This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File:                     mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier:          ybopI76KNSuESoAjMJlv1JrcKNeAtPTfLLOIvqB5BIo=
Subject key identifier:   B6:3F:E0:69:B6:82:55:EE:BB:0D:DE:33:7B:F9:D2:31:56:8D:0C:12
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer:       /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial:       019C42EB36F29756535D8587BD582C80A1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number:          070C
Signing time:             Mon 09 Feb 2026 15:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:37 +0000
Files and hashes:         1: 1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa (hash: p5UNy6JSWBgEDxhzbnTAtJTc0CoC4BoiXS2WVhGNjLY=)
                          2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: G9DRx6F33oDPrEK6VHLe2/rx0muL84Dd0PCpbdYFtq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:36:f2:97:56:53:5d:85:87:bd:58:2c:80:a1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
        Validity
            Not Before: Feb  9 15:00:37 2026 GMT
            Not After : Feb 10 15:00:37 2026 GMT
        Subject: CN=b63fe069b68255eebb0dde337bf9d231568d0c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:3a:20:a5:cb:5a:7a:b0:10:8f:8d:44:71:
                    cb:9b:29:47:16:4c:e9:6c:bf:be:99:44:bc:83:d3:
                    79:50:34:76:eb:2b:89:02:76:74:8b:ae:8b:18:1e:
                    fd:38:25:d7:a9:2c:c1:66:47:5c:73:4b:91:78:30:
                    96:09:4a:07:6c:fe:e9:0b:50:2f:9e:40:71:dc:7a:
                    06:3d:68:5f:f6:b2:d3:c2:34:12:19:18:c8:68:1e:
                    fd:f2:74:1a:b6:42:63:13:d8:d9:46:28:2d:59:a8:
                    56:16:a0:1a:40:f0:9e:79:7f:ae:7c:c8:9e:04:f1:
                    d1:45:32:e1:f9:d2:4a:67:3b:b3:7d:de:43:8e:df:
                    54:98:34:27:cd:e6:e0:7c:59:06:d9:28:44:0c:29:
                    42:6d:0c:db:39:82:07:3e:f2:84:1a:69:3e:d7:95:
                    17:20:3d:61:bd:99:38:1e:99:e9:4e:5e:7e:fa:b5:
                    97:f8:0e:e1:d9:25:4e:c3:1d:01:1b:37:e3:68:2f:
                    40:d8:4f:6b:ed:ae:0b:84:ff:70:79:d4:7d:b7:af:
                    61:a0:5c:34:40:0d:d8:71:f7:7b:4b:04:3b:84:1f:
                    66:19:31:39:26:4f:b9:ee:ba:40:5f:5c:ad:91:01:
                    e5:2d:02:a9:6d:a9:c8:d4:d0:e6:a9:46:58:9a:da:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:E0:69:B6:82:55:EE:BB:0D:DE:33:7B:F9:D2:31:56:8D:0C:12
            X509v3 Authority Key Identifier:
                keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:72:85:d5:69:bc:8e:d1:dd:c4:5d:b3:ca:c8:08:4f:e7:e4:
         6d:86:9f:72:50:2d:50:55:c3:5f:01:4c:b7:40:33:48:8f:fa:
         f0:51:b2:3d:59:5c:2b:da:99:f5:54:25:84:f3:04:fd:73:6f:
         83:cc:43:39:fd:be:e2:bb:54:ae:62:69:8a:66:7b:8c:ba:17:
         f6:06:2f:6f:42:46:15:91:a1:b4:f5:76:23:c1:20:1c:37:fd:
         be:70:28:39:75:33:6b:5f:fe:d9:ba:65:14:ca:51:86:47:ad:
         cf:cf:7e:7b:38:82:6f:84:c1:ca:70:9b:9e:c9:26:40:83:44:
         6a:a9:4c:12:1e:12:63:31:d7:6c:12:24:56:5c:7e:d1:f0:ac:
         66:13:e0:a4:df:b0:49:df:25:5c:bf:b9:12:8d:2b:72:1b:c6:
         0d:4b:13:a1:1d:e3:7b:b9:9e:40:3c:a4:51:4e:cc:98:77:a9:
         b9:a8:8e:cb:d8:fd:24:b6:88:ff:f0:d6:ac:5b:dc:59:e9:9f:
         91:e1:26:7c:3d:80:2f:9d:fd:58:71:35:f1:b2:7f:3a:0f:e6:
         f7:60:1e:27:98:b7:0c:86:bf:6f:5a:40:2a:5f:c2:68:d2:99:
         03:c9:9d:e6:d6:55:12:e5:0a:0d:5c:91:df:3b:2d:a4:46:d4:
         e0:25:5a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6zbyl1ZTXYWHvVgsgKGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjNkMTA0MGMwNWYwOTlmYjRmZWRiNDk4YmI0YTE0ODMy
Nzk4ZmEwHhcNMjYwMjA5MTUwMDM3WhcNMjYwMjEwMTUwMDM3WjAzMTEwLwYDVQQD
EyhiNjNmZTA2OWI2ODI1NWVlYmIwZGRlMzM3YmY5ZDIzMTU2OGQwYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKM6IKXLWnqwEI+NRHHLmylHFkzp
bL++mUS8g9N5UDR26yuJAnZ0i66LGB79OCXXqSzBZkdcc0uReDCWCUoHbP7pC1Av
nkBx3HoGPWhf9rLTwjQSGRjIaB798nQatkJjE9jZRigtWahWFqAaQPCeeX+ufMie
BPHRRTLh+dJKZzuzfd5Djt9UmDQnzebgfFkG2ShEDClCbQzbOYIHPvKEGmk+15UX
ID1hvZk4HpnpTl5++rWX+A7h2SVOwx0BGzfjaC9A2E9r7a4LhP9wedR9t69hoFw0
QA3Ycfd7SwQ7hB9mGTE5Jk+57rpAX1ytkQHlLQKpbanI1NDmqUZYmtpAFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY/4Gm2glXuuw3eM3v50jFWjQwSMB8GA1UdIwQY
MBaAFJkj0QQMBfCZ+0/ttJi7ShSDJ5j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMt
MjA2ZTgyMzM2Y2RlLzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMtMjA2ZTgyMzM2Y2Rl
LzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXKF1Wm8
jtHdxF2zysgIT+fkbYafclAtUFXDXwFMt0AzSI/68FGyPVlcK9qZ9VQlhPME/XNv
g8xDOf2+4rtUrmJpimZ7jLoX9gYvb0JGFZGhtPV2I8EgHDf9vnAoOXUza1/+2bpl
FMpRhketz89+eziCb4TBynCbnskmQINEaqlMEh4SYzHXbBIkVlx+0fCsZhPgpN+w
Sd8lXL+5Eo0rchvGDUsToR3je7meQDykUU7MmHepuaiOy9j9JLaI//DWrFvcWemf
keEmfD2AL539WHE18bJ/Og/m92AeJ5i3DIa/b1pAKl/CaNKZA8md5tZVEuUKDVyR
3zstpEbU4CVaBw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:52 2026 by rpki-client