This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File:                     9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier:          je/G78G8AIitQCbH+l7FHygNJ7CtYwzBfrMG1AyyII0=
Subject key identifier:   B0:13:23:5E:86:E7:3E:31:BD:05:8E:B2:7B:73:B2:DD:B5:66:69:37
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer:       /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial:       019C439017C91004C8B386E423EAEB492747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number:          120B
Signing time:             Mon 09 Feb 2026 18:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:42 +0000
Files and hashes:         1: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: 37ne1iDwaaYt1fEYndXLMv0YVVjDkdDdSueh3VfNZhU=)
                          2: Q4ZIJI1vYpM5qyo29zUc5N-1r8k.roa (hash: 76giCIoxYSJ7Qzdp7ynPuA05qyt7r6q9BXWslTdrOTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:17:c9:10:04:c8:b3:86:e4:23:ea:eb:49:27:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
        Validity
            Not Before: Feb  9 18:00:42 2026 GMT
            Not After : Feb 10 18:00:42 2026 GMT
        Subject: CN=b013235e86e73e31bd058eb27b73b2ddb5666937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:9b:58:8c:cb:38:c7:55:12:8a:90:03:23:
                    c9:bd:f1:de:21:d4:45:d3:13:0c:99:cc:a4:9e:63:
                    96:8f:33:95:b9:75:00:85:38:88:48:99:fc:2e:ec:
                    95:f6:fe:fc:bf:58:24:bd:a0:f6:a7:c7:02:5c:fa:
                    f1:06:6d:ff:74:ce:98:86:9e:80:7f:76:f6:d7:4e:
                    67:2b:88:5c:be:9f:13:61:99:86:68:71:af:aa:d9:
                    0d:ee:80:dd:be:4a:02:cf:2e:48:24:e3:c1:88:0b:
                    28:2b:c9:8d:a6:67:0e:35:7e:5f:44:0c:64:02:59:
                    fd:eb:4a:7f:fc:e7:f2:0e:b3:7c:a0:b0:fd:dd:a9:
                    50:51:13:36:53:40:99:ff:6c:74:6e:6d:dd:45:6d:
                    5a:32:f4:fb:a4:08:05:c2:50:73:08:27:81:3d:40:
                    ec:fd:17:57:86:04:c3:6b:f1:7a:14:6a:9c:d7:5b:
                    07:54:ec:96:12:cd:9b:bf:f3:d9:9a:7f:8f:aa:8c:
                    39:33:27:c7:f6:f2:ee:76:c3:e8:68:fd:f3:8d:5b:
                    8a:26:1a:e6:3d:dc:a9:47:94:5b:ec:f7:3f:88:12:
                    69:7d:4f:d3:1f:0a:d6:1e:18:a8:3f:75:6d:8d:0c:
                    98:9c:57:fd:4d:98:19:dc:73:e3:20:0b:2b:62:7d:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:13:23:5E:86:E7:3E:31:BD:05:8E:B2:7B:73:B2:DD:B5:66:69:37
            X509v3 Authority Key Identifier:
                keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:50:c5:4e:c0:c7:54:07:ea:ad:74:9f:c2:1a:be:6d:d8:da:
         4a:d1:c8:19:d2:78:5a:49:6e:29:e4:b4:d0:1a:24:92:d2:c7:
         92:01:55:fb:48:08:4e:dc:eb:ce:ab:b8:66:3b:1c:fb:1f:c5:
         98:7f:cf:f3:14:0b:16:81:33:28:25:3f:7e:ea:31:42:4e:cc:
         fe:ad:23:d9:2c:08:35:75:5d:f1:e6:d8:d3:15:d5:c5:42:d9:
         62:c5:dd:a8:43:38:71:fb:9b:fe:a1:6a:ba:3f:bc:ec:9b:67:
         fb:f9:44:28:2c:95:ba:cd:82:e9:b8:01:6a:b2:21:75:25:1c:
         66:6e:bc:8b:69:e4:97:b1:31:fe:4a:aa:83:b5:0f:d8:d3:77:
         49:a3:54:3e:a9:57:2f:82:93:77:a0:46:14:2f:80:23:55:11:
         81:90:87:ad:fc:54:53:cf:d0:3a:62:c1:e4:85:6c:e7:87:c5:
         d1:bb:5c:ed:60:1f:b7:76:76:c3:cc:69:60:b9:79:cd:4f:b4:
         cc:07:14:2c:5f:18:78:6c:3d:a1:39:89:05:a1:49:1b:f4:36:
         e4:d7:69:1d:12:3f:f2:2f:ac:ac:e1:34:dc:84:c7:52:cf:cb:
         49:5e:ef:a1:f7:02:df:59:f3:2e:a3:16:1a:38:38:b1:d2:bf:
         2f:f4:b1:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkBfJEATIs4bkI+rrSSdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZjgwNzM4MzUxZGNmYzc1YWY5OTY5OTNhMjkyOWMzNzEz
NGEyMDgwHhcNMjYwMjA5MTgwMDQyWhcNMjYwMjEwMTgwMDQyWjAzMTEwLwYDVQQD
EyhiMDEzMjM1ZTg2ZTczZTMxYmQwNThlYjI3YjczYjJkZGI1NjY2OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMObWIzLOMdVEoqQAyPJvfHeIdRF
0xMMmcyknmOWjzOVuXUAhTiISJn8LuyV9v78v1gkvaD2p8cCXPrxBm3/dM6Yhp6A
f3b2105nK4hcvp8TYZmGaHGvqtkN7oDdvkoCzy5IJOPBiAsoK8mNpmcONX5fRAxk
Aln960p//OfyDrN8oLD93alQURM2U0CZ/2x0bm3dRW1aMvT7pAgFwlBzCCeBPUDs
/RdXhgTDa/F6FGqc11sHVOyWEs2bv/PZmn+Pqow5MyfH9vLudsPoaP3zjVuKJhrm
PdypR5Rb7Pc/iBJpfU/THwrWHhioP3VtjQyYnFf9TZgZ3HPjIAsrYn35RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLATI16G5z4xvQWOsntzst21Zmk3MB8GA1UdIwQY
MBaAFPX4Bzg1Hc/HWvmWmTopKcNxNKIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYt
ZWE4NDExZDU3MmFlLzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYtZWE4NDExZDU3MmFl
LzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVDFTsDH
VAfqrXSfwhq+bdjaStHIGdJ4WkluKeS00BokktLHkgFV+0gITtzrzqu4Zjsc+x/F
mH/P8xQLFoEzKCU/fuoxQk7M/q0j2SwINXVd8ebY0xXVxULZYsXdqEM4cfub/qFq
uj+87Jtn+/lEKCyVus2C6bgBarIhdSUcZm68i2nkl7Ex/kqqg7UP2NN3SaNUPqlX
L4KTd6BGFC+AI1URgZCHrfxUU8/QOmLB5IVs54fF0btc7WAft3Z2w8xpYLl5zU+0
zAcULF8YeGw9oTmJBaFJG/Q25NdpHRI/8i+srOE03ITHUs/LSV7vofcC31nzLqMW
Gjg4sdK/L/SxmQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:41 2026 by rpki-client