This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File:                     8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier:          5USIcy7oOAUqraPrOTazQpBxZ4tl1wkCShk++cJGmvA=
Subject key identifier:   8A:92:EC:9D:34:BE:D7:00:20:94:E3:65:AA:4C:C2:B8:48:71:6A:91
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer:       /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial:       019C43591F76495CEE5579F886677965154A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number:          0815
Signing time:             Mon 09 Feb 2026 17:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:40 +0000
Files and hashes:         1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
                          2: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
                          3: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: vJWM3bdl98+WolB3pv6nn+flM4w/9c9Afyowz88x2Ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:1f:76:49:5c:ee:55:79:f8:86:67:79:65:15:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
        Validity
            Not Before: Feb  9 17:00:40 2026 GMT
            Not After : Feb 10 17:00:40 2026 GMT
        Subject: CN=8a92ec9d34bed7002094e365aa4cc2b848716a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:b9:5f:3a:8f:1d:05:f9:b4:a6:42:d5:f2:
                    08:56:2e:a4:21:f1:a1:bc:f2:a6:10:92:61:b7:dc:
                    98:d4:24:1c:30:be:8e:6f:8c:48:c9:b7:48:08:d2:
                    80:70:c2:dd:b4:8e:4a:a9:94:5d:14:a9:a4:41:70:
                    67:6c:38:d8:c5:9a:66:39:2c:d7:b5:9e:88:db:71:
                    fb:96:c8:47:0f:69:aa:a3:28:02:61:dd:a1:4b:3f:
                    46:7d:02:d0:12:86:8e:e6:ed:f4:ee:99:2b:ef:69:
                    85:a6:fe:00:42:3c:10:6e:6c:b8:29:43:60:83:c0:
                    d3:6c:05:95:37:f9:51:41:fb:94:be:c6:18:71:70:
                    ca:63:ea:d3:8f:41:d9:27:85:30:d6:f3:2d:14:8e:
                    3b:23:15:26:be:5e:38:19:e5:b1:e8:f1:fd:9b:28:
                    f7:47:30:6d:02:95:0c:13:71:eb:dd:06:77:14:8b:
                    41:98:1b:44:b9:3a:6e:8b:97:18:cd:1e:b7:6d:fd:
                    f3:39:ba:65:52:25:9e:7e:23:f2:16:89:3a:05:5c:
                    f3:17:4d:b4:3c:45:61:de:9e:c5:9a:0b:d3:ee:0c:
                    5d:16:53:5a:6c:6b:23:e0:80:08:72:18:57:5d:c9:
                    47:88:53:34:9b:49:c2:4d:c8:12:f9:ca:87:50:cf:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:92:EC:9D:34:BE:D7:00:20:94:E3:65:AA:4C:C2:B8:48:71:6A:91
            X509v3 Authority Key Identifier:
                keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:6f:d4:cc:54:fd:e6:73:f8:09:63:be:fd:fa:32:22:62:97:
         99:ce:84:84:66:ae:19:10:ef:38:35:04:92:6e:17:0e:0a:a8:
         17:15:ae:c0:88:06:18:0d:e2:ff:58:3d:36:13:5e:a0:83:91:
         12:c4:bf:a5:d0:a1:94:1a:e1:f3:0b:05:c4:b5:56:96:bc:56:
         86:34:49:4b:01:97:dd:49:01:2e:2e:34:91:08:43:9d:2d:0f:
         ed:2b:91:12:0b:13:d2:17:a5:4f:9a:83:c2:c2:4b:6f:7b:8d:
         42:31:44:aa:53:fa:46:99:47:93:65:90:22:91:09:72:86:1d:
         e5:84:f2:ce:28:a0:3e:7d:e2:4a:6f:6b:fb:9a:85:19:c3:25:
         cd:6a:69:16:b0:f2:23:40:2c:eb:2c:db:eb:12:d7:13:76:d1:
         a8:75:1c:5b:57:3c:53:61:fb:0e:0d:14:e2:b4:13:d9:0b:e3:
         85:32:18:a1:56:84:d0:a2:08:20:c5:7b:b1:8f:e4:cf:4e:70:
         28:6d:af:2a:ba:ae:79:b6:ca:dd:fd:e2:d0:19:0b:9a:8c:6d:
         77:8e:4c:1f:03:18:17:dc:5d:24:7d:12:04:e4:b3:36:ae:49:
         66:26:5f:30:84:5e:48:b1:a1:da:25:2a:ba:20:61:93:9e:8e:
         34:a0:61:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWR92SVzuVXn4hmd5ZRVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZWU1YjY4NDljOGM4MWY1YTc2MzU5NTU4OGE2YmE2ODIx
ZTc2N2IwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD
Eyg4YTkyZWM5ZDM0YmVkNzAwMjA5NGUzNjVhYTRjYzJiODQ4NzE2YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjW5XzqPHQX5tKZC1fIIVi6kIfGh
vPKmEJJht9yY1CQcML6Ob4xIybdICNKAcMLdtI5KqZRdFKmkQXBnbDjYxZpmOSzX
tZ6I23H7lshHD2mqoygCYd2hSz9GfQLQEoaO5u307pkr72mFpv4AQjwQbmy4KUNg
g8DTbAWVN/lRQfuUvsYYcXDKY+rTj0HZJ4Uw1vMtFI47IxUmvl44GeWx6PH9myj3
RzBtApUME3Hr3QZ3FItBmBtEuTpui5cYzR63bf3zObplUiWefiPyFok6BVzzF020
PEVh3p7FmgvT7gxdFlNabGsj4IAIchhXXclHiFM0m0nCTcgS+cqHUM9wAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqS7J00vtcAIJTjZapMwrhIcWqRMB8GA1UdIwQY
MBaAFPLuW2hJyMgfWnY1lViKa6aCHnZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTIt
NjBhMDM5ZGQxYmNhLzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTItNjBhMDM5ZGQxYmNh
LzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0W/UzFT9
5nP4CWO+/foyImKXmc6EhGauGRDvODUEkm4XDgqoFxWuwIgGGA3i/1g9NhNeoIOR
EsS/pdChlBrh8wsFxLVWlrxWhjRJSwGX3UkBLi40kQhDnS0P7SuREgsT0helT5qD
wsJLb3uNQjFEqlP6RplHk2WQIpEJcoYd5YTyziigPn3iSm9r+5qFGcMlzWppFrDy
I0As6yzb6xLXE3bRqHUcW1c8U2H7Dg0U4rQT2QvjhTIYoVaE0KIIIMV7sY/kz05w
KG2vKrquebbK3f3i0BkLmoxtd45MHwMYF9xdJH0SBOSzNq5JZiZfMIReSLGh2iUq
uiBhk56ONKBh5A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:04 2026 by rpki-client