This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File:                     sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier:          yyz/VapKlcFl1LDGy2/6wGDDFvXRjdBTWWOqVQqhAwQ=
Subject key identifier:   E3:EB:22:D0:6A:07:D8:A8:90:B3:FF:F9:91:96:43:6E:0D:E2:85:F5
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer:       /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial:       019C4359127E76C0D1892D80F3E10FB8B90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number:          0ADA
Signing time:             Mon 09 Feb 2026 17:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:36 +0000
Files and hashes:         1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
                          2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: bWPgMSuhvUsU/JrosqrfYeasU44yFw4pktfCTnGrKqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:12:7e:76:c0:d1:89:2d:80:f3:e1:0f:b8:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
        Validity
            Not Before: Feb  9 17:00:36 2026 GMT
            Not After : Feb 10 17:00:36 2026 GMT
        Subject: CN=e3eb22d06a07d8a890b3fff99196436e0de285f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:84:9b:7a:b3:e3:05:32:c7:73:cb:ff:6b:
                    69:dc:5c:9e:d8:c6:16:7a:4a:9a:c1:2b:f4:1e:07:
                    c1:68:71:eb:c1:77:92:cd:9e:80:1f:aa:9a:aa:17:
                    a6:2a:4f:03:0f:4c:75:77:1b:8f:89:ec:9a:1b:29:
                    9a:59:b0:4d:a6:ee:7e:39:ac:92:69:e0:de:1a:bd:
                    f2:00:38:dc:dc:f8:ee:cc:6d:67:39:9d:39:c4:e9:
                    92:5f:4a:cd:13:ad:cd:a7:80:19:5c:0a:dc:b5:80:
                    0c:22:20:54:05:74:c6:17:75:e4:5f:55:d8:b0:3c:
                    c5:ac:9b:d2:08:36:55:52:cf:c7:9e:f9:09:81:31:
                    4e:ca:b5:6d:57:ed:e0:39:42:25:07:a2:16:14:2a:
                    be:47:f8:c6:24:2b:df:03:77:9f:cd:f4:4f:38:c9:
                    f9:96:c1:c6:67:15:5e:69:80:5e:ba:8f:9e:1b:69:
                    33:de:02:d4:17:20:25:ea:f6:08:76:1a:8c:60:74:
                    97:c0:cf:5c:eb:e4:33:d4:c8:79:80:ec:00:7a:65:
                    12:89:ad:6f:96:8a:1f:5f:4d:b4:ea:a9:db:91:36:
                    59:78:f7:05:0d:4c:2a:be:4a:a1:e9:6d:19:29:50:
                    ad:e1:60:06:50:62:8d:c6:d0:aa:da:3e:71:6f:a5:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EB:22:D0:6A:07:D8:A8:90:B3:FF:F9:91:96:43:6E:0D:E2:85:F5
            X509v3 Authority Key Identifier:
                keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:90:cd:e9:47:a1:34:5d:23:9d:d6:d5:d2:fd:b1:ab:5b:79:
         36:b0:06:43:b6:7f:4d:f3:11:d1:1a:a4:66:76:96:45:8b:c5:
         fe:19:1d:f2:0d:31:fb:a9:01:5c:5a:02:78:da:f8:22:5d:e9:
         97:48:f0:1a:58:e2:51:aa:45:5f:c7:46:9e:88:c8:3e:bf:17:
         dc:ed:bf:3e:cf:c5:d9:65:43:99:c8:55:a4:81:55:ba:32:78:
         03:d4:6b:f4:79:58:29:b9:44:84:de:0c:36:ab:b2:f2:20:f7:
         a0:90:36:5b:9b:df:a5:43:a6:41:40:e9:22:f8:23:ef:4f:27:
         c3:8b:84:4e:f3:ca:d0:da:1d:21:fe:c6:5f:5c:30:03:79:51:
         17:a2:6d:c2:04:a9:dd:1d:c9:03:82:a5:80:62:09:0b:84:ed:
         6c:cd:92:60:9f:29:b0:3c:aa:c9:fd:64:5c:69:8a:f6:4b:2b:
         f1:d8:f2:be:64:c1:ad:3a:e1:37:d8:48:eb:a1:e6:c3:b6:96:
         f8:8e:47:39:ef:72:e2:5a:b4:ac:5f:ba:f6:58:f8:b6:e1:f8:
         74:2f:92:ec:76:d3:e9:2c:af:43:b4:c7:a7:f1:62:35:9a:f4:
         f6:5f:83:59:89:f1:de:03:15:69:d3:74:7f:7a:ed:2b:7b:3e:
         e8:13:9a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWRJ+dsDRiS2A8+EPuLkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTEzMzM2YzM4ZWViYTEwY2JhYzljMjhjYWYxZWZjZjQ0
YWM4NjMwHhcNMjYwMjA5MTcwMDM2WhcNMjYwMjEwMTcwMDM2WjAzMTEwLwYDVQQD
EyhlM2ViMjJkMDZhMDdkOGE4OTBiM2ZmZjk5MTk2NDM2ZTBkZTI4NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyWEm3qz4wUyx3PL/2tp3Fye2MYW
ekqawSv0HgfBaHHrwXeSzZ6AH6qaqhemKk8DD0x1dxuPieyaGymaWbBNpu5+OayS
aeDeGr3yADjc3PjuzG1nOZ05xOmSX0rNE63Np4AZXArctYAMIiBUBXTGF3XkX1XY
sDzFrJvSCDZVUs/HnvkJgTFOyrVtV+3gOUIlB6IWFCq+R/jGJCvfA3efzfRPOMn5
lsHGZxVeaYBeuo+eG2kz3gLUFyAl6vYIdhqMYHSXwM9c6+Qz1Mh5gOwAemUSia1v
loofX0206qnbkTZZePcFDUwqvkqh6W0ZKVCt4WAGUGKNxtCq2j5xb6U9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPrItBqB9iokLP/+ZGWQ24N4oX1MB8GA1UdIwQY
MBaAFLChMzbDjuuhDLrJwoyvHvz0SshjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQt
MGE3NjhiMjQxMjVhLzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQtMGE3NjhiMjQxMjVh
LzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5DN6Ueh
NF0jndbV0v2xq1t5NrAGQ7Z/TfMR0RqkZnaWRYvF/hkd8g0x+6kBXFoCeNr4Il3p
l0jwGljiUapFX8dGnojIPr8X3O2/Ps/F2WVDmchVpIFVujJ4A9Rr9HlYKblEhN4M
Nquy8iD3oJA2W5vfpUOmQUDpIvgj708nw4uETvPK0NodIf7GX1wwA3lRF6JtwgSp
3R3JA4KlgGIJC4TtbM2SYJ8psDyqyf1kXGmK9ksr8djyvmTBrTrhN9hI66Hmw7aW
+I5HOe9y4lq0rF+69lj4tuH4dC+S7HbT6SyvQ7THp/FiNZr09l+DWYnx3gMVadN0
f3rtK3s+6BOa9Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:10 2026 by rpki-client