This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File:                     bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier:          ahvUlaHor3LhesaBitCN6g1ylNzlQUxmzBfX8SVPSL8=
Subject key identifier:   42:B0:F7:69:F2:50:71:3D:A1:1F:98:58:F7:41:35:4E:00:2B:1C:06
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer:       /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial:       019C416AA8E87A880B657C9A19764809D05D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number:          11E1
Signing time:             Mon 09 Feb 2026 08:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:34 +0000
Files and hashes:         1: B2icUM6CeeejuMgcUvx_kDaA564.roa (hash: MnhHbagUBXFrbwkwtXZWHt9EfUip9vPtnZBoYPXkEak=)
                          2: I_-ZDRnwIe3YxtISBfXd7uTtNzo.roa (hash: CvvU8QwgatBH8M1Cq+F7WmSuoj+U0VtrnMnDWpsz+50=)
                          3: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: YuBfxFJc4flRDC87+6YWV2aeldInuqOz61KHFtXnnTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:a8:e8:7a:88:0b:65:7c:9a:19:76:48:09:d0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
        Validity
            Not Before: Feb  9 08:00:34 2026 GMT
            Not After : Feb 10 08:00:34 2026 GMT
        Subject: CN=42b0f769f250713da11f9858f741354e002b1c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:20:37:eb:51:7b:fd:48:0d:b3:d6:17:95:
                    06:3c:c3:f0:29:43:9d:cf:94:88:50:7c:1f:21:79:
                    21:ea:f8:19:cc:fb:cb:65:97:58:ed:9d:b6:99:80:
                    24:d0:84:34:82:20:28:e4:05:8a:07:33:d0:ea:5c:
                    93:31:14:35:50:ac:a8:55:10:57:38:3d:fd:89:b1:
                    04:af:c8:2b:4c:43:8c:8e:e3:70:a7:c8:72:cf:61:
                    77:99:62:f6:9a:08:4b:2e:c2:77:45:9c:0f:01:53:
                    6c:90:91:cc:33:b0:53:2e:fb:02:6a:63:21:e0:7c:
                    17:7a:1f:83:44:0b:4e:c3:b9:5f:d7:21:6c:02:68:
                    55:82:a9:11:80:dd:95:4c:97:70:4b:c7:05:46:ee:
                    25:f7:c0:a3:90:57:a8:5d:e2:6d:8d:64:25:37:14:
                    64:ba:e9:b3:e8:c1:09:f1:6f:18:39:d7:06:c5:3c:
                    dc:7c:3b:11:40:24:28:dc:af:3a:65:81:c1:29:c7:
                    c1:de:95:fe:7c:ea:92:03:12:97:51:d9:3b:c7:15:
                    2d:f1:ca:5e:4d:c7:ce:33:68:43:d8:a5:f5:7f:87:
                    28:cd:cc:cf:c3:7e:b2:fd:e7:5d:3d:0b:6b:41:41:
                    c8:9c:95:35:24:71:4f:cb:28:88:67:1f:47:2a:22:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:F7:69:F2:50:71:3D:A1:1F:98:58:F7:41:35:4E:00:2B:1C:06
            X509v3 Authority Key Identifier:
                keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:44:3e:da:2f:1e:4e:92:06:29:33:92:f9:c9:d7:20:df:
         99:47:e2:ab:e5:e7:c8:4e:21:cf:d2:9f:eb:be:cc:99:67:9f:
         49:3f:b2:0c:99:1f:d3:ed:56:04:bb:03:41:4e:88:4d:65:13:
         b5:39:96:b3:f1:72:0f:2b:51:5f:10:71:1f:ad:4d:5b:66:31:
         f3:fe:12:8a:cc:6e:84:03:10:22:da:d2:34:91:47:6e:bb:48:
         04:c0:eb:7b:58:c2:e8:56:64:b8:3f:f7:8a:1d:d6:32:4e:48:
         b4:41:cd:79:e2:2d:b2:a8:b9:a6:9a:b9:9e:89:68:db:34:7e:
         2c:7e:bb:3d:5b:30:a1:e3:a2:ab:a3:dd:ad:72:5c:31:69:28:
         8f:5a:c7:d2:cc:48:de:87:8b:c1:65:53:d4:be:ee:bb:14:b3:
         30:b9:92:ac:65:20:f5:57:08:33:48:67:29:71:12:00:72:2d:
         bf:bb:95:33:bb:47:4b:1c:f3:2c:f7:6d:2f:34:5e:ca:3d:53:
         93:05:a3:0f:eb:00:58:4b:95:d2:0c:fd:39:36:ab:b6:93:97:
         d0:fe:9a:38:c2:ed:a9:30:1e:25:ac:6b:a9:75:76:33:45:df:
         be:f8:39:eb:42:1a:e3:44:76:69:c8:d2:d4:f6:d1:39:a9:63:
         e6:aa:a0:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBaqjoeogLZXyaGXZICdBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzNhMDRhN2QwZWIyZGY0N2RhZjBjMzlmYmE3NWUzNjVj
ODg1M2QwHhcNMjYwMjA5MDgwMDM0WhcNMjYwMjEwMDgwMDM0WjAzMTEwLwYDVQQD
Eyg0MmIwZjc2OWYyNTA3MTNkYTExZjk4NThmNzQxMzU0ZTAwMmIxYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyusgN+tRe/1IDbPWF5UGPMPwKUOd
z5SIUHwfIXkh6vgZzPvLZZdY7Z22mYAk0IQ0giAo5AWKBzPQ6lyTMRQ1UKyoVRBX
OD39ibEEr8grTEOMjuNwp8hyz2F3mWL2mghLLsJ3RZwPAVNskJHMM7BTLvsCamMh
4HwXeh+DRAtOw7lf1yFsAmhVgqkRgN2VTJdwS8cFRu4l98CjkFeoXeJtjWQlNxRk
uumz6MEJ8W8YOdcGxTzcfDsRQCQo3K86ZYHBKcfB3pX+fOqSAxKXUdk7xxUt8cpe
TcfOM2hD2KX1f4cozczPw36y/eddPQtrQUHInJU1JHFPyyiIZx9HKiKyhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKw92nyUHE9oR+YWPdBNU4AKxwGMB8GA1UdIwQY
MBaAFGxzoEp9DrLfR9rww5+6deNlyIU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMt
Zjk2MzMyOTJjOTc3LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMtZjk2MzMyOTJjOTc3
LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPutEPtov
Hk6SBikzkvnJ1yDfmUfiq+XnyE4hz9Kf677MmWefST+yDJkf0+1WBLsDQU6ITWUT
tTmWs/FyDytRXxBxH61NW2Yx8/4SisxuhAMQItrSNJFHbrtIBMDre1jC6FZkuD/3
ih3WMk5ItEHNeeItsqi5ppq5nolo2zR+LH67PVswoeOiq6PdrXJcMWkoj1rH0sxI
3oeLwWVT1L7uuxSzMLmSrGUg9VcIM0hnKXESAHItv7uVM7tHSxzzLPdtLzReyj1T
kwWjD+sAWEuV0gz9OTartpOX0P6aOMLtqTAeJaxrqXV2M0Xfvvg560Ia40R2acjS
1PbROalj5qqgvw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:14 2026 by rpki-client