This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File:                     86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier:          gmPFtXHn24qCrTKo++Nq7hMJA7C5kEtjgS6JWg/5qnI=
Subject key identifier:   0B:04:3C:1D:46:CB:A7:C5:0F:7B:31:6E:90:AA:AE:45:50:F3:7C:74
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer:       /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial:       019C4322227218C488C7D9E8497808E6608D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number:          0666
Signing time:             Mon 09 Feb 2026 16:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:36 +0000
Files and hashes:         1: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: fFEpm1XhS0wgqAh3bx+h7lWGeW458F0K7pfjhJuHFQg=)
                          2: xCvlhfxkNPRBBz_i6VM9U4-t0BA.roa (hash: I2ugWtRwTmXPZXRdn73fmU0ZbGjpZ9U3l1aWJKFa53A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:22:72:18:c4:88:c7:d9:e8:49:78:08:e6:60:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
        Validity
            Not Before: Feb  9 16:00:36 2026 GMT
            Not After : Feb 10 16:00:36 2026 GMT
        Subject: CN=0b043c1d46cba7c50f7b316e90aaae4550f37c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:f7:4d:9c:c8:c0:46:04:92:00:1d:5e:e4:
                    3a:67:b0:ee:d3:dd:d2:a6:75:f4:45:10:91:fe:7f:
                    32:06:6d:a8:16:09:1a:7a:cd:51:26:ac:01:37:e3:
                    8e:f0:6f:40:e8:00:8c:7b:5e:89:5f:39:74:c8:c8:
                    58:ee:77:cb:f6:d4:8e:6c:dd:a5:20:07:a2:62:5d:
                    d2:84:ab:ae:c7:2a:07:b1:fa:92:cd:6f:96:a0:4e:
                    bd:02:52:fc:2f:cc:c3:52:e7:7e:f3:aa:99:ea:f4:
                    32:2b:32:90:83:db:16:ed:64:0a:a7:58:71:ed:78:
                    af:3c:2f:09:49:34:54:95:2a:5e:c6:5f:1b:77:ac:
                    58:3c:2d:59:6f:da:e1:c1:9b:55:d8:f9:e2:8c:04:
                    f9:6e:7a:3b:ad:d2:72:e5:21:6f:65:29:b6:df:9e:
                    29:14:a8:55:9b:6f:fe:bf:fc:5b:87:95:02:07:33:
                    a2:64:6d:25:d1:63:d3:69:5b:66:ad:6f:73:71:45:
                    b1:37:61:bf:07:12:8e:5a:18:a7:a0:41:e9:eb:3a:
                    33:6b:4e:f4:b9:da:e3:e4:f8:9d:fa:fe:2f:61:47:
                    45:cd:b7:9a:2d:e5:cf:98:41:75:77:09:77:5f:98:
                    25:c2:60:e1:81:56:45:8d:8a:49:d4:ea:d4:84:e4:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:04:3C:1D:46:CB:A7:C5:0F:7B:31:6E:90:AA:AE:45:50:F3:7C:74
            X509v3 Authority Key Identifier:
                keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:41:a1:f2:55:91:c6:67:8c:79:9a:e0:c3:3f:54:b3:d0:8e:
         01:38:17:cc:38:ba:5f:0e:88:77:15:ad:46:03:aa:e0:17:84:
         4a:3d:11:79:9a:db:c5:50:31:a9:10:2d:15:9a:8e:fc:44:a0:
         3d:c0:a9:87:be:5f:dc:db:8a:00:af:4d:f2:7b:37:2c:63:bf:
         fe:83:8e:02:4a:f1:b2:78:2a:ef:9b:c8:d9:ff:cd:69:62:29:
         90:4d:e6:c9:ec:5e:2b:dc:f3:1f:4f:bd:c4:6b:91:9b:09:7f:
         29:5b:95:fc:57:d6:a0:23:14:b5:2d:f1:83:68:b7:3d:31:97:
         6b:b9:cc:9c:41:10:b0:b1:24:85:ee:6b:d6:87:1f:8a:72:b2:
         44:0a:f0:d0:1a:a7:49:6a:24:dd:04:d2:67:d8:47:8a:ec:79:
         61:f0:91:fb:ea:9b:2b:bc:7a:f4:fd:c9:f7:01:28:53:96:c4:
         cf:41:1b:e8:01:c2:d0:90:e4:6f:9f:84:e2:2a:ca:6c:1c:e7:
         a0:37:03:49:7d:6c:67:ff:97:3d:ae:77:db:04:06:1a:9d:1e:
         05:78:cb:f6:54:3d:17:58:12:ca:05:34:32:c6:74:9b:09:9a:
         56:e8:e8:03:6c:30:85:5c:37:7e:b6:d1:f5:83:ba:c3:be:c7:
         29:ac:67:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIiJyGMSIx9noSXgI5mCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTE5NDA3ZWRhNmRiMDg2M2NkYzlmMTg1NzM0ODJkNmFk
MTIwOTgwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD
EygwYjA0M2MxZDQ2Y2JhN2M1MGY3YjMxNmU5MGFhYWU0NTUwZjM3Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaP3TZzIwEYEkgAdXuQ6Z7Du093S
pnX0RRCR/n8yBm2oFgkaes1RJqwBN+OO8G9A6ACMe16JXzl0yMhY7nfL9tSObN2l
IAeiYl3ShKuuxyoHsfqSzW+WoE69AlL8L8zDUud+86qZ6vQyKzKQg9sW7WQKp1hx
7XivPC8JSTRUlSpexl8bd6xYPC1Zb9rhwZtV2PnijAT5bno7rdJy5SFvZSm2354p
FKhVm2/+v/xbh5UCBzOiZG0l0WPTaVtmrW9zcUWxN2G/BxKOWhinoEHp6zoza070
udrj5Pid+v4vYUdFzbeaLeXPmEF1dwl3X5glwmDhgVZFjYpJ1OrUhOTXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsEPB1Gy6fFD3sxbpCqrkVQ83x0MB8GA1UdIwQY
MBaAFPOhlAftptsIY83J8YVzSC1q0SCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgt
ZmFjOTA0YTRhYWI1LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgtZmFjOTA0YTRhYWI1
LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEGh8lWR
xmeMeZrgwz9Us9COATgXzDi6Xw6IdxWtRgOq4BeESj0ReZrbxVAxqRAtFZqO/ESg
PcCph75f3NuKAK9N8ns3LGO//oOOAkrxsngq75vI2f/NaWIpkE3myexeK9zzH0+9
xGuRmwl/KVuV/FfWoCMUtS3xg2i3PTGXa7nMnEEQsLEkhe5r1ocfinKyRArw0Bqn
SWok3QTSZ9hHiux5YfCR++qbK7x69P3J9wEoU5bEz0Eb6AHC0JDkb5+E4irKbBzn
oDcDSX1sZ/+XPa532wQGGp0eBXjL9lQ9F1gSygU0MsZ0mwmaVujoA2wwhVw3frbR
9YO6w77HKaxnRg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:31 2026 by rpki-client