This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File:                     maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier:          fVjdKOk9oCtPxnH3gOh/HkZB+1t199oC0q8n7dqSxOI=
Subject key identifier:   95:DA:E3:D6:87:4B:6F:60:4B:A9:4E:62:33:EB:1C:F6:29:46:50:BA
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer:       /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial:       019C42EB5B18E26EE294B26E5DF09F24D6DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number:          0F25
Signing time:             Mon 09 Feb 2026 15:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:46 +0000
Files and hashes:         1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
                          2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
                          3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: tylRn+kbyjHCOM3Kl/pRi93kEmWDmJ3sPhXT2SDJU4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:5b:18:e2:6e:e2:94:b2:6e:5d:f0:9f:24:d6:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
        Validity
            Not Before: Feb  9 15:00:46 2026 GMT
            Not After : Feb 10 15:00:46 2026 GMT
        Subject: CN=95dae3d6874b6f604ba94e6233eb1cf6294650ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:15:fd:7b:3e:78:29:7e:1b:dc:b2:48:c0:e5:
                    df:54:e9:bf:d9:10:cf:a3:73:3c:cd:a1:bd:99:8e:
                    59:27:bd:61:dd:a9:61:ad:af:ea:26:14:33:de:90:
                    60:e6:5f:69:6e:ab:08:c1:a8:37:5d:78:d7:c2:31:
                    f3:57:43:41:0b:a4:b5:f1:53:08:72:91:5e:e5:4b:
                    05:13:ca:e8:02:9c:3c:04:ea:6b:79:a1:1c:b9:bc:
                    95:bd:47:a2:ee:66:09:d0:bc:82:26:16:15:d2:f7:
                    f0:ab:b9:29:e9:cc:18:45:fb:ac:b6:4a:ce:c5:29:
                    f7:13:2d:2f:56:e3:fb:d4:80:bc:25:c1:6c:93:69:
                    d9:9d:58:79:7a:58:48:03:d4:af:40:54:53:ab:09:
                    0d:51:08:ad:74:09:8e:67:e1:f7:dc:f6:03:8d:78:
                    84:4c:95:8f:4d:59:84:c4:6b:9d:2a:ab:7c:44:16:
                    ca:a0:bb:c1:28:85:20:ac:3b:fd:a9:16:5a:67:45:
                    ee:7a:37:27:38:73:85:69:5f:b3:bc:af:ad:ed:2a:
                    f7:b4:87:4d:83:fe:7d:3b:c0:9a:95:1a:58:53:9a:
                    e0:cb:aa:3a:53:68:a2:91:81:a5:ce:03:75:b0:98:
                    91:77:38:63:c2:61:e1:8b:e6:de:4d:38:53:f9:da:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DA:E3:D6:87:4B:6F:60:4B:A9:4E:62:33:EB:1C:F6:29:46:50:BA
            X509v3 Authority Key Identifier:
                keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:99:43:98:78:36:7f:50:7b:ae:4a:1a:26:75:9a:a9:83:
         b3:be:a4:a1:9f:a7:41:f7:32:44:56:09:b1:1c:b5:a1:8b:1c:
         19:d2:b0:e9:88:74:53:9b:ef:73:b5:66:ee:4a:b1:f7:6a:be:
         3e:4e:f0:05:8d:9b:eb:fb:57:f5:22:d5:08:b9:56:64:92:2a:
         6c:fb:ff:6d:3b:1c:c5:ac:39:76:2d:1c:2c:f1:0c:99:e0:7d:
         63:c4:df:67:6c:f4:76:76:73:18:68:8c:ea:f4:df:93:99:c6:
         88:fd:7f:53:e9:6d:6d:04:88:e8:ad:d0:06:d2:e5:ce:db:9d:
         9e:d4:ea:25:b8:1f:99:18:87:12:07:ec:fe:e6:8e:77:81:01:
         46:05:7f:2c:7b:29:00:2a:e6:76:2e:43:aa:1f:63:c0:8d:6d:
         8e:02:95:6f:a9:90:dc:4b:a7:fb:80:ab:fb:19:65:ea:80:94:
         32:d7:4a:2b:19:24:78:0f:5d:67:b0:42:94:bf:e2:ae:d4:89:
         e6:6c:9a:57:4e:83:66:99:35:0e:89:b9:3d:88:d2:78:4f:51:
         f8:a3:9d:65:ff:8e:21:32:41:74:69:d9:53:e2:39:c0:1d:b8:
         b0:c0:12:91:0e:c8:6b:e5:a1:f6:9a:12:d3:98:44:81:e0:47:
         53:9d:4d:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC61sY4m7ilLJuXfCfJNbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2
YTA1YmIwHhcNMjYwMjA5MTUwMDQ2WhcNMjYwMjEwMTUwMDQ2WjAzMTEwLwYDVQQD
Eyg5NWRhZTNkNjg3NGI2ZjYwNGJhOTRlNjIzM2ViMWNmNjI5NDY1MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hX9ez54KX4b3LJIwOXfVOm/2RDP
o3M8zaG9mY5ZJ71h3alhra/qJhQz3pBg5l9pbqsIwag3XXjXwjHzV0NBC6S18VMI
cpFe5UsFE8roApw8BOpreaEcubyVvUei7mYJ0LyCJhYV0vfwq7kp6cwYRfustkrO
xSn3Ey0vVuP71IC8JcFsk2nZnVh5elhIA9SvQFRTqwkNUQitdAmOZ+H33PYDjXiE
TJWPTVmExGudKqt8RBbKoLvBKIUgrDv9qRZaZ0XuejcnOHOFaV+zvK+t7Sr3tIdN
g/59O8CalRpYU5rgy6o6U2iikYGlzgN1sJiRdzhjwmHhi+beTThT+docMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXa49aHS29gS6lOYjPrHPYpRlC6MB8GA1UdIwQY
MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt
MmQ5NTM2MDBmZjM3LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3
LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaCZQ5h4
Nn9Qe65KGiZ1mqmDs76koZ+nQfcyRFYJsRy1oYscGdKw6Yh0U5vvc7Vm7kqx92q+
Pk7wBY2b6/tX9SLVCLlWZJIqbPv/bTscxaw5di0cLPEMmeB9Y8TfZ2z0dnZzGGiM
6vTfk5nGiP1/U+ltbQSI6K3QBtLlztudntTqJbgfmRiHEgfs/uaOd4EBRgV/LHsp
ACrmdi5Dqh9jwI1tjgKVb6mQ3Eun+4Cr+xll6oCUMtdKKxkkeA9dZ7BClL/irtSJ
5myaV06DZpk1Dom5PYjSeE9R+KOdZf+OITJBdGnZU+I5wB24sMASkQ7Ia+Wh9poS
05hEgeBHU51NSg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:36 2026 by rpki-client