This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File:                     INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier:          +BcM5PpZqbiclt4Ep3N8wXKiINAwAUzUimnC12BGVfo=
Subject key identifier:   19:00:DE:E1:45:3F:90:1D:E7:EA:67:1D:8F:C4:BA:38:3D:3C:92:BA
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer:       /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial:       019C446C49505E9FCBDA6774DF7A1A51BE6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number:          0C89
Signing time:             Mon 09 Feb 2026 22:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:13 +0000
Files and hashes:         1: 0qLd6qJExCvSjydiJaKIdzUIOv8.roa (hash: DaQxlNBSMrQyDUoUIX1mIQesMA6875WgZdP3i+f9HgE=)
                          2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: qaf5ZQSU8o33qUttiWMj2tYp9ufRGA0GplcdMeEjuxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:49:50:5e:9f:cb:da:67:74:df:7a:1a:51:be:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
        Validity
            Not Before: Feb  9 22:01:13 2026 GMT
            Not After : Feb 10 22:01:13 2026 GMT
        Subject: CN=1900dee1453f901de7ea671d8fc4ba383d3c92ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a6:30:e0:b4:37:b6:36:a3:55:d5:65:2d:62:
                    a1:e1:77:67:83:31:8a:33:d1:51:eb:43:5d:1d:43:
                    f5:09:4b:b1:ae:d1:7f:20:18:ff:21:01:47:3d:66:
                    30:9a:b2:60:10:e4:cd:3f:fd:c3:e9:03:55:2c:d4:
                    44:78:b3:72:d2:66:21:79:bf:e7:2c:a9:7d:6f:b4:
                    57:35:f5:47:f4:f0:25:e1:1b:d3:68:d2:84:50:d1:
                    0a:4d:ed:35:b0:53:97:b5:36:cd:7d:dd:20:a3:f6:
                    0c:1f:88:11:d4:b9:bf:54:c8:9b:6b:ea:f1:b1:bc:
                    85:34:a5:41:6c:e6:29:9c:f2:24:c0:db:f8:a7:13:
                    d9:e5:6e:6a:b1:d6:54:1e:7a:0d:a4:fa:69:15:69:
                    17:03:bc:b7:51:41:fb:f5:78:b0:30:ed:65:ea:d4:
                    c5:6f:53:9c:18:f5:f4:4f:69:8a:12:fe:c2:9f:8d:
                    b8:21:bd:2c:ac:1c:29:70:5f:bf:5f:63:e7:c7:97:
                    59:77:7a:b0:24:ea:70:89:0c:13:d8:73:82:05:b6:
                    fd:11:db:59:fe:94:00:5e:6b:00:5d:60:df:65:4e:
                    8c:d6:df:f6:fe:7a:7f:02:9e:07:45:01:c8:49:c8:
                    f3:c6:06:64:10:2e:84:a6:4b:6d:e0:92:c7:03:16:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:00:DE:E1:45:3F:90:1D:E7:EA:67:1D:8F:C4:BA:38:3D:3C:92:BA
            X509v3 Authority Key Identifier:
                keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:39:c8:59:f6:9d:a6:2c:81:44:65:89:ed:c6:e2:d5:34:e0:
         7a:0c:7a:44:6e:10:70:98:d9:8e:62:3b:17:55:85:8d:04:82:
         9b:04:82:ff:c9:68:09:cc:c1:a6:1a:5c:3e:05:b5:eb:36:13:
         7c:93:20:cb:7d:25:33:5b:fc:54:43:0e:09:e8:d2:95:73:64:
         d9:29:9e:58:1e:de:2c:a9:3e:36:fa:6e:2b:2a:0b:97:f4:1e:
         48:9f:57:d2:76:27:06:8d:15:b5:6a:2e:25:a2:3a:2a:69:a6:
         d2:39:cf:e5:0a:9a:2b:dc:c3:c4:7e:67:c2:d0:a8:98:c3:7c:
         07:a6:b8:f2:f8:a4:fb:28:2e:6a:64:d9:c4:b5:b9:38:e3:a4:
         b1:ca:89:25:71:35:10:23:08:d1:a0:b7:e1:ab:85:98:9d:28:
         f4:b7:7b:8f:e1:f7:ab:d4:e7:06:d6:35:ca:68:60:8e:9b:f4:
         1f:a0:43:15:13:14:32:b5:e6:ef:ea:7c:f3:92:af:97:8e:cb:
         13:b0:a2:7f:97:d3:0c:69:f1:5a:05:67:6e:3b:c5:f6:e7:c4:
         9e:95:25:26:7e:fd:61:ff:52:00:37:51:26:5e:db:dc:80:21:
         3f:ea:7a:6a:69:90:7e:b8:1c:5e:cc:30:7a:b0:81:0d:52:aa:
         37:b9:24:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbElQXp/L2md033oaUb5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDI2MzNiZmZiMTZkYTJkNzVlZGFmNDliYzgyMTE4N2Nm
Yjg4ZWYwHhcNMjYwMjA5MjIwMTEzWhcNMjYwMjEwMjIwMTEzWjAzMTEwLwYDVQQD
EygxOTAwZGVlMTQ1M2Y5MDFkZTdlYTY3MWQ4ZmM0YmEzODNkM2M5MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16Yw4LQ3tjajVdVlLWKh4XdngzGK
M9FR60NdHUP1CUuxrtF/IBj/IQFHPWYwmrJgEOTNP/3D6QNVLNREeLNy0mYheb/n
LKl9b7RXNfVH9PAl4RvTaNKEUNEKTe01sFOXtTbNfd0go/YMH4gR1Lm/VMiba+rx
sbyFNKVBbOYpnPIkwNv4pxPZ5W5qsdZUHnoNpPppFWkXA7y3UUH79XiwMO1l6tTF
b1OcGPX0T2mKEv7Cn424Ib0srBwpcF+/X2Pnx5dZd3qwJOpwiQwT2HOCBbb9EdtZ
/pQAXmsAXWDfZU6M1t/2/np/Ap4HRQHIScjzxgZkEC6Epktt4JLHAxYLKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkA3uFFP5Ad5+pnHY/Eujg9PJK6MB8GA1UdIwQY
MBaAFCDSYzv/sW2i117a9JvIIRh8+4jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAt
MWNkNmM4NzFjMWU4LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAtMWNkNmM4NzFjMWU4
LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjnIWfad
piyBRGWJ7cbi1TTgegx6RG4QcJjZjmI7F1WFjQSCmwSC/8loCczBphpcPgW16zYT
fJMgy30lM1v8VEMOCejSlXNk2SmeWB7eLKk+NvpuKyoLl/QeSJ9X0nYnBo0VtWou
JaI6Kmmm0jnP5QqaK9zDxH5nwtComMN8B6a48vik+yguamTZxLW5OOOkscqJJXE1
ECMI0aC34auFmJ0o9Ld7j+H3q9TnBtY1ymhgjpv0H6BDFRMUMrXm7+p885Kvl47L
E7Cif5fTDGnxWgVnbjvF9ufEnpUlJn79Yf9SADdRJl7b3IAhP+p6ammQfrgcXsww
erCBDVKqN7kkQw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:34 2026 by rpki-client