This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
File:                     j493R7eqBqdUJRZiDt45nQHlx-Q.mft (raw, json)
Hash identifier:          vldW4g/bzY3rdnM0DSMsiBA+ON8SLo4K1lvKkd/yRLc=
Subject key identifier:   F6:4B:58:15:40:1A:E8:5E:DF:87:CB:F6:9E:9C:42:37:D7:C3:29:98
Authority key identifier: 8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4
Certificate issuer:       /CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4
Certificate serial:       019C4390120926B5326879D7A45F90086FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
Manifest number:          014F
Signing time:             Mon 09 Feb 2026 18:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:41 +0000
Files and hashes:         1: ggsIrEG_pjBN7NymXoDR3lMKSmc.roa (hash: NRoN77G1sKo2JMNbfCRILKnaLnywaXx2abNeVRqQfhI=)
                          2: j493R7eqBqdUJRZiDt45nQHlx-Q.crl (hash: 14s+bEEA+RBAi9S10lXOUTt+lZbYRfVQFIXi7c/S1BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:12:09:26:b5:32:68:79:d7:a4:5f:90:08:6f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4
        Validity
            Not Before: Feb  9 18:00:41 2026 GMT
            Not After : Feb 10 18:00:41 2026 GMT
        Subject: CN=f64b5815401ae85edf87cbf69e9c4237d7c32998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:8b:59:68:f4:9f:61:c3:ce:1c:ec:eb:95:
                    8b:7e:4d:0a:8a:9e:a4:ea:07:59:7a:53:42:0c:55:
                    ab:3e:81:e2:b2:13:40:8f:a3:7e:d0:11:6e:37:c0:
                    54:76:e5:41:81:6f:63:a6:f4:bc:f4:ab:a3:cb:b0:
                    2f:4a:9b:64:4c:d2:b7:e7:00:dc:c8:90:17:7f:43:
                    9c:ca:62:f0:f6:94:d8:35:6c:58:45:e8:33:b6:99:
                    41:73:28:41:47:0d:ce:fc:48:ab:ab:3b:d0:82:73:
                    99:a9:3a:0f:6a:a7:f1:7e:17:b6:74:1d:9e:52:5e:
                    cb:02:de:fa:44:f6:1e:3f:7e:3c:e4:7c:19:69:d2:
                    27:58:9f:ad:53:f1:dc:59:80:12:92:fd:a5:a5:c7:
                    61:2e:ce:d4:0a:d1:a8:a7:da:57:5c:c0:a1:a3:3d:
                    76:c3:c9:b4:c9:a9:c0:b7:7c:e5:29:d6:97:e2:73:
                    da:6a:f9:70:77:ec:d3:59:99:f0:3b:50:be:b0:48:
                    64:f0:44:e5:dc:94:38:92:63:d9:32:95:05:c8:5d:
                    70:e2:29:76:13:a1:99:35:db:09:fd:cd:44:6d:a1:
                    4b:c9:a4:b8:30:5a:3c:5c:2f:0c:ac:58:77:82:c9:
                    02:9b:42:f6:43:14:fe:8b:ae:6f:3d:a6:a7:4c:f6:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:58:15:40:1A:E8:5E:DF:87:CB:F6:9E:9C:42:37:D7:C3:29:98
            X509v3 Authority Key Identifier:
                keyid:8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:c0:0e:00:e1:cc:13:05:e8:e9:f0:55:7b:89:d1:40:46:
         94:e3:59:7b:c4:c4:f6:83:46:e0:77:98:c2:14:5a:c7:83:3c:
         3c:e7:3a:72:e7:62:f3:aa:cb:20:46:86:e2:5d:e6:d0:e8:53:
         d8:84:04:62:cd:af:ba:c4:e7:7d:fc:97:ba:47:a1:e8:97:4e:
         e1:5d:c7:62:08:d9:37:fd:df:47:3a:56:65:81:2e:cb:56:17:
         de:6a:ad:05:a6:32:1b:11:ca:67:8b:04:83:fa:71:0e:d8:ad:
         b1:66:8b:d7:9d:d8:d0:f3:25:91:49:c7:09:01:cf:86:70:70:
         c0:81:2f:72:28:07:56:6f:1e:46:8a:02:dd:58:b8:9b:7f:bc:
         f8:15:0b:1c:94:5f:f0:6a:c5:0d:65:2b:1e:d3:22:70:8f:5a:
         de:c4:c4:49:69:88:e2:50:3b:dc:e9:75:e4:27:c4:13:a9:17:
         af:3d:0e:cd:11:1d:a2:0e:3a:f5:27:03:f8:67:5f:55:c6:1b:
         2b:63:1f:71:af:5c:ab:0d:68:0b:87:79:04:12:0a:a8:b3:19:
         18:84:16:ed:16:70:e0:67:fe:c4:fc:85:f9:c1:c2:f0:fd:f1:
         9a:5d:22:87:a6:4c:37:62:b5:5b:a1:4f:de:4e:49:aa:06:6e:
         93:82:bd:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkBIJJrUyaHnXpF+QCG/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOGY3NzQ3YjdhYTA2YTc1NDI1MTY2MjBlZGUzOTlkMDFl
NWM3ZTQwHhcNMjYwMjA5MTgwMDQxWhcNMjYwMjEwMTgwMDQxWjAzMTEwLwYDVQQD
EyhmNjRiNTgxNTQwMWFlODVlZGY4N2NiZjY5ZTljNDIzN2Q3YzMyOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymaLWWj0n2HDzhzs65WLfk0Kip6k
6gdZelNCDFWrPoHishNAj6N+0BFuN8BUduVBgW9jpvS89Kujy7AvSptkTNK35wDc
yJAXf0OcymLw9pTYNWxYRegztplBcyhBRw3O/EirqzvQgnOZqToPaqfxfhe2dB2e
Ul7LAt76RPYeP3485HwZadInWJ+tU/HcWYASkv2lpcdhLs7UCtGop9pXXMChoz12
w8m0yanAt3zlKdaX4nPaavlwd+zTWZnwO1C+sEhk8ETl3JQ4kmPZMpUFyF1w4il2
E6GZNdsJ/c1EbaFLyaS4MFo8XC8MrFh3gskCm0L2QxT+i65vPaanTPYNqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZLWBVAGuhe34fL9p6cQjfXwymYMB8GA1UdIwQY
MBaAFI+Pd0e3qganVCUWYg7eOZ0B5cfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajQ5M1I3ZXFCcWRVSlJaaUR0NDVuUUhseC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83YmViOWUtMDE0MS00ODI1LTlhMTgt
Y2JlNDc1ZDMyYzYzLzEvajQ5M1I3ZXFCcWRVSlJaaUR0NDVuUUhseC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83YmViOWUtMDE0MS00ODI1LTlhMTgtY2JlNDc1ZDMyYzYz
LzEvajQ5M1I3ZXFCcWRVSlJaaUR0NDVuUUhseC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcvADgDh
zBMF6OnwVXuJ0UBGlONZe8TE9oNG4HeYwhRax4M8POc6cudi86rLIEaG4l3m0OhT
2IQEYs2vusTnffyXukeh6JdO4V3HYgjZN/3fRzpWZYEuy1YX3mqtBaYyGxHKZ4sE
g/pxDtitsWaL153Y0PMlkUnHCQHPhnBwwIEvcigHVm8eRooC3Vi4m3+8+BULHJRf
8GrFDWUrHtMicI9a3sTESWmI4lA73Ol15CfEE6kXrz0OzREdog469ScD+GdfVcYb
K2Mfca9cqw1oC4d5BBIKqLMZGIQW7RZw4Gf+xPyF+cHC8P3xml0ih6ZMN2K1W6FP
3k5JqgZuk4K9Wg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:21 2026 by rpki-client