This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File:                     v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier:          nVcL68tZedzEdmKPvGrwEkyYwIYBJt/Q0sTrgZfzQP0=
Subject key identifier:   37:3D:51:57:90:85:8E:3C:D4:CF:83:46:71:AF:89:3A:0F:72:01:25
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer:       /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial:       019C4246CCA5BDE56356C0464160AFB3FAF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number:          1394
Signing time:             Mon 09 Feb 2026 12:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 12:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 12:01:01 +0000
Files and hashes:         1: 14VladBUxqaqZ-NNE8ER_uSwfHc.roa (hash: SrYCafFoP0SWSKgNsDYvBDk2UieF1/jSU5NqyuCubYM=)
                          2: otTbYOYedxsaU18vozv7H0qaULY.roa (hash: 0z94Z3PKNajsqszNsKqEJ/uzjuVZiI+UT7U7HnELbf8=)
                          3: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: msxhcCh1tW7mUZE2xT//tv2gLtwwXib2+WAZAPrLuVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:cc:a5:bd:e5:63:56:c0:46:41:60:af:b3:fa:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
        Validity
            Not Before: Feb  9 12:01:01 2026 GMT
            Not After : Feb 10 12:01:01 2026 GMT
        Subject: CN=373d515790858e3cd4cf834671af893a0f720125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:da:da:77:a5:86:5a:93:1d:48:b6:ef:b2:
                    48:70:e6:d3:57:7f:19:81:5b:4a:f0:1a:5a:cb:15:
                    f7:ed:55:e8:35:a7:e2:92:b2:61:85:55:68:aa:3b:
                    86:1d:4d:de:6c:64:78:87:f4:00:7c:7e:62:4e:89:
                    03:de:d9:4e:0a:24:09:64:87:8c:ed:72:b5:19:56:
                    2e:b0:da:96:74:ac:cd:72:96:e2:88:d4:a2:3c:ca:
                    20:d9:04:04:ae:2f:71:d0:38:f4:81:b4:ab:b6:2d:
                    61:af:a9:1c:bd:a8:ae:94:a1:d2:60:9e:c1:41:1c:
                    d5:42:82:7c:07:cf:37:6e:57:4a:3a:b1:2f:8e:de:
                    4f:ce:7d:0e:60:94:7c:cb:4a:6e:c1:99:f7:4f:ef:
                    90:8d:3b:94:c3:ae:8d:26:e0:b9:00:3b:7e:94:bb:
                    03:bd:82:f9:0b:77:97:3e:d7:b4:f4:d5:93:87:15:
                    f9:e9:f5:0f:a4:e4:45:ff:d9:8e:dd:53:bf:cf:07:
                    74:e7:a5:30:75:43:67:8a:0e:2e:53:27:4a:6f:98:
                    28:c9:1b:a9:29:9d:82:b2:c2:a2:20:3c:37:61:4f:
                    84:4e:d4:3f:ca:be:3a:61:e0:26:37:09:a3:fb:74:
                    d3:5e:62:44:28:85:2d:d1:fe:12:66:bd:20:8c:43:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3D:51:57:90:85:8E:3C:D4:CF:83:46:71:AF:89:3A:0F:72:01:25
            X509v3 Authority Key Identifier:
                keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:39:f7:1e:43:c8:8e:27:25:64:71:1a:5f:81:0c:ed:5e:
         12:c6:3b:2c:64:7c:c7:65:d6:0a:f0:09:82:87:a8:38:03:b1:
         a1:20:49:c7:b8:83:45:66:36:7e:87:4b:cc:00:ea:34:0d:32:
         c9:89:e4:d9:fd:e8:b7:04:14:0c:d9:72:00:3b:69:0a:90:dd:
         58:06:36:ad:8f:d7:c2:0f:45:38:9f:90:0c:8e:2b:e8:59:bb:
         8c:10:78:8c:84:50:bb:02:0e:0c:59:d8:6f:55:2f:57:7d:53:
         28:f3:a5:00:14:2c:90:84:00:6a:6a:50:52:0c:af:8b:fc:6a:
         14:d1:db:9c:ba:88:4d:19:c0:cf:0e:c4:bf:67:51:bf:3a:7d:
         bb:87:a1:1c:73:c0:22:f8:28:9b:b2:0d:c5:41:78:16:ed:91:
         54:24:49:f9:50:24:72:6e:fc:3c:2a:e0:67:1a:fb:2b:77:93:
         5d:2a:02:54:c6:f4:7e:26:54:e4:af:ad:53:3a:07:a5:ec:5d:
         a0:74:da:a6:7b:17:3e:23:dc:9a:b4:45:60:61:58:dc:b4:42:
         f5:69:a4:8d:74:f2:34:bd:85:31:dc:f8:5e:56:21:7d:a5:66:
         a0:67:c2:bd:b7:d7:85:91:41:41:e7:0a:af:bd:da:c7:f9:03:
         ec:02:4d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRsylveVjVsBGQWCvs/rzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc4NmIyNGI0YjMwMjc1YmNjOGQ1MjQ0ZTM0ZWUwMDQ4
MWQ3OTAwHhcNMjYwMjA5MTIwMTAxWhcNMjYwMjEwMTIwMTAxWjAzMTEwLwYDVQQD
EygzNzNkNTE1NzkwODU4ZTNjZDRjZjgzNDY3MWFmODkzYTBmNzIwMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEra2nelhlqTHUi277JIcObTV38Z
gVtK8BpayxX37VXoNafikrJhhVVoqjuGHU3ebGR4h/QAfH5iTokD3tlOCiQJZIeM
7XK1GVYusNqWdKzNcpbiiNSiPMog2QQEri9x0Dj0gbSrti1hr6kcvaiulKHSYJ7B
QRzVQoJ8B883bldKOrEvjt5Pzn0OYJR8y0puwZn3T++QjTuUw66NJuC5ADt+lLsD
vYL5C3eXPte09NWThxX56fUPpORF/9mO3VO/zwd056UwdUNnig4uUydKb5goyRup
KZ2CssKiIDw3YU+ETtQ/yr46YeAmNwmj+3TTXmJEKIUt0f4SZr0gjEMPhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc9UVeQhY481M+DRnGviToPcgElMB8GA1UdIwQY
MBaAFL/XhrJLSzAnW8yNUkTjTuAEgdeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5Yjct
MWExZjkzNjQ1NGVjLzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5YjctMWExZjkzNjQ1NGVj
LzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8o59x5D
yI4nJWRxGl+BDO1eEsY7LGR8x2XWCvAJgoeoOAOxoSBJx7iDRWY2fodLzADqNA0y
yYnk2f3otwQUDNlyADtpCpDdWAY2rY/Xwg9FOJ+QDI4r6Fm7jBB4jIRQuwIODFnY
b1UvV31TKPOlABQskIQAampQUgyvi/xqFNHbnLqITRnAzw7Ev2dRvzp9u4ehHHPA
Ivgom7INxUF4Fu2RVCRJ+VAkcm78PCrgZxr7K3eTXSoCVMb0fiZU5K+tUzoHpexd
oHTapnsXPiPcmrRFYGFY3LRC9WmkjXTyNL2FMdz4XlYhfaVmoGfCvbfXhZFBQecK
r73ax/kD7AJNig==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:12 2026 by rpki-client