This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File:                     0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier:          np/pDJCrUJ/LIT/bkHoMDY5sju1NnL9Qm2m+re/32EY=
Subject key identifier:   CA:3B:61:E5:B0:31:84:87:71:81:7E:6D:F9:AF:1F:09:E7:BF:6D:5E
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer:       /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial:       019C420F505F3E12D80815FB86E15C0B998C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number:          0941
Signing time:             Mon 09 Feb 2026 11:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:25 +0000
Files and hashes:         1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: ZRzaYFZ9bwpj2MhumaZa1s/yLJ9+qniywpStlBmxfU4=)
                          2: hGkf_qyDhU37-o9sEDt63JFfVyM.roa (hash: d3kiFkXGyIU+fZhFKa/d+1Nny2/miOmiUkEEuvkDS5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:50:5f:3e:12:d8:08:15:fb:86:e1:5c:0b:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
        Validity
            Not Before: Feb  9 11:00:25 2026 GMT
            Not After : Feb 10 11:00:25 2026 GMT
        Subject: CN=ca3b61e5b031848771817e6df9af1f09e7bf6d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:6a:ca:f5:11:76:b5:69:4b:6e:07:8b:49:
                    8c:51:9e:68:29:c1:20:f7:9b:4a:55:1d:4d:0a:5f:
                    bd:1b:e3:c0:1b:47:bb:09:02:a3:dc:8e:b0:2b:60:
                    4c:a9:cd:fc:2b:66:91:af:94:64:25:d0:22:b2:e9:
                    35:61:d5:65:e5:7e:e6:65:ad:8a:9f:db:59:b0:03:
                    1c:b7:a3:5c:20:3e:45:70:9a:7c:5b:e2:87:7b:1d:
                    2f:e4:d1:0d:61:da:fa:f9:71:8b:b4:fe:90:b8:a4:
                    13:c8:d5:7f:88:42:12:44:54:d1:61:d7:59:a5:08:
                    bc:2c:bd:e6:8e:5a:3a:36:c7:42:8a:48:2d:23:81:
                    b0:2d:19:28:b9:1a:ac:c8:1f:e0:8b:5e:dc:1d:fa:
                    aa:08:93:55:0b:ea:97:57:b3:20:61:c2:5f:97:9e:
                    0c:8c:b2:d2:45:31:e4:2e:b8:c9:dd:dc:75:10:5e:
                    66:e4:64:e7:1f:4f:45:57:d3:a1:46:17:93:24:73:
                    7b:e1:c7:6d:35:33:9f:b9:09:7e:f4:2d:53:74:c2:
                    37:62:21:f9:70:2c:b6:dd:25:2a:52:7a:56:e0:8c:
                    58:55:6d:b0:ec:2f:36:38:cf:7d:e8:7f:f5:04:37:
                    51:2f:f2:b4:42:bf:4e:0d:8c:78:d3:48:b7:79:4a:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3B:61:E5:B0:31:84:87:71:81:7E:6D:F9:AF:1F:09:E7:BF:6D:5E
            X509v3 Authority Key Identifier:
                keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:97:a8:b7:9f:5e:16:ee:50:23:77:b1:aa:69:9b:82:e1:
         ac:26:54:c0:9d:ac:9f:0f:cb:6c:f3:4a:6f:d5:07:56:db:00:
         b6:5d:f5:c7:89:c3:91:74:37:27:c7:37:03:d1:51:f5:fc:48:
         d1:99:e7:73:6b:2d:a6:70:c2:1f:51:55:b4:d8:70:d0:df:ef:
         07:c4:60:dd:77:5c:47:36:a5:71:e5:93:2c:db:92:20:26:54:
         2d:0d:22:63:04:51:cb:e1:14:a4:28:51:19:d2:7b:21:5d:59:
         48:a4:94:32:0d:df:8d:09:69:ef:31:9a:41:72:23:e2:e7:06:
         94:cf:4a:e4:02:fa:49:72:7c:e6:eb:1d:17:f1:3f:48:fa:5c:
         df:2a:97:b6:ae:e6:58:07:d3:2d:31:da:63:14:a9:76:73:cd:
         93:70:ed:d1:e9:d4:cc:30:dd:12:e5:80:bc:42:e7:8f:ca:4b:
         bb:78:7c:d8:23:8c:02:11:ac:1f:eb:b4:f8:67:61:fd:10:9e:
         d7:87:cc:08:d2:f2:68:0c:87:47:66:74:aa:c1:0b:e5:30:a1:
         2e:6f:d7:98:06:47:db:35:22:10:b3:58:90:e8:49:99:69:41:
         32:41:ef:91:f6:0d:21:36:d5:0c:99:cc:17:1a:26:b1:f8:c6:
         19:e4:76:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD1BfPhLYCBX7huFcC5mMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjMxM2I2NDBjNmRlNzUzNWI4MWVjNjhjNDBlZTZlYzk5
ZmZmNGQwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD
EyhjYTNiNjFlNWIwMzE4NDg3NzE4MTdlNmRmOWFmMWYwOWU3YmY2ZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/pqyvURdrVpS24Hi0mMUZ5oKcEg
95tKVR1NCl+9G+PAG0e7CQKj3I6wK2BMqc38K2aRr5RkJdAisuk1YdVl5X7mZa2K
n9tZsAMct6NcID5FcJp8W+KHex0v5NENYdr6+XGLtP6QuKQTyNV/iEISRFTRYddZ
pQi8LL3mjlo6NsdCikgtI4GwLRkouRqsyB/gi17cHfqqCJNVC+qXV7MgYcJfl54M
jLLSRTHkLrjJ3dx1EF5m5GTnH09FV9OhRheTJHN74cdtNTOfuQl+9C1TdMI3YiH5
cCy23SUqUnpW4IxYVW2w7C82OM996H/1BDdRL/K0Qr9ODYx400i3eUp0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo7YeWwMYSHcYF+bfmvHwnnv21eMB8GA1UdIwQY
MBaAFNDzE7ZAxt51NbgexoxA7m7Jn/9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85YTk5ZjktMmQ2Yy00YTRhLWEwOTYt
MGM3M2JlYzUxMDdjLzEvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85YTk5ZjktMmQ2Yy00YTRhLWEwOTYtMGM3M2JlYzUxMDdj
LzEvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeO2XqLef
XhbuUCN3sappm4LhrCZUwJ2snw/LbPNKb9UHVtsAtl31x4nDkXQ3J8c3A9FR9fxI
0Znnc2stpnDCH1FVtNhw0N/vB8Rg3XdcRzalceWTLNuSICZULQ0iYwRRy+EUpChR
GdJ7IV1ZSKSUMg3fjQlp7zGaQXIj4ucGlM9K5AL6SXJ85usdF/E/SPpc3yqXtq7m
WAfTLTHaYxSpdnPNk3Dt0enUzDDdEuWAvELnj8pLu3h82COMAhGsH+u0+Gdh/RCe
14fMCNLyaAyHR2Z0qsEL5TChLm/XmAZH2zUiELNYkOhJmWlBMkHvkfYNITbVDJnM
FxomsfjGGeR2vA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:22 2026 by rpki-client