This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File:                     C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier:          PWuDFDg7+W/ZMBEGIpauGdm7j+9epfLrYaCJYxo4v+M=
Subject key identifier:   65:1F:A2:39:D4:47:52:24:F8:44:7E:B5:E2:AA:CF:E2:83:85:00:19
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer:       /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial:       019C438FB1425FD981943ED209CC282D2BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number:          14ED
Signing time:             Mon 09 Feb 2026 18:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:16 +0000
Files and hashes:         1: 2M7JFeYv6EU7baJDuclymj7aO3Y.roa (hash: iZc3yZisPC3PtWwp2J1EiFeb+q/jB92CE8gsAYVSbys=)
                          2: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: rJcK9T6hpl+teOfB3X8fJ0U+pf8FXMtiS9yka+9FsN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:b1:42:5f:d9:81:94:3e:d2:09:cc:28:2d:2b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
        Validity
            Not Before: Feb  9 18:00:16 2026 GMT
            Not After : Feb 10 18:00:16 2026 GMT
        Subject: CN=651fa239d4475224f8447eb5e2aacfe283850019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:e8:2c:d7:b0:bf:92:6f:7e:39:93:f6:76:
                    78:76:41:68:dc:01:69:b0:15:a6:35:19:66:64:67:
                    40:6e:b5:8e:18:84:dc:3a:27:82:79:b5:89:88:7a:
                    4e:c3:95:57:ce:7a:3a:84:f1:95:99:ce:03:18:af:
                    2e:9d:b0:e7:0a:1f:7e:56:0f:3d:b2:7a:6c:80:4e:
                    7e:98:6f:4a:7a:ed:e3:69:00:b6:c9:24:b4:ee:9a:
                    9f:eb:b1:75:3f:85:f7:94:00:a6:4e:b2:4d:0c:e0:
                    17:b5:8a:ea:19:cd:4c:f2:98:53:23:f3:c4:94:0d:
                    f2:20:d1:40:e4:dc:13:31:5d:57:c9:03:2a:34:20:
                    c5:ed:9f:82:3c:e9:01:9b:ff:d4:a5:32:f3:ea:23:
                    6e:6e:c2:22:e1:96:5d:6b:c9:8a:7f:28:d0:cf:b1:
                    37:7a:ba:fa:e5:71:36:c4:27:69:6b:52:76:e4:d2:
                    56:e6:e6:f5:5e:8a:eb:70:d3:7a:9a:54:06:bc:35:
                    16:cb:b9:45:4e:ac:6b:e3:55:9a:c2:bb:36:ff:30:
                    8c:ad:00:f4:1a:e7:e6:c6:f0:50:17:58:24:68:a7:
                    1f:77:d9:0d:45:68:57:c7:ca:e9:eb:9d:cd:61:e3:
                    32:06:8f:87:0f:1d:18:70:3a:65:9a:75:bd:f4:f7:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1F:A2:39:D4:47:52:24:F8:44:7E:B5:E2:AA:CF:E2:83:85:00:19
            X509v3 Authority Key Identifier:
                keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:ad:78:21:93:90:ff:a9:c9:da:9d:ae:8b:62:c1:45:bb:
         2e:ec:d7:d5:9d:7e:93:81:ec:54:63:6d:76:7c:47:d3:e2:c7:
         55:95:62:c3:e6:95:73:11:27:6f:ef:f8:8f:89:21:aa:ee:06:
         47:18:39:43:96:3a:55:be:52:e6:c6:7c:ee:bc:1d:16:10:04:
         65:16:4d:16:60:fe:88:76:ae:2b:cf:82:63:4e:cd:72:90:78:
         10:20:4f:81:6e:80:6c:e4:3f:48:a4:24:d3:ac:30:df:19:18:
         a6:53:48:3c:d3:9e:54:7d:95:3a:fe:81:95:72:6d:04:8c:ae:
         14:00:4f:95:07:29:a2:e5:bd:20:a5:3b:c1:17:72:56:34:bc:
         0a:e3:2f:54:f4:27:59:0c:8c:c4:c3:9b:dc:63:d1:83:70:8d:
         12:7f:4a:1c:1d:df:a9:c6:69:8b:4e:88:e8:db:00:29:36:6e:
         c1:69:18:b0:64:09:63:15:4f:b6:25:8d:4b:95:29:8d:7f:a5:
         61:cd:2f:eb:7c:c0:98:ba:b3:2a:ef:10:fb:e0:f2:a8:f3:82:
         f5:cf:1f:b4:d5:45:07:92:11:03:29:f3:af:9c:79:f2:49:38:
         5a:32:2f:89:f7:50:ba:1b:22:f1:66:07:ac:ad:41:54:52:0a:
         5b:de:fc:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj7FCX9mBlD7SCcwoLSvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2JmNzQ4ZTlmNDk5ODY4NWQwYzk2NWQyZGZkZjBmMzYy
YTUwNTIwHhcNMjYwMjA5MTgwMDE2WhcNMjYwMjEwMTgwMDE2WjAzMTEwLwYDVQQD
Eyg2NTFmYTIzOWQ0NDc1MjI0Zjg0NDdlYjVlMmFhY2ZlMjgzODUwMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTHoLNewv5JvfjmT9nZ4dkFo3AFp
sBWmNRlmZGdAbrWOGITcOieCebWJiHpOw5VXzno6hPGVmc4DGK8unbDnCh9+Vg89
snpsgE5+mG9Keu3jaQC2ySS07pqf67F1P4X3lACmTrJNDOAXtYrqGc1M8phTI/PE
lA3yINFA5NwTMV1XyQMqNCDF7Z+CPOkBm//UpTLz6iNubsIi4ZZda8mKfyjQz7E3
err65XE2xCdpa1J25NJW5ub1XorrcNN6mlQGvDUWy7lFTqxr41Wawrs2/zCMrQD0
GufmxvBQF1gkaKcfd9kNRWhXx8rp653NYeMyBo+HDx0YcDplmnW99PcNcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUfojnUR1Ik+ER+teKqz+KDhQAZMB8GA1UdIwQY
MBaAFAvL90jp9JmGhdDJZdLf3w82KlBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEt
N2Y5NmM5ZjA1ZjU0LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEtN2Y5NmM5ZjA1ZjU0
LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+OteCGT
kP+pydqdrotiwUW7LuzX1Z1+k4HsVGNtdnxH0+LHVZViw+aVcxEnb+/4j4khqu4G
Rxg5Q5Y6Vb5S5sZ87rwdFhAEZRZNFmD+iHauK8+CY07NcpB4ECBPgW6AbOQ/SKQk
06ww3xkYplNIPNOeVH2VOv6BlXJtBIyuFABPlQcpouW9IKU7wRdyVjS8CuMvVPQn
WQyMxMOb3GPRg3CNEn9KHB3fqcZpi06I6NsAKTZuwWkYsGQJYxVPtiWNS5UpjX+l
Yc0v63zAmLqzKu8Q++DyqPOC9c8ftNVFB5IRAynzr5x58kk4WjIvifdQuhsi8WYH
rK1BVFIKW978tw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:55 2026 by rpki-client