This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File:                     cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier:          GxV8maeZnQ74T26pbem2/MKn+F72duSlToD6fFORSyE=
Subject key identifier:   34:4D:C0:99:48:64:F8:03:13:C8:D0:41:65:99:D9:FD:38:E2:9B:C2
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer:       /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial:       019C44351B05296634D3062AC2B92D0F0C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number:          1252
Signing time:             Mon 09 Feb 2026 21:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:56 +0000
Files and hashes:         1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
                          2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: w0ONj81H3ne4JmlNFy7F8hEfRPFTBScLp3yfrfsrMF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:1b:05:29:66:34:d3:06:2a:c2:b9:2d:0f:0c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
        Validity
            Not Before: Feb  9 21:00:56 2026 GMT
            Not After : Feb 10 21:00:56 2026 GMT
        Subject: CN=344dc0994864f80313c8d0416599d9fd38e29bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:fa:b3:f0:d8:66:ad:0f:b8:a4:78:0a:12:
                    73:df:27:7d:0f:15:5d:33:37:14:62:fb:7a:8d:ad:
                    35:fe:45:6f:d2:26:8f:29:27:ad:b8:b9:29:55:79:
                    7e:9b:1b:e0:17:bd:9b:ea:a5:fb:5a:45:34:b7:2f:
                    ae:2f:fb:18:d5:9d:2d:5b:2b:d1:0b:ad:dd:d8:07:
                    1a:78:d4:72:40:40:67:fc:08:65:a5:c2:79:4e:04:
                    26:f9:04:26:38:a5:80:9d:6a:7b:a1:49:37:23:5b:
                    fc:bf:78:16:5e:a0:71:f1:7f:7c:1e:fd:bd:31:d7:
                    88:a5:66:5f:97:e4:a6:82:85:b6:3a:15:28:84:89:
                    ec:64:49:a7:5e:b8:2e:c1:a8:4d:58:0f:25:2c:e6:
                    9c:b9:b5:d9:a7:e2:8c:51:29:b2:45:e6:27:bf:be:
                    c3:cc:f8:9d:5e:41:04:53:f2:9f:95:f0:23:ad:bb:
                    ba:a7:1c:f1:a0:68:d1:a6:03:d7:f6:9f:95:63:0b:
                    e2:5e:83:ae:7d:b1:88:47:38:e4:2d:e1:67:a5:b1:
                    45:e2:b7:8b:c8:d0:ee:28:fb:e0:4d:d7:b2:45:3e:
                    be:e4:75:fd:1d:ca:06:0b:15:2e:1d:6a:c8:3e:1d:
                    d8:f8:75:d3:88:71:71:30:03:38:26:3b:14:07:ab:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4D:C0:99:48:64:F8:03:13:C8:D0:41:65:99:D9:FD:38:E2:9B:C2
            X509v3 Authority Key Identifier:
                keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:1d:af:ce:ea:3b:22:f1:11:6d:24:a2:ac:dd:ba:6b:8b:f6:
         b9:9a:62:1d:22:ae:04:c1:af:de:6f:8c:e8:d3:3b:48:36:80:
         48:db:c8:ab:c1:18:cb:f4:eb:03:fa:02:b0:c8:44:b9:5c:01:
         aa:74:81:4d:01:bd:b4:b7:34:66:23:a5:3e:6b:2c:c2:f1:22:
         d6:84:be:6b:64:ca:36:ce:d7:9c:f0:70:e7:47:55:f2:25:36:
         a7:0f:1c:06:a6:49:b2:8d:c5:17:3b:d3:23:65:d2:6c:69:00:
         84:a7:c9:c4:0a:2c:bb:db:56:c3:9b:b1:d0:0e:4f:9c:45:41:
         7a:bd:fb:c5:05:42:7a:63:61:d7:4d:b0:9b:2b:9b:45:e8:d5:
         f3:b8:7d:d5:f1:d8:08:2f:ac:5b:20:df:2d:a6:7f:2d:29:1b:
         1e:b8:c9:d3:b4:22:8a:d0:cd:8d:21:41:a6:09:b8:28:95:26:
         71:a3:58:24:64:6c:31:09:f9:a1:21:2f:a0:c1:b2:1d:4c:f6:
         b6:ef:c6:3b:b7:df:24:83:59:37:d3:41:d7:e1:04:21:b8:2e:
         26:c4:b4:a8:9e:65:29:03:de:e0:3b:ad:7f:6f:9d:8b:68:92:
         f4:83:c6:a8:64:6b:1d:3d:ab:a4:03:65:ba:c2:63:b5:39:59:
         09:59:a4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENRsFKWY00wYqwrktDwx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxY2VjMjY5Zjg0ZDU2NDFmZjYzYTYzZDFmMzk5N2M4Y2Zk
NGZlMjgwHhcNMjYwMjA5MjEwMDU2WhcNMjYwMjEwMjEwMDU2WjAzMTEwLwYDVQQD
EygzNDRkYzA5OTQ4NjRmODAzMTNjOGQwNDE2NTk5ZDlmZDM4ZTI5YmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfH6s/DYZq0PuKR4ChJz3yd9DxVd
MzcUYvt6ja01/kVv0iaPKSetuLkpVXl+mxvgF72b6qX7WkU0ty+uL/sY1Z0tWyvR
C63d2AcaeNRyQEBn/AhlpcJ5TgQm+QQmOKWAnWp7oUk3I1v8v3gWXqBx8X98Hv29
MdeIpWZfl+SmgoW2OhUohInsZEmnXrguwahNWA8lLOacubXZp+KMUSmyReYnv77D
zPidXkEEU/KflfAjrbu6pxzxoGjRpgPX9p+VYwviXoOufbGIRzjkLeFnpbFF4reL
yNDuKPvgTdeyRT6+5HX9HcoGCxUuHWrIPh3Y+HXTiHFxMAM4JjsUB6tgywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRNwJlIZPgDE8jQQWWZ2f044pvCMB8GA1UdIwQY
MBaAFHHOwmn4TVZB/2OmPR85l8jP1P4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUt
YTc2MmU5YzBkZDMyLzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUtYTc2MmU5YzBkZDMy
LzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwR2vzuo7
IvERbSSirN26a4v2uZpiHSKuBMGv3m+M6NM7SDaASNvIq8EYy/TrA/oCsMhEuVwB
qnSBTQG9tLc0ZiOlPmsswvEi1oS+a2TKNs7XnPBw50dV8iU2pw8cBqZJso3FFzvT
I2XSbGkAhKfJxAosu9tWw5ux0A5PnEVBer37xQVCemNh102wmyubRejV87h91fHY
CC+sWyDfLaZ/LSkbHrjJ07QiitDNjSFBpgm4KJUmcaNYJGRsMQn5oSEvoMGyHUz2
tu/GO7ffJINZN9NB1+EEIbguJsS0qJ5lKQPe4Dutf2+di2iS9IPGqGRrHT2rpANl
usJjtTlZCVmkpw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:35 2026 by rpki-client