This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File:                     jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier:          XNMRtr8w2v2Il6z1uEhVoVWAx3cOufdT1qKM9pBIl70=
Subject key identifier:   88:47:B6:39:96:34:6B:CE:AF:13:FB:DE:2A:10:E5:3E:58:71:DA:E1
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer:       /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial:       019C4390470DB39D7FB9B03F8457E3F2519B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number:          0BFD
Signing time:             Mon 09 Feb 2026 18:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:54 +0000
Files and hashes:         1: Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa (hash: 9nj7uwXDpwi4IaoN4BLsfOwzpOwzS34nmfQiM2vUZE0=)
                          2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: BV4bZWjdOSOoJTKbGMmCBKYgIqTdOuWw4l1r2gY81Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:47:0d:b3:9d:7f:b9:b0:3f:84:57:e3:f2:51:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
        Validity
            Not Before: Feb  9 18:00:54 2026 GMT
            Not After : Feb 10 18:00:54 2026 GMT
        Subject: CN=8847b63996346bceaf13fbde2a10e53e5871dae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:04:13:9d:19:09:1a:bc:65:6e:82:57:b5:
                    16:d7:5e:6f:08:fa:32:f3:75:e5:15:87:90:d2:74:
                    cb:30:f8:79:8e:3e:33:80:6b:e2:8a:68:5d:50:c8:
                    14:1e:7b:de:b5:93:65:d9:e5:4b:0d:3f:ed:d3:3e:
                    31:84:a5:81:a0:fd:28:ca:fe:19:f3:3c:c2:d3:d2:
                    55:59:56:5a:e3:cc:99:85:c2:9a:da:78:86:5b:24:
                    2a:4b:84:29:00:a8:28:24:1b:1b:7b:70:5f:d2:91:
                    96:70:ce:74:86:56:5d:b9:54:26:cd:1b:0e:98:54:
                    be:a1:1f:ff:b0:57:c9:ae:cf:68:06:41:fb:b0:73:
                    fa:e9:6c:c2:39:3d:0b:20:89:95:73:3c:ea:16:b1:
                    32:e8:3a:10:22:7f:e7:2d:43:20:6c:ac:49:6b:64:
                    fb:a4:35:d2:e1:73:02:e7:ba:b9:e7:45:41:ca:83:
                    c5:13:f0:58:6b:cb:ee:51:0a:0b:37:3f:f6:77:91:
                    c2:42:d1:52:f8:61:d0:d3:3d:0e:27:fa:22:78:94:
                    e5:9c:69:1b:73:7e:dc:2c:7a:ae:c9:55:75:1d:86:
                    84:56:81:5d:bb:ec:51:0e:ff:fa:9f:ff:5f:a8:dc:
                    ce:68:6c:15:ee:68:72:cf:a7:bd:3e:09:c1:c8:d5:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:47:B6:39:96:34:6B:CE:AF:13:FB:DE:2A:10:E5:3E:58:71:DA:E1
            X509v3 Authority Key Identifier:
                keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:80:f9:99:d6:7d:e5:c9:c4:1e:60:36:dd:9e:3e:d0:75:
         6a:ff:92:39:85:75:7f:26:38:cc:96:25:e4:2a:b7:68:7f:42:
         c9:da:a0:30:4f:48:0e:da:c4:08:f7:4d:22:02:7a:2e:bd:6f:
         ab:35:0d:d7:22:67:4d:c2:4e:ba:20:bd:26:5a:66:dc:fb:c4:
         5c:fe:95:46:5d:ff:70:aa:a2:b4:ea:06:78:0e:fa:9b:ed:c9:
         28:b2:0d:ad:36:96:27:f4:7c:66:3c:37:fe:00:40:52:28:bc:
         78:73:df:0e:75:5e:31:3c:93:0f:5b:f0:5b:14:8b:87:8e:cf:
         f2:19:d0:84:24:3a:15:21:4a:1d:8d:06:5c:29:ef:6d:db:7b:
         6c:ad:15:c4:57:3d:31:0b:96:fb:6c:47:d8:b0:8a:23:97:d8:
         c2:bf:fe:98:c4:b4:9a:16:3d:17:c4:42:1d:f4:13:6f:85:b6:
         8f:23:5f:28:74:9c:a6:4a:dc:28:45:d3:db:21:d5:f7:a3:83:
         82:6a:d9:ca:18:24:e9:62:b0:89:29:b9:79:2d:e9:6a:fb:90:
         fe:f2:f6:c8:4d:da:ff:69:32:66:fe:d5:0b:bd:03:88:2d:96:
         6f:8c:b0:33:29:39:1a:2a:69:3f:d5:20:85:80:a6:83:a5:a7:
         aa:8f:6a:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkEcNs51/ubA/hFfj8lGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjY0NTc3MGQyOTE0NDAyZDZjOTViOGRhZjUxZjdmZmUx
Mjc3MmIwHhcNMjYwMjA5MTgwMDU0WhcNMjYwMjEwMTgwMDU0WjAzMTEwLwYDVQQD
Eyg4ODQ3YjYzOTk2MzQ2YmNlYWYxM2ZiZGUyYTEwZTUzZTU4NzFkYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/kEE50ZCRq8ZW6CV7UW115vCPoy
83XlFYeQ0nTLMPh5jj4zgGviimhdUMgUHnvetZNl2eVLDT/t0z4xhKWBoP0oyv4Z
8zzC09JVWVZa48yZhcKa2niGWyQqS4QpAKgoJBsbe3Bf0pGWcM50hlZduVQmzRsO
mFS+oR//sFfJrs9oBkH7sHP66WzCOT0LIImVczzqFrEy6DoQIn/nLUMgbKxJa2T7
pDXS4XMC57q550VByoPFE/BYa8vuUQoLNz/2d5HCQtFS+GHQ0z0OJ/oieJTlnGkb
c37cLHquyVV1HYaEVoFdu+xRDv/6n/9fqNzOaGwV7mhyz6e9PgnByNX7FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhHtjmWNGvOrxP73ioQ5T5YcdrhMB8GA1UdIwQY
MBaAFI72RXcNKRRALWyVuNr1H3/+EncrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDkt
NjU2OTU3ZjM4NjdlLzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDktNjU2OTU3ZjM4Njdl
LzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKqA+ZnW
feXJxB5gNt2ePtB1av+SOYV1fyY4zJYl5Cq3aH9CydqgME9IDtrECPdNIgJ6Lr1v
qzUN1yJnTcJOuiC9Jlpm3PvEXP6VRl3/cKqitOoGeA76m+3JKLINrTaWJ/R8Zjw3
/gBAUii8eHPfDnVeMTyTD1vwWxSLh47P8hnQhCQ6FSFKHY0GXCnvbdt7bK0VxFc9
MQuW+2xH2LCKI5fYwr/+mMS0mhY9F8RCHfQTb4W2jyNfKHScpkrcKEXT2yHV96OD
gmrZyhgk6WKwiSm5eS3pavuQ/vL2yE3a/2kyZv7VC70DiC2Wb4ywMyk5GippP9Ug
hYCmg6Wnqo9q5Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:00 2026 by rpki-client