This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File:                     aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier:          k5kdf1bgRyFyh/QbcheQ6Vuv9RmfGXF6Y5ELdlzxgiE=
Subject key identifier:   99:08:21:1F:A2:91:92:53:8A:C2:18:35:E4:DF:D8:B2:23:3F:4F:E2
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer:       /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial:       019C4322183403FC3849113926E983328DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number:          0278
Signing time:             Mon 09 Feb 2026 16:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:33 +0000
Files and hashes:         1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
                          2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: Mvq8xaNlz3+hjcGt92+eQ0EDkaOU6bTvZdSWiRt04Sc=)
                          3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:18:34:03:fc:38:49:11:39:26:e9:83:32:8d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
        Validity
            Not Before: Feb  9 16:00:33 2026 GMT
            Not After : Feb 10 16:00:33 2026 GMT
        Subject: CN=9908211fa29192538ac21835e4dfd8b2233f4fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:11:dd:59:fd:e4:2d:e9:b0:55:90:7b:03:
                    5f:05:13:9b:8d:51:ba:e5:99:34:5d:ef:b6:02:75:
                    73:0e:93:e1:ce:ab:fe:c9:ab:33:6d:5e:13:10:f5:
                    67:7b:c9:f8:36:57:a8:3b:86:70:0d:b3:f9:e2:15:
                    f9:d4:8b:8b:55:75:e8:29:12:b7:66:69:8f:47:c8:
                    22:a4:10:29:a1:96:a1:54:8c:7a:56:41:ff:5e:2e:
                    1d:98:d6:aa:3a:73:17:8b:0f:93:0c:dd:c1:96:7f:
                    08:05:d4:a1:d4:a9:f5:28:43:bb:69:da:e3:f7:c8:
                    06:41:15:a5:35:e4:7f:b0:62:74:11:06:dc:06:3e:
                    db:ff:0b:88:07:13:f2:5b:09:d6:c2:15:5e:aa:05:
                    31:26:04:c1:fc:d9:87:25:97:bd:73:b9:7f:b7:23:
                    65:fa:2c:03:3b:19:56:4b:0f:86:bd:e9:6b:b3:b4:
                    4a:01:aa:07:79:c4:f4:a3:44:54:54:68:35:15:ad:
                    f4:a2:7e:e5:fa:d3:27:eb:a1:cb:2e:8f:c7:fe:4a:
                    37:02:eb:e7:5d:78:97:c5:91:09:bd:a3:f9:07:3c:
                    3f:58:da:50:9a:59:69:b4:cd:26:2c:75:40:f4:fa:
                    0d:99:eb:1f:73:d2:37:4f:27:1a:b0:2b:0b:62:78:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:08:21:1F:A2:91:92:53:8A:C2:18:35:E4:DF:D8:B2:23:3F:4F:E2
            X509v3 Authority Key Identifier:
                keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:09:8e:87:75:49:9c:e6:d1:6c:d6:d2:c7:ad:e4:87:df:d8:
         6d:99:cb:2b:78:ef:bc:e6:56:55:8b:ea:a6:22:19:45:cc:b0:
         64:cf:12:73:bf:56:b3:c8:9a:9a:12:d5:3f:fd:4a:fd:30:49:
         bb:30:80:ba:1d:07:5a:70:db:3e:34:3b:29:18:e4:3c:b1:44:
         0c:27:ed:43:72:9b:26:d3:9f:74:7c:4c:01:f5:fb:f8:8c:50:
         ef:b0:88:02:e9:f6:5f:e3:53:5c:32:de:9c:3c:23:46:17:2c:
         fa:34:8f:53:f8:de:ee:34:d3:32:f2:dd:1b:a4:4d:75:0c:b8:
         40:5b:fa:bb:ba:a0:1b:3c:9b:3d:c0:dd:e0:a6:36:3a:0d:bc:
         00:62:8f:e9:82:3f:d9:48:55:a1:aa:a2:4c:23:07:a3:65:cd:
         c2:ed:28:cc:c6:6f:a8:5c:9e:0f:d5:bb:8b:e2:97:af:e2:e0:
         88:ed:ab:4f:90:36:2d:5f:27:cb:13:bf:4a:d9:ff:21:69:1a:
         30:ce:50:92:14:21:c3:d4:47:97:f2:e5:fa:6d:92:5b:c8:b6:
         f7:ae:87:5f:44:7c:fb:d9:73:29:63:8f:b3:c7:3c:68:a9:d5:
         8d:13:4c:53:bc:c4:84:7c:e9:02:fc:a2:58:12:c2:6f:e4:88:
         46:a1:e9:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIhg0A/w4SRE5JumDMo3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx
YzhjZGQwHhcNMjYwMjA5MTYwMDMzWhcNMjYwMjEwMTYwMDMzWjAzMTEwLwYDVQQD
Eyg5OTA4MjExZmEyOTE5MjUzOGFjMjE4MzVlNGRmZDhiMjIzM2Y0ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0gR3Vn95C3psFWQewNfBRObjVG6
5Zk0Xe+2AnVzDpPhzqv+yaszbV4TEPVne8n4NleoO4ZwDbP54hX51IuLVXXoKRK3
ZmmPR8gipBApoZahVIx6VkH/Xi4dmNaqOnMXiw+TDN3Bln8IBdSh1Kn1KEO7adrj
98gGQRWlNeR/sGJ0EQbcBj7b/wuIBxPyWwnWwhVeqgUxJgTB/NmHJZe9c7l/tyNl
+iwDOxlWSw+Gvelrs7RKAaoHecT0o0RUVGg1Fa30on7l+tMn66HLLo/H/ko3Auvn
XXiXxZEJvaP5Bzw/WNpQmllptM0mLHVA9PoNmesfc9I3TycasCsLYngKdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkIIR+ikZJTisIYNeTf2LIjP0/iMB8GA1UdIwQY
MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt
YTI2Y2I2NDI5NDg2LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2
LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQmOh3VJ
nObRbNbSx63kh9/YbZnLK3jvvOZWVYvqpiIZRcywZM8Sc79Ws8iamhLVP/1K/TBJ
uzCAuh0HWnDbPjQ7KRjkPLFEDCftQ3KbJtOfdHxMAfX7+IxQ77CIAun2X+NTXDLe
nDwjRhcs+jSPU/je7jTTMvLdG6RNdQy4QFv6u7qgGzybPcDd4KY2Og28AGKP6YI/
2UhVoaqiTCMHo2XNwu0ozMZvqFyeD9W7i+KXr+LgiO2rT5A2LV8nyxO/Stn/IWka
MM5QkhQhw9RHl/Ll+m2SW8i2966HX0R8+9lzKWOPs8c8aKnVjRNMU7zEhHzpAvyi
WBLCb+SIRqHpSg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:42 2026 by rpki-client