This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File:                     U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier:          SPDs7Wtm5FWy0Cj3ykBjTxbAO2BvUAQv+nBc0dhAIKc=
Subject key identifier:   B3:60:D3:88:52:CB:A7:82:74:40:FF:E1:62:7A:57:FF:A0:CA:04:E0
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer:       /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial:       019C41D87A6AE1BE3B9231D7717440F248B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number:          0A55
Signing time:             Mon 09 Feb 2026 10:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:31 +0000
Files and hashes:         1: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (hash: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s=)
                          2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: 28zDt/+om9WlEQ59LMKaeVyyscFPci60Kv6JCPuay8g=)
                          3: pfH2GwBcvDoKyHCIT0cM2iz_ms0.roa (hash: Mm7/tRb+RTedsr3+m2DHJUxAaM0FcO0MUgT9eZ4XDVI=)
                          4: zMo_08BFuPtuYYrEDlRKq-rmGBo.roa (hash: vZCIJPH6khDNzPRPnP73DDsgX8UFqI/TfAzpfgqnDZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:7a:6a:e1:be:3b:92:31:d7:71:74:40:f2:48:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
        Validity
            Not Before: Feb  9 10:00:31 2026 GMT
            Not After : Feb 10 10:00:31 2026 GMT
        Subject: CN=b360d38852cba7827440ffe1627a57ffa0ca04e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:58:e1:9f:f0:b1:bb:f9:cb:b5:40:fc:28:
                    d4:a3:43:ec:e6:5f:f9:1f:53:f9:27:dc:b5:51:81:
                    91:ce:ce:c0:f9:17:03:9a:e5:4e:3f:c1:6e:c8:cb:
                    e0:f9:a6:99:b6:31:15:2e:20:bc:d0:06:99:72:50:
                    0e:d2:c4:70:67:b2:5c:d4:a0:91:db:52:78:b0:53:
                    b5:a9:e3:21:1e:c1:bd:58:45:4e:bc:0a:dc:ab:f1:
                    7f:5f:3a:8d:9e:01:b6:2a:23:72:1d:8d:dc:78:73:
                    15:7c:54:6c:d0:b2:33:f6:bf:77:26:c9:f3:f0:4d:
                    37:37:6e:f9:4e:cb:42:74:b9:a9:e2:a4:94:30:df:
                    0e:1a:42:da:26:51:1e:ec:21:da:5e:9d:fd:01:e6:
                    6f:d1:18:84:a5:ad:9a:8a:1d:0e:d3:09:1a:3b:fa:
                    50:62:54:8e:6f:da:f4:19:c8:f1:fe:43:d9:28:cf:
                    25:81:9e:7a:73:1b:84:17:88:fb:4f:5a:cf:66:98:
                    c8:63:e1:c3:98:69:db:7d:c7:8b:97:22:70:52:8a:
                    17:8a:07:96:24:39:8b:12:b6:36:e7:4e:23:c3:4a:
                    24:fa:89:7a:3e:ff:1a:18:05:2f:e8:d7:59:85:e7:
                    5b:24:4b:f0:f2:44:24:5a:3e:e2:e9:c1:67:d6:f0:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:60:D3:88:52:CB:A7:82:74:40:FF:E1:62:7A:57:FF:A0:CA:04:E0
            X509v3 Authority Key Identifier:
                keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:40:a1:4b:17:47:b0:94:95:b5:5a:21:74:7f:c2:74:56:17:
         e2:5f:3a:fc:31:a0:f5:0b:f8:30:f8:66:f5:43:61:dd:d6:ee:
         aa:f2:62:7a:1f:f2:08:bd:b9:db:10:a7:e2:3f:1d:18:7c:8b:
         31:d5:70:0c:05:0a:c9:1c:c7:66:6e:56:f4:78:9f:6c:02:27:
         76:35:c7:14:fb:e9:e5:e0:5c:19:e9:f8:80:48:4f:9f:cf:43:
         27:59:eb:6d:59:99:e5:06:b0:2c:56:1f:52:03:84:de:ab:b5:
         88:2d:5c:51:4c:02:d2:0f:56:26:7b:80:46:1f:ee:11:0d:cf:
         17:a2:1e:b0:f6:54:e8:60:d5:12:86:87:15:c8:b9:8a:43:4c:
         e8:33:a3:0e:d8:fd:ea:5e:fc:da:03:b2:fb:79:f6:8d:05:13:
         50:65:f0:1e:52:02:a0:3c:7e:20:8c:3a:10:91:80:55:07:3b:
         f7:cc:92:d1:ac:cb:6e:bb:cb:00:4b:a2:5d:bd:a0:e9:23:68:
         f5:33:b1:8b:63:b2:d2:18:a7:e1:f7:37:97:05:b5:85:fb:1d:
         30:36:92:b2:2d:a8:94:ad:a8:e9:45:d2:7b:da:6d:90:0a:1b:
         91:a2:93:14:1c:08:4a:1f:fc:73:a5:08:16:db:3d:78:2c:6b:
         a1:89:52:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2Hpq4b47kjHXcXRA8ki4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk
ODI2OGYwHhcNMjYwMjA5MTAwMDMxWhcNMjYwMjEwMTAwMDMxWjAzMTEwLwYDVQQD
EyhiMzYwZDM4ODUyY2JhNzgyNzQ0MGZmZTE2MjdhNTdmZmEwY2EwNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm1Y4Z/wsbv5y7VA/CjUo0Ps5l/5
H1P5J9y1UYGRzs7A+RcDmuVOP8FuyMvg+aaZtjEVLiC80AaZclAO0sRwZ7Jc1KCR
21J4sFO1qeMhHsG9WEVOvArcq/F/XzqNngG2KiNyHY3ceHMVfFRs0LIz9r93Jsnz
8E03N275TstCdLmp4qSUMN8OGkLaJlEe7CHaXp39AeZv0RiEpa2aih0O0wkaO/pQ
YlSOb9r0Gcjx/kPZKM8lgZ56cxuEF4j7T1rPZpjIY+HDmGnbfceLlyJwUooXigeW
JDmLErY2504jw0ok+ol6Pv8aGAUv6NdZhedbJEvw8kQkWj7i6cFn1vClzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNg04hSy6eCdED/4WJ6V/+gygTgMB8GA1UdIwQY
MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt
NDExYTI3MTIxNjRkLzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk
LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEChSxdH
sJSVtVohdH/CdFYX4l86/DGg9Qv4MPhm9UNh3dbuqvJieh/yCL252xCn4j8dGHyL
MdVwDAUKyRzHZm5W9HifbAIndjXHFPvp5eBcGen4gEhPn89DJ1nrbVmZ5QawLFYf
UgOE3qu1iC1cUUwC0g9WJnuARh/uEQ3PF6IesPZU6GDVEoaHFci5ikNM6DOjDtj9
6l782gOy+3n2jQUTUGXwHlICoDx+IIw6EJGAVQc798yS0azLbrvLAEuiXb2g6SNo
9TOxi2Oy0hin4fc3lwW1hfsdMDaSsi2olK2o6UXSe9ptkAobkaKTFBwISh/8c6UI
Fts9eCxroYlSrQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:46 2026 by rpki-client