This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
File:                     rYY6WJMusYMjlBahz2ao_8POchU.mft (raw, json)
Hash identifier:          g+m3V0J1WTj9fMY5K7baX3Z+6wINjZH3J5BYBvRipJw=
Subject key identifier:   8A:6C:1F:81:0D:43:26:13:01:36:B9:56:DD:9A:47:92:4E:90:35:52
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Certificate issuer:       /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial:       019C42EAE6670F4044FDFAB0ACCDDD1538E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
Manifest number:          0F02
Signing time:             Mon 09 Feb 2026 15:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:16 +0000
Files and hashes:         1: rYY6WJMusYMjlBahz2ao_8POchU.crl (hash: AZZE5grprxJ8EM4g+lV8FsiYbf3tv/UiBm5vrwYm/WM=)
                          2: zdseOPWgg2lI8B3aFn07MpAjRqU.roa (hash: YqWsQFGJ8i94tJHUWkQ69hRrtwrZJWfCWmhdU6kJ5iQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:e6:67:0f:40:44:fd:fa:b0:ac:cd:dd:15:38:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
        Validity
            Not Before: Feb  9 15:00:16 2026 GMT
            Not After : Feb 10 15:00:16 2026 GMT
        Subject: CN=8a6c1f810d4326130136b956dd9a47924e903552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:d3:d4:b2:e4:8e:41:05:c2:73:2d:bb:0e:
                    5b:e3:bf:af:79:a6:11:17:3e:23:6f:9c:bb:6b:c2:
                    43:88:f1:4b:81:43:17:78:6c:19:46:70:98:a2:a7:
                    21:c8:15:5e:6f:01:e9:1f:aa:ae:e7:7a:be:95:c2:
                    72:78:a2:06:53:58:6f:c3:de:7d:d8:d4:8c:b8:43:
                    c2:53:03:28:d4:da:48:26:28:15:fb:d5:99:e3:34:
                    a8:78:65:e8:49:f8:cd:c7:59:0e:49:ec:09:03:0a:
                    a7:2b:d9:76:30:e6:ca:06:ae:be:95:b0:ed:68:92:
                    59:c1:b4:f0:21:33:a2:ad:af:7e:be:92:e3:64:80:
                    1a:09:4f:8f:25:87:df:d3:de:9b:18:39:ee:92:00:
                    96:f1:95:fe:e5:10:f1:72:e7:5e:d8:21:ca:d1:8a:
                    56:d8:98:a3:e9:3e:f5:db:0e:fa:17:3b:ec:b3:30:
                    fe:b2:e9:ad:15:81:66:78:ae:de:30:fc:da:5d:b1:
                    d2:b9:6b:64:69:96:bd:e1:31:23:d3:38:1b:2b:2a:
                    38:0b:5e:aa:f2:39:6c:f3:cb:81:45:3d:5d:14:e7:
                    e6:b2:79:fd:53:35:cb:c2:7f:3c:2c:17:4e:ec:8f:
                    76:95:b6:b2:4a:11:0c:aa:85:56:c2:39:43:fc:2a:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6C:1F:81:0D:43:26:13:01:36:B9:56:DD:9A:47:92:4E:90:35:52
            X509v3 Authority Key Identifier:
                keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:65:d6:a2:a3:1a:84:b1:61:4e:78:4b:6d:69:aa:27:61:bd:
         94:b4:b1:37:cb:54:c6:35:85:d2:d9:3b:e1:ab:61:45:22:1c:
         7f:8c:73:5f:0f:e8:45:5e:0b:db:e9:9f:06:7e:41:f0:41:c0:
         6e:06:09:37:9c:9a:a2:f0:ba:ad:25:0c:d5:77:7f:7a:02:2d:
         e5:83:af:c2:3c:ae:25:a3:c5:46:70:3a:e7:08:c9:06:7b:c8:
         63:52:44:e9:9b:3e:7e:e4:30:dd:65:3b:5c:58:b2:91:94:36:
         83:b7:af:d6:b5:dc:8b:21:29:96:01:d0:09:4f:ee:af:da:66:
         4c:07:00:03:3c:80:aa:05:cb:17:ec:67:79:e2:0c:98:ae:dd:
         56:ee:9f:e0:9b:ec:16:52:93:58:b0:f8:eb:ea:f6:db:c9:c4:
         8f:b6:85:7e:a4:a3:17:52:5c:e4:08:71:16:50:3c:60:42:2b:
         36:11:7c:80:b2:43:02:dc:67:99:19:9a:cf:7a:8d:61:b6:60:
         f4:5d:58:7c:c5:1f:cc:6b:bd:63:0d:db:de:15:a8:9d:0b:6b:
         22:47:b4:c1:89:5c:5f:14:b6:79:05:46:2e:d1:69:05:0e:1e:
         59:c5:d4:29:be:2e:d7:0c:ac:67:21:db:2e:4f:57:70:c6:4c:
         f1:2c:19:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6uZnD0BE/fqwrM3dFTjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODYzYTU4OTMyZWIxODMyMzk0MTZhMWNmNjZhOGZmYzNj
ZTcyMTUwHhcNMjYwMjA5MTUwMDE2WhcNMjYwMjEwMTUwMDE2WjAzMTEwLwYDVQQD
Eyg4YTZjMWY4MTBkNDMyNjEzMDEzNmI5NTZkZDlhNDc5MjRlOTAzNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfT1LLkjkEFwnMtuw5b47+veaYR
Fz4jb5y7a8JDiPFLgUMXeGwZRnCYoqchyBVebwHpH6qu53q+lcJyeKIGU1hvw959
2NSMuEPCUwMo1NpIJigV+9WZ4zSoeGXoSfjNx1kOSewJAwqnK9l2MObKBq6+lbDt
aJJZwbTwITOira9+vpLjZIAaCU+PJYff096bGDnukgCW8ZX+5RDxcude2CHK0YpW
2Jij6T712w76FzvsszD+sumtFYFmeK7eMPzaXbHSuWtkaZa94TEj0zgbKyo4C16q
8jls88uBRT1dFOfmsnn9UzXLwn88LBdO7I92lbayShEMqoVWwjlD/Co65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpsH4ENQyYTATa5Vt2aR5JOkDVSMB8GA1UdIwQY
MBaAFK2GOliTLrGDI5QWoc9mqP/DznIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC82YWQ2NzUtYzQ5Yi00NzhhLWJhNjAt
M2I4ZTU2MWRjMjc2LzEvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC82YWQ2NzUtYzQ5Yi00NzhhLWJhNjAtM2I4ZTU2MWRjMjc2
LzEvcllZNldKTXVzWU1qbEJhaHoyYW9fOFBPY2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWXWoqMa
hLFhTnhLbWmqJ2G9lLSxN8tUxjWF0tk74athRSIcf4xzXw/oRV4L2+mfBn5B8EHA
bgYJN5yaovC6rSUM1Xd/egIt5YOvwjyuJaPFRnA65wjJBnvIY1JE6Zs+fuQw3WU7
XFiykZQ2g7ev1rXciyEplgHQCU/ur9pmTAcAAzyAqgXLF+xneeIMmK7dVu6f4Jvs
FlKTWLD46+r228nEj7aFfqSjF1Jc5AhxFlA8YEIrNhF8gLJDAtxnmRmaz3qNYbZg
9F1YfMUfzGu9Yw3b3hWonQtrIke0wYlcXxS2eQVGLtFpBQ4eWcXUKb4u1wysZyHb
Lk9XcMZM8SwZGA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:45 2026 by rpki-client