE:4F:D1:AD:AB:D2:FC:C9:5D:2D:AE:45:80:90:A1
            X509v3 Authority Key Identifier:
                keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:88:5f:30:8f:40:55:c6:47:eb:3a:05:59:c3:93:69:81:72:
         12:fd:43:dd:42:24:65:77:7e:0f:ae:7c:76:5e:6a:fb:7e:6d:
         85:b9:29:97:5b:49:8d:29:b8:0a:31:7f:19:42:58:a1:f7:90:
         54:c5:40:cb:cb:9e:4b:08:f6:89:32:37:05:81:b9:93:9b:d3:
         a1:07:22:bc:96:1a:7f:b8:a1:79:bf:35:30:57:e0:f7:37:7c:
         fe:8c:c2:14:f8:79:28:ea:cb:b0:9d:91:2c:28:0a:7b:1c:d2:
         ab:4c:29:da:ad:2a:8a:de:5a:7f:81:8e:78:05:e2:c7:56:44:
         80:8e:db:0f:f2:01:32:60:c1:80:2e:ec:86:77:fa:43:68:eb:
         21:80:73:67:90:27:74:32:c9:ca:82:e5:9a:6a:ac:ba:85:7f:
         70:71:b9:57:9f:b4:93:7e:0a:a0:89:6b:40:6b:4a:de:4a:cd:
         64:ce:95:24:e6:24:d6:de:ba:0b:39:8f:a9:25:d8:a8:7c:bb:
         4f:8e:89:45:7e:c7:47:dc:6e:3b:31:2d:0d:21:22:60:48:7e:
         69:a0:f5:e0:d9:e4:be:ff:b1:54:c8:a6:2a:2c:d6:da:96:a0:
         a3:90:43:b1:de:19:10:38:f0:c5:7a:1f:06:ac:21:67:3d:63:
         df:e4:29:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkL91X4PX8K+qBFsgvRLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWRiZjY4NzhhYjAwYTQ1MmY4YjA3Zjg5MGQzYWIzNDgz
NzYyN2IwHhcNMjYwMjA5MTgwMTI1WhcNMjYwMjEwMTgwMTI1WjAzMTEwLwYDVQQD
EyhiMmM5YjRmYTZiY2U0ZmQxYWRhYmQyZmNjOTVkMmRhZTQ1ODA5MGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Y6lnEqfVQq+/ia3TYpn60qAetQ
8yp9HLLJKlAnbGjNtmifR9475Gtbc5jYWICardFkTqjF8wsjbSqOWbb4Os6GShyn
L44hLknuxggncNj8xVLVKx7rLb9ZzzsHrMaPl0eJH2nQKQQw3M67esM0i4/a7kqG
1DW+WAkGNBd0omeaQ6clbHgH+C2pXZLPc/GRlc+yVVlISfi4Ys7bfAH+OFsvyvhg
KuNh6RBzeIKT0s/5wyBo2bFlQD9UK8vZZ4AcHzmmUNtGKXzqf2FRB6eVSeBAVL4Z
kytFlxFxi1w9JQ7KpFfJyRnXQ+ur02WwhFWe6s4ZPJ1JOqVeX2bq1z0WQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLJtPprzk/RravS/MldLa5FgJChMB8GA1UdIwQY
MBaAFKOdv2h4qwCkUviwf4kNOrNIN2J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAt
YWQ0NDIzNzY1ODkyLzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAtYWQ0NDIzNzY1ODky
LzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4hfMI9A
VcZH6zoFWcOTaYFyEv1D3UIkZXd+D658dl5q+35thbkpl1tJjSm4CjF/GUJYofeQ
VMVAy8ueSwj2iTI3BYG5k5vToQcivJYaf7iheb81MFfg9zd8/ozCFPh5KOrLsJ2R
LCgKexzSq0wp2q0qit5af4GOeAXix1ZEgI7bD/IBMmDBgC7shnf6Q2jrIYBzZ5An
dDLJyoLlmmqsuoV/cHG5V5+0k34KoIlrQGtK3krNZM6VJOYk1t66CzmPqSXYqHy7
T46JRX7HR9xuOzEtDSEiYEh+aaD14Nnkvv+xVMimKizW2pago5BDsd4ZEDjwxXof
BqwhZz1j3+Qpog==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:22:20 2026 by rpki-client