This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          LDCDvbMfeXDFzzFX4wUSO2RwJ+XCTdvHMstDcRMbKZk=
Subject key identifier:   0F:0D:FA:AD:76:9A:DA:15:79:ED:9D:84:69:3E:40:5A:9A:D4:D2:4C
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       019C42461480B9B19B886544C333A76FD68A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          09AA
Signing time:             Mon 09 Feb 2026 12:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:14 +0000
Files and hashes:         1: 3nO3Eu2HYNgfsHOzOD5IS3szUzQ.roa (hash: CLkZIvvir/OJbbrzSfgsy0YtbLrBe518P4dyR0joX20=)
                          2: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: QAty5TZfSNwUA/0QRN9lWX8ulG/OA1K0ydgCO3nQk0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:14:80:b9:b1:9b:88:65:44:c3:33:a7:6f:d6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: Feb  9 12:00:14 2026 GMT
            Not After : Feb 10 12:00:14 2026 GMT
        Subject: CN=0f0dfaad769ada1579ed9d84693e405a9ad4d24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:e3:be:ae:bb:58:2f:ba:c0:fc:10:be:01:
                    72:19:6d:cb:fc:13:d1:b4:2d:29:84:29:3e:e6:e2:
                    ca:20:6e:31:e4:17:54:21:ce:7b:df:8b:0b:ae:5f:
                    23:7c:30:12:a9:bb:42:0b:ff:17:22:d5:c3:e3:5d:
                    9f:45:5f:69:d7:6c:7b:e5:5a:bc:5f:8b:a2:87:ea:
                    08:38:e3:ed:01:92:77:0f:db:10:10:0e:d6:f7:45:
                    10:3c:e7:39:29:a9:2e:55:f8:71:78:1c:65:6f:fa:
                    97:fe:30:56:eb:72:02:67:24:0f:4e:b3:fd:10:82:
                    f4:24:fa:a2:52:56:87:c7:21:33:b8:e8:5d:21:4f:
                    6e:bd:7b:91:9c:bf:a9:90:61:41:1c:11:d3:68:37:
                    30:1b:15:cb:ac:3f:59:7b:8c:87:d6:01:9a:80:3b:
                    46:a2:9c:1d:5c:54:5d:b2:e2:00:ee:a8:be:7e:57:
                    99:ea:a6:f1:36:64:0d:6e:c2:96:20:ca:2d:fb:69:
                    94:26:ba:63:7d:0e:1e:b5:84:3f:d8:c4:90:8f:4b:
                    9a:2e:33:86:6c:81:94:8c:4a:e9:14:4d:08:13:3d:
                    74:84:5d:b0:41:bc:e0:ce:b2:ba:af:b9:96:f8:20:
                    55:a6:7f:61:d8:b3:3f:71:54:dc:bd:28:1e:9f:64:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:FA:AD:76:9A:DA:15:79:ED:9D:84:69:3E:40:5A:9A:D4:D2:4C
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:38:63:b5:25:fa:e2:12:50:4a:dc:b0:12:f6:35:66:48:
         1d:69:d9:6b:2c:f9:b2:5b:c0:b5:db:6c:f4:da:46:e2:c1:2b:
         65:ea:c8:b3:1f:9c:c3:28:41:5c:a6:28:73:b1:ea:b1:3c:32:
         96:0e:77:1f:6e:5c:d9:c4:c6:d7:77:98:cf:71:07:3e:24:85:
         c6:dc:4c:f2:17:de:4c:e7:5e:bd:0f:2d:d0:2e:34:83:4e:cb:
         55:b3:86:ff:98:46:50:31:c4:73:80:6f:d6:04:48:1a:98:3b:
         7b:4a:ae:3b:9f:71:65:3a:95:12:7c:c2:6a:81:a1:b6:5b:0b:
         a4:95:2b:4a:1b:b4:2f:46:1c:bc:dd:aa:a1:5e:02:7c:de:3b:
         85:98:8d:d2:21:3d:c9:89:6e:15:48:62:94:75:7f:95:ce:44:
         7f:64:df:9f:95:4e:8d:68:a2:78:49:86:dd:6a:2e:fb:9f:61:
         e5:a8:62:ab:52:f6:0d:99:49:3c:42:80:fa:53:f8:68:75:28:
         f7:4f:c5:81:27:1d:a2:76:5d:d5:db:c2:ee:04:f1:4e:3d:36:
         20:d6:11:14:e1:90:e8:c3:02:36:55:bb:5c:2b:c5:a6:af:43:
         9b:d5:66:05:f3:75:5d:b3:1c:91:d7:f1:59:fc:08:95:ca:98:
         6e:d2:1e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRhSAubGbiGVEwzOnb9aKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmODAzYTQ5MGZkNjIwMzUxOGJiZTY0NGJjNzIwOWFmYjc3
ZWM3YjQwHhcNMjYwMjA5MTIwMDE0WhcNMjYwMjEwMTIwMDE0WjAzMTEwLwYDVQQD
EygwZjBkZmFhZDc2OWFkYTE1NzllZDlkODQ2OTNlNDA1YTlhZDRkMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcvjvq67WC+6wPwQvgFyGW3L/BPR
tC0phCk+5uLKIG4x5BdUIc5734sLrl8jfDASqbtCC/8XItXD412fRV9p12x75Vq8
X4uih+oIOOPtAZJ3D9sQEA7W90UQPOc5KakuVfhxeBxlb/qX/jBW63ICZyQPTrP9
EIL0JPqiUlaHxyEzuOhdIU9uvXuRnL+pkGFBHBHTaDcwGxXLrD9Ze4yH1gGagDtG
opwdXFRdsuIA7qi+fleZ6qbxNmQNbsKWIMot+2mUJrpjfQ4etYQ/2MSQj0uaLjOG
bIGUjErpFE0IEz10hF2wQbzgzrK6r7mW+CBVpn9h2LM/cVTcvSgen2RFjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8N+q12mtoVee2dhGk+QFqa1NJMMB8GA1UdIwQY
MBaAFO+AOkkP1iA1GLvmRLxyCa+3fse0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYt
ODc4N2QwYmYxMjA3LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYtODc4N2QwYmYxMjA3
LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQs4Y7Ul
+uISUErcsBL2NWZIHWnZayz5slvAtdts9NpG4sErZerIsx+cwyhBXKYoc7HqsTwy
lg53H25c2cTG13eYz3EHPiSFxtxM8hfeTOdevQ8t0C40g07LVbOG/5hGUDHEc4Bv
1gRIGpg7e0quO59xZTqVEnzCaoGhtlsLpJUrShu0L0YcvN2qoV4CfN47hZiN0iE9
yYluFUhilHV/lc5Ef2Tfn5VOjWiieEmG3Wou+59h5ahiq1L2DZlJPEKA+lP4aHUo
90/FgScdonZd1dvC7gTxTj02INYRFOGQ6MMCNlW7XCvFpq9Dm9VmBfN1XbMckdfx
WfwIlcqYbtIeeA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:54 2026 by rpki-client