This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File:                     5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier:          r7rfswsphJz1vrcd/gbA21pfFx1SiKzEdgCMxTFgBQA=
Subject key identifier:   15:3B:C3:5B:F0:F6:7A:39:E7:9E:92:DF:5C:DF:7E:7C:09:61:39:FD
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer:       /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial:       019C42EB105BC9A92B4705FE45E2709B8B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number:          163C
Signing time:             Mon 09 Feb 2026 15:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:27 +0000
Files and hashes:         1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: fi/vfNvUy92kh4MV3nI6vondU41QLlFF7PwOTHrkWWI=)
                          2: IWYrbXuJb7rdaqwraiq_apy6AMA.roa (hash: abrxD3L91b+QPLIZVyKImnAT+E+aScHR2G4289W+U4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:10:5b:c9:a9:2b:47:05:fe:45:e2:70:9b:8b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
        Validity
            Not Before: Feb  9 15:00:27 2026 GMT
            Not After : Feb 10 15:00:27 2026 GMT
        Subject: CN=153bc35bf0f67a39e79e92df5cdf7e7c096139fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:23:13:5c:af:88:6f:f3:b6:a7:3f:b6:32:
                    7c:42:42:fd:1e:5a:39:cd:19:fd:cd:ca:12:19:f6:
                    bf:43:31:00:e1:05:77:bd:b4:41:c4:e8:ce:05:9a:
                    a2:31:89:3b:ed:eb:e3:0c:b0:48:56:58:7b:a1:7f:
                    79:84:55:33:fb:c9:52:8f:4b:d0:73:39:4b:c7:33:
                    3d:d6:1e:65:c8:ac:63:6c:dd:d0:79:79:dc:91:c0:
                    32:65:a9:62:fa:73:e1:cc:b1:c9:ea:fb:8d:a0:b9:
                    f2:f9:53:e4:f6:87:b4:e1:74:5e:89:0a:a7:74:79:
                    ed:f5:27:f9:ed:18:61:57:cd:05:6f:df:d9:33:97:
                    51:76:89:cd:fa:05:52:b7:21:81:db:e3:00:13:b2:
                    de:8c:ad:6a:c5:9f:63:a9:cb:7a:53:9c:62:ec:72:
                    4d:38:8e:43:6c:27:4a:e2:a0:b9:53:e9:17:6e:e5:
                    68:e2:85:df:63:34:96:1c:ac:73:78:f6:86:4c:f0:
                    30:82:0a:52:1e:52:6a:08:87:5e:ce:0c:04:1b:57:
                    51:7d:df:53:b3:b3:fa:09:db:08:ce:ab:bc:3e:d5:
                    40:41:94:dd:01:4b:41:bf:38:ae:49:fb:28:20:ab:
                    29:3f:2d:5e:d1:4b:57:86:27:b5:d8:8e:79:ca:61:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3B:C3:5B:F0:F6:7A:39:E7:9E:92:DF:5C:DF:7E:7C:09:61:39:FD
            X509v3 Authority Key Identifier:
                keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:41:78:4b:09:01:2e:d4:82:8a:fc:2d:65:b8:cc:69:dc:b7:
         ed:b0:b1:97:73:83:8e:7e:f4:d8:f7:01:af:5b:05:e1:30:67:
         4d:c8:cc:68:d2:10:c0:d4:fa:ab:17:0c:e3:b0:43:80:7e:58:
         01:01:5d:e0:5a:a4:e6:53:a5:c5:57:b1:d7:b3:13:53:da:34:
         05:36:c4:22:67:ca:bc:3c:94:31:eb:c4:b2:51:d0:9b:ac:98:
         ba:1e:d2:05:96:0b:d3:c5:34:fc:b4:e5:9f:cd:81:cf:d9:cb:
         e5:37:7e:d3:28:b3:26:a9:db:f3:03:f5:3a:6e:ca:93:c7:8a:
         12:d8:78:c8:ec:d1:fa:01:14:83:5e:a3:98:97:00:31:18:31:
         c6:a0:88:9d:e7:d2:74:c8:28:07:45:dd:58:7f:2f:25:5e:09:
         ba:88:63:8c:a7:3b:50:6e:71:03:c1:42:86:ef:51:a5:9e:2b:
         52:6d:89:6c:76:c6:a3:b9:0e:bf:02:9a:2e:63:5e:e6:19:6d:
         b5:d4:63:c2:00:e1:79:eb:47:c7:90:e8:f2:d2:97:a2:05:44:
         4c:cd:f8:90:0f:ae:7b:32:92:72:67:1c:3b:9a:34:9c:5c:07:
         c5:a4:7b:15:3f:e4:c7:9b:8d:86:84:e8:9f:6d:f2:7c:af:f5:
         dd:b9:7c:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6xBbyakrRwX+ReJwm4tLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NzVkYTA5Y2QzYWViNGM5MzdjNjNmNTM1ZjMzZmQ1N2Qw
YzIxOTEwHhcNMjYwMjA5MTUwMDI3WhcNMjYwMjEwMTUwMDI3WjAzMTEwLwYDVQQD
EygxNTNiYzM1YmYwZjY3YTM5ZTc5ZTkyZGY1Y2RmN2U3YzA5NjEzOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsngjE1yviG/ztqc/tjJ8QkL9Hlo5
zRn9zcoSGfa/QzEA4QV3vbRBxOjOBZqiMYk77evjDLBIVlh7oX95hFUz+8lSj0vQ
czlLxzM91h5lyKxjbN3QeXnckcAyZali+nPhzLHJ6vuNoLny+VPk9oe04XReiQqn
dHnt9Sf57RhhV80Fb9/ZM5dRdonN+gVStyGB2+MAE7LejK1qxZ9jqct6U5xi7HJN
OI5DbCdK4qC5U+kXbuVo4oXfYzSWHKxzePaGTPAwggpSHlJqCIdezgwEG1dRfd9T
s7P6CdsIzqu8PtVAQZTdAUtBvziuSfsoIKspPy1e0UtXhie12I55ymGUOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU7w1vw9no5556S31zffnwJYTn9MB8GA1UdIwQY
MBaAFOZ12gnNOutMk3xj9TXzP9V9DCGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jYTJhODAtMWQ5MC00ODIzLWIzZjEt
NGUyODRjZmYwNzk5LzEvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jYTJhODAtMWQ5MC00ODIzLWIzZjEtNGUyODRjZmYwNzk5
LzEvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUF4SwkB
LtSCivwtZbjMady37bCxl3ODjn702PcBr1sF4TBnTcjMaNIQwNT6qxcM47BDgH5Y
AQFd4Fqk5lOlxVex17MTU9o0BTbEImfKvDyUMevEslHQm6yYuh7SBZYL08U0/LTl
n82Bz9nL5Td+0yizJqnb8wP1Om7Kk8eKEth4yOzR+gEUg16jmJcAMRgxxqCInefS
dMgoB0XdWH8vJV4JuohjjKc7UG5xA8FChu9RpZ4rUm2JbHbGo7kOvwKaLmNe5hlt
tdRjwgDheetHx5Do8tKXogVETM34kA+uezKScmccO5o0nFwHxaR7FT/kx5uNhoTo
n23yfK/13bl8DA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:34 2026 by rpki-client