This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
File:                     Iss2-FBsEYv8QfXa42ImSpaBSZA.mft (raw, json)
Hash identifier:          1dOZ3AoXk/2XMNDoILkewLR3kfbOZZ7sfsN2YLfkqXQ=
Subject key identifier:   14:21:37:6D:79:FA:09:E9:34:56:13:DB:AF:D5:BD:11:27:1C:36:D8
Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
Certificate issuer:       /CN=22cb36f8506c118bfc41f5dae362264a96814990
Certificate serial:       019C43C6B998341F865225BCA929B807796B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
Manifest number:          0108
Signing time:             Mon 09 Feb 2026 19:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:22 +0000
Files and hashes:         1: DUhtAD3_xxy9gOvcTDplBUTPnms.roa (hash: v0tLLjc7rS1SBtzsfai4mMe4+DHfyEXAvDNb2xkmOp4=)
                          2: Iss2-FBsEYv8QfXa42ImSpaBSZA.crl (hash: fe/lssykbtLA0uOTtKoU7A2kggmoGnKRAVhNtGfz4GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:b9:98:34:1f:86:52:25:bc:a9:29:b8:07:79:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990
        Validity
            Not Before: Feb  9 19:00:22 2026 GMT
            Not After : Feb 10 19:00:22 2026 GMT
        Subject: CN=1421376d79fa09e9345613dbafd5bd11271c36d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:c5:60:1d:9c:96:8e:9d:c5:59:4f:3f:d9:
                    a2:cb:5b:1c:02:2f:18:36:6a:d8:a8:cc:79:56:57:
                    23:f6:c7:78:b6:4d:82:6a:3d:ab:e9:ed:62:4e:79:
                    f6:e6:0d:4a:d6:41:66:7a:1f:a1:6b:7d:66:96:b8:
                    ac:d2:57:a3:a9:3a:09:fd:f9:57:f6:5b:20:3a:88:
                    fb:a2:5b:07:ac:93:95:ae:04:a7:90:dd:11:bf:d5:
                    38:65:ee:41:67:5e:bf:08:42:38:cd:c9:c5:5d:ab:
                    04:6a:4f:c2:7b:09:86:61:6d:4c:41:00:5a:d3:a9:
                    ef:5a:97:bd:3d:40:6a:68:58:38:22:77:82:d1:8e:
                    33:3b:ea:12:17:b4:d9:c9:0a:e6:c6:ee:d4:ce:bb:
                    f4:ab:f0:51:4a:d3:d3:d7:51:68:30:9b:3f:e3:92:
                    71:de:8c:a3:fb:c6:9d:3e:ee:d1:61:f9:35:29:39:
                    1c:25:79:1e:ae:18:f3:a2:bb:e5:59:cf:59:d6:9b:
                    7b:25:73:d2:05:1b:28:2b:3c:4a:c6:5b:e1:cc:cd:
                    54:13:e1:b5:f5:1e:f3:3f:5a:23:79:11:29:ef:32:
                    c7:15:e5:8d:c1:99:68:19:ae:06:10:e6:18:ff:7f:
                    91:3d:3a:43:a0:a0:54:3d:b3:64:24:f0:db:37:ab:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:21:37:6D:79:FA:09:E9:34:56:13:DB:AF:D5:BD:11:27:1C:36:D8
            X509v3 Authority Key Identifier:
                keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:22:3f:47:6a:55:39:cb:90:2c:67:2a:07:84:7f:44:77:53:
         02:11:f9:06:94:fe:5b:b3:f1:a1:f3:1f:04:b7:55:43:2d:8b:
         17:de:e4:66:7e:9d:21:3c:5f:20:0f:87:21:39:77:9c:92:9e:
         3f:f2:8f:74:a6:dd:3f:a6:8c:8e:bd:0c:85:ed:77:10:ce:20:
         d7:3f:1f:33:8e:d6:2a:e7:9c:d6:95:9a:9e:0e:bc:35:50:80:
         51:b7:97:00:6e:d2:5c:ea:87:10:d1:95:fd:eb:36:1b:b7:ae:
         54:ff:00:33:9c:63:7b:c9:61:04:3e:be:4f:ff:49:8f:cd:c4:
         f6:a2:90:df:b7:4e:bb:cb:b9:af:f2:62:f8:44:b0:3b:87:ec:
         47:5b:93:fb:d5:81:93:e5:54:2e:26:11:ad:00:73:33:78:93:
         49:72:b3:98:60:1d:8d:29:b7:df:45:11:8e:92:3f:57:84:56:
         bb:da:6f:e2:c1:d4:32:5e:a9:04:14:81:11:4f:7c:26:04:00:
         a7:83:c5:26:c1:3f:ef:94:ca:5e:c5:cd:46:75:21:93:91:ab:
         e2:47:22:4a:f0:bc:b1:2b:17:91:9c:5e:16:51:e2:14:38:c0:
         d6:dd:80:55:1f:39:bd:99:af:3f:f5:9f:51:04:56:5e:72:b9:
         8d:45:a0:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxrmYNB+GUiW8qSm4B3lrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyY2IzNmY4NTA2YzExOGJmYzQxZjVkYWUzNjIyNjRhOTY4
MTQ5OTAwHhcNMjYwMjA5MTkwMDIyWhcNMjYwMjEwMTkwMDIyWjAzMTEwLwYDVQQD
EygxNDIxMzc2ZDc5ZmEwOWU5MzQ1NjEzZGJhZmQ1YmQxMTI3MWMzNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxjFYB2clo6dxVlPP9miy1scAi8Y
NmrYqMx5Vlcj9sd4tk2Caj2r6e1iTnn25g1K1kFmeh+ha31mlris0lejqToJ/flX
9lsgOoj7olsHrJOVrgSnkN0Rv9U4Ze5BZ16/CEI4zcnFXasEak/CewmGYW1MQQBa
06nvWpe9PUBqaFg4IneC0Y4zO+oSF7TZyQrmxu7Uzrv0q/BRStPT11FoMJs/45Jx
3oyj+8adPu7RYfk1KTkcJXkerhjzorvlWc9Z1pt7JXPSBRsoKzxKxlvhzM1UE+G1
9R7zP1ojeREp7zLHFeWNwZloGa4GEOYY/3+RPTpDoKBUPbNkJPDbN6swywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQhN215+gnpNFYT26/VvREnHDbYMB8GA1UdIwQY
MBaAFCLLNvhQbBGL/EH12uNiJkqWgUmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYt
MjM2Nzg5NTg3OTk3LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYtMjM2Nzg5NTg3OTk3
LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSI/R2pV
OcuQLGcqB4R/RHdTAhH5BpT+W7PxofMfBLdVQy2LF97kZn6dITxfIA+HITl3nJKe
P/KPdKbdP6aMjr0Mhe13EM4g1z8fM47WKuec1pWang68NVCAUbeXAG7SXOqHENGV
/es2G7euVP8AM5xje8lhBD6+T/9Jj83E9qKQ37dOu8u5r/Ji+ESwO4fsR1uT+9WB
k+VULiYRrQBzM3iTSXKzmGAdjSm330URjpI/V4RWu9pv4sHUMl6pBBSBEU98JgQA
p4PFJsE/75TKXsXNRnUhk5Gr4kciSvC8sSsXkZxeFlHiFDjA1t2AVR85vZmvP/Wf
UQRWXnK5jUWgmA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:17 2026 by rpki-client