This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/16656e-d561-4d76-ad95-e5a529d82c58/1/m8xWpwZCVQCzMfl7ufZwiSQyiwU.mft
File:                     m8xWpwZCVQCzMfl7ufZwiSQyiwU.mft (raw, json)
Hash identifier:          0GOYdtScKRNsNV9+6Yib575QH+0zV1MLbspiRsBkdX4=
Subject key identifier:   D9:3D:4F:B6:2A:AE:AF:F4:81:67:F9:34:5F:9E:D9:87:55:15:B0:BA
Authority key identifier: 9B:CC:56:A7:06:42:55:00:B3:31:F9:7B:B9:F6:70:89:24:32:8B:05
Certificate issuer:       /CN=9bcc56a706425500b331f97bb9f6708924328b05
Certificate serial:       019C420F72F7234C9FDF347813D8BB6F2A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8xWpwZCVQCzMfl7ufZwiSQyiwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/16656e-d561-4d76-ad95-e5a529d82c58/1/m8xWpwZCVQCzMfl7ufZwiSQyiwU.mft
Manifest number:          0E
Signing time:             Mon 09 Feb 2026 11:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:34 +0000
Files and hashes:         1: D7t8gRhtSoYPR-iIEI2-eqoQJw0.roa (hash: kArGm3JfhnHSljxwuuoHU5/gZsLwKLYx2mq6rEGe5Bk=)
                          2: m8xWpwZCVQCzMfl7ufZwiSQyiwU.crl (hash: N7KRXnKtyqY7mwP3pw6+RKebf3QK7FWjxM/ebW9Z9fI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/16656e-d561-4d76-ad95-e5a529d82c58/1/m8xWpwZCVQCzMfl7ufZwiSQyiwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/16656e-d561-4d76-ad95-e5a529d82c58/1/m8xWpwZCVQCzMfl7ufZwiSQyiwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8xWpwZCVQCzMfl7ufZwiSQyiwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:72:f7:23:4c:9f:df:34:78:13:d8:bb:6f:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bcc56a706425500b331f97bb9f6708924328b05
        Validity
            Not Before: Feb  9 11:00:34 2026 GMT
            Not After : Feb 10 11:00:34 2026 GMT
        Subject: CN=d93d4fb62aaeaff48167f9345f9ed9875515b0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:13:b6:ce:f7:cc:5c:5f:2c:7e:1c:2b:5c:
                    d1:14:2c:7a:d7:af:2f:ea:6c:a5:46:1b:4d:2e:78:
                    6c:f4:65:47:b7:24:7d:10:1f:2b:7a:93:fe:23:c1:
                    fe:be:f6:3f:41:82:be:d8:28:73:de:48:a6:b9:77:
                    c1:0a:e9:aa:01:5f:11:93:9c:3b:74:9e:91:a2:bf:
                    b2:fa:94:f8:db:f3:cc:35:11:7b:f4:cc:e1:c2:75:
                    85:b2:c9:c5:4f:af:d8:36:68:a1:2e:39:64:ef:66:
                    ee:36:15:94:54:50:c5:eb:78:5a:30:e0:47:ef:35:
                    07:cc:a7:27:61:3c:d6:63:d2:b0:70:8a:d6:42:57:
                    87:9e:23:d3:07:e7:8f:df:2d:10:7a:43:fd:03:f8:
                    32:b1:d1:dc:e3:96:2a:ef:43:8b:d8:26:dc:ca:c3:
                    b8:e3:a8:9b:04:e1:64:fa:79:aa:af:c0:62:a3:83:
                    ae:db:fe:ff:ef:2e:f2:65:f4:7a:3e:a3:08:35:c6:
                    6e:82:60:50:05:e6:fd:b7:69:dd:52:bd:9f:6b:2d:
                    d3:ab:8f:bc:69:dc:97:13:f8:e5:87:e8:5a:69:d2:
                    4e:df:4d:61:ce:a9:6b:b7:a1:b5:d9:d3:f7:58:f4:
                    82:9c:d9:47:a9:de:5b:7d:07:4b:b1:f6:a3:ba:26:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3D:4F:B6:2A:AE:AF:F4:81:67:F9:34:5F:9E:D9:87:55:15:B0:BA
            X509v3 Authority Key Identifier:
                keyid:9B:CC:56:A7:06:42:55:00:B3:31:F9:7B:B9:F6:70:89:24:32:8B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8xWpwZCVQCzMfl7ufZwiSQyiwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/16656e-d561-4d76-ad95-e5a529d82c58/1/m8xWpwZCVQCzMfl7ufZwiSQyiwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/16656e-d561-4d76-ad95-e5a529d82c58/1/m8xWpwZCVQCzMfl7ufZwiSQyiwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c7:02:c8:08:d5:17:b8:76:b1:67:f3:28:c4:4d:01:4b:26:
         08:cb:04:73:e4:e1:ad:d3:ad:eb:96:da:5b:8e:71:29:8c:1a:
         1d:86:82:ec:4b:f4:16:c0:f5:3a:13:40:43:c2:51:0a:4a:95:
         e0:37:3d:d8:4e:45:11:7b:73:63:aa:29:90:5f:a1:f9:5b:25:
         82:bf:08:bb:76:19:08:a8:21:60:69:52:3b:40:5e:e5:31:e1:
         b1:29:75:51:4e:70:5b:1b:d4:bd:88:38:93:7d:30:5f:24:15:
         7b:f0:98:35:c8:5f:b3:c2:b4:9f:ee:b9:f3:c3:d8:72:e9:4f:
         9f:bb:f9:4f:e0:f4:18:18:e2:28:67:81:51:7f:54:5c:71:6a:
         28:d9:9b:84:2d:ef:1a:3d:44:a6:0d:fc:97:6f:d5:74:6f:f5:
         12:42:10:a6:c3:f8:89:27:42:35:2f:8c:1b:96:0e:4f:89:d9:
         c8:7d:24:65:df:78:ff:8e:f0:d8:4d:da:5a:fd:12:99:a6:2f:
         c1:68:60:fa:fe:bb:a9:9f:b3:97:2f:b2:e1:c6:4a:08:92:97:
         54:26:d5:4a:ac:f9:c6:f8:dd:23:cb:32:3e:f1:b4:6b:fa:d3:
         a9:8d:2f:33:3e:59:a0:5b:93:de:ba:4c:47:84:34:46:d5:e1:
         79:84:4a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD3L3I0yf3zR4E9i7byogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliY2M1NmE3MDY0MjU1MDBiMzMxZjk3YmI5ZjY3MDg5MjQz
MjhiMDUwHhcNMjYwMjA5MTEwMDM0WhcNMjYwMjEwMTEwMDM0WjAzMTEwLwYDVQQD
EyhkOTNkNGZiNjJhYWVhZmY0ODE2N2Y5MzQ1ZjllZDk4NzU1MTViMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6kTts73zFxfLH4cK1zRFCx6168v
6mylRhtNLnhs9GVHtyR9EB8repP+I8H+vvY/QYK+2Chz3kimuXfBCumqAV8Rk5w7
dJ6Ror+y+pT42/PMNRF79MzhwnWFssnFT6/YNmihLjlk72buNhWUVFDF63haMOBH
7zUHzKcnYTzWY9KwcIrWQleHniPTB+eP3y0QekP9A/gysdHc45Yq70OL2CbcysO4
46ibBOFk+nmqr8Bio4Ou2/7/7y7yZfR6PqMINcZugmBQBeb9t2ndUr2fay3Tq4+8
adyXE/jlh+haadJO301hzqlrt6G12dP3WPSCnNlHqd5bfQdLsfajuiZ88QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk9T7Yqrq/0gWf5NF+e2YdVFbC6MB8GA1UdIwQY
MBaAFJvMVqcGQlUAszH5e7n2cIkkMosFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTh4V3B3WkNWUUN6TWZsN3VmWndpU1F5aXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNjY1NmUtZDU2MS00ZDc2LWFkOTUt
ZTVhNTI5ZDgyYzU4LzEvbTh4V3B3WkNWUUN6TWZsN3VmWndpU1F5aXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xNjY1NmUtZDU2MS00ZDc2LWFkOTUtZTVhNTI5ZDgyYzU4
LzEvbTh4V3B3WkNWUUN6TWZsN3VmWndpU1F5aXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8cCyAjV
F7h2sWfzKMRNAUsmCMsEc+ThrdOt65baW45xKYwaHYaC7Ev0FsD1OhNAQ8JRCkqV
4Dc92E5FEXtzY6opkF+h+Vslgr8Iu3YZCKghYGlSO0Be5THhsSl1UU5wWxvUvYg4
k30wXyQVe/CYNchfs8K0n+6588PYculPn7v5T+D0GBjiKGeBUX9UXHFqKNmbhC3v
Gj1Epg38l2/VdG/1EkIQpsP4iSdCNS+MG5YOT4nZyH0kZd94/47w2E3aWv0SmaYv
wWhg+v67qZ+zly+y4cZKCJKXVCbVSqz5xvjdI8syPvG0a/rTqY0vMz5ZoFuT3rpM
R4Q0RtXheYRKkQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:09 2026 by rpki-client