This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File:                     xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier:          SdCLLbskCfkspVLgsw78IqhNSEh+PS/BVKIjpy3b9BI=
Subject key identifier:   26:38:65:42:D1:E3:9B:DE:12:D6:C0:C1:06:83:59:93:B2:F1:3F:7B
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer:       /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial:       019C40FD4C91C66CE9CEB8E46B8306AAD99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number:          0D50
Signing time:             Mon 09 Feb 2026 06:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:07 +0000
Files and hashes:         1: LTb5vPloqkbClBKB9zASxlBnfTI.roa (hash: UXcXLrrBaIHA3rxo2Vg1OLmswtJ0WJsGAG20BgieLSw=)
                          2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: hnwouKgr3pT2DIWsovWOwwnRyASHgPh/osR0GX4bR1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:4c:91:c6:6c:e9:ce:b8:e4:6b:83:06:aa:d9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
        Validity
            Not Before: Feb  9 06:01:07 2026 GMT
            Not After : Feb 10 06:01:07 2026 GMT
        Subject: CN=26386542d1e39bde12d6c0c106835993b2f13f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cf:17:c8:02:37:86:9f:df:64:93:59:b7:a9:
                    ab:8f:32:16:aa:b3:16:2b:0b:9a:eb:ba:0c:8a:d3:
                    77:ec:32:f1:73:fb:a1:9e:f3:ba:bb:76:c3:38:63:
                    40:04:62:b4:3b:fd:e0:56:b9:53:19:e6:fe:67:b4:
                    db:63:66:84:be:3c:9f:7f:10:65:48:2b:7a:78:f2:
                    4c:1d:17:c3:c8:4f:14:29:a2:b0:1a:4e:f9:9c:ef:
                    e9:ff:3c:d0:5f:f1:02:88:e7:da:ce:e1:10:62:92:
                    22:9d:39:92:63:41:aa:6c:4f:22:bd:57:55:59:36:
                    31:f0:78:7e:6c:1d:5d:76:5a:3c:37:c6:3e:e8:77:
                    4a:bd:4d:ab:81:36:e7:7b:32:fb:cb:63:e4:4e:4b:
                    9a:4c:75:21:f2:55:06:90:86:28:f6:33:ff:bf:17:
                    ac:93:28:b2:25:1a:26:7f:bc:48:b5:e4:19:bd:a4:
                    fd:fb:13:62:92:9f:0f:8d:47:34:5f:5b:30:b0:48:
                    e8:f3:88:5c:5d:9e:ae:78:6b:e6:f4:be:bc:55:23:
                    3a:75:8d:26:39:6c:34:c3:27:eb:3b:b8:d3:63:3d:
                    d2:9e:ea:bb:98:99:78:d6:1e:20:91:ad:8b:ea:5d:
                    db:e1:f7:66:b3:41:4c:6c:2a:fb:d3:0d:c2:20:6d:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:65:42:D1:E3:9B:DE:12:D6:C0:C1:06:83:59:93:B2:F1:3F:7B
            X509v3 Authority Key Identifier:
                keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:71:09:8d:91:9a:ea:06:f5:83:4f:c4:92:7c:9b:0c:68:5e:
         46:dc:f1:25:7f:ea:2a:5c:44:94:11:61:11:07:89:09:ec:83:
         96:f6:7a:ac:b9:33:c3:62:a5:f4:aa:c7:b3:03:47:eb:36:d2:
         bb:15:47:09:40:01:5b:cc:d2:cb:7a:f6:6c:f9:34:8f:c3:84:
         78:0e:d2:cc:03:3a:19:90:96:f0:92:63:18:6b:c3:e2:a1:ae:
         60:79:5e:d0:84:a8:59:52:47:2d:f4:26:96:c6:da:45:d6:f2:
         45:dc:46:6b:29:3d:50:ce:ba:48:ef:51:cb:67:ed:a8:23:0f:
         51:0e:a5:af:26:b0:6d:f8:ea:5e:ec:7b:57:e2:8a:a6:b7:74:
         77:6e:5b:63:4f:65:7a:93:fe:c8:7d:be:52:eb:9c:aa:e8:58:
         d2:69:1a:4f:4e:bd:cf:01:e4:2f:8e:3d:e0:f6:b0:49:cc:3f:
         86:1c:bf:1a:2b:e3:b5:0b:48:ea:7b:ea:17:de:e1:12:16:a4:
         a2:4b:74:5f:e5:a3:34:b5:bc:7d:5d:51:91:74:43:ca:9a:5a:
         e5:ca:50:75:b4:38:d6:62:41:59:a8:45:f7:db:94:16:17:ac:
         e7:da:75:2b:c5:84:6d:77:98:97:1c:b5:5f:ca:e6:72:1e:6d:
         86:f4:e0:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/UyRxmzpzrjka4MGqtmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDM3OGViYTY0OGY0M2U1M2E0YTQxZTEzNGI5MDEzMWNh
OTNjZDgwHhcNMjYwMjA5MDYwMTA3WhcNMjYwMjEwMDYwMTA3WjAzMTEwLwYDVQQD
EygyNjM4NjU0MmQxZTM5YmRlMTJkNmMwYzEwNjgzNTk5M2IyZjEzZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi88XyAI3hp/fZJNZt6mrjzIWqrMW
Kwua67oMitN37DLxc/uhnvO6u3bDOGNABGK0O/3gVrlTGeb+Z7TbY2aEvjyffxBl
SCt6ePJMHRfDyE8UKaKwGk75nO/p/zzQX/ECiOfazuEQYpIinTmSY0GqbE8ivVdV
WTYx8Hh+bB1ddlo8N8Y+6HdKvU2rgTbnezL7y2PkTkuaTHUh8lUGkIYo9jP/vxes
kyiyJRomf7xIteQZvaT9+xNikp8PjUc0X1swsEjo84hcXZ6ueGvm9L68VSM6dY0m
OWw0wyfrO7jTYz3Snuq7mJl41h4gka2L6l3b4fdms0FMbCr70w3CIG040QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY4ZULR45veEtbAwQaDWZOy8T97MB8GA1UdIwQY
MBaAFMTTeOumSPQ+U6SkHhNLkBMcqTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMt
ZGQ1NWE4MDU2MzAzLzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMtZGQ1NWE4MDU2MzAz
LzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnEJjZGa
6gb1g0/EknybDGheRtzxJX/qKlxElBFhEQeJCeyDlvZ6rLkzw2Kl9KrHswNH6zbS
uxVHCUABW8zSy3r2bPk0j8OEeA7SzAM6GZCW8JJjGGvD4qGuYHle0ISoWVJHLfQm
lsbaRdbyRdxGayk9UM66SO9Ry2ftqCMPUQ6lryawbfjqXux7V+KKprd0d25bY09l
epP+yH2+UuucquhY0mkaT069zwHkL4494PawScw/hhy/GivjtQtI6nvqF97hEhak
okt0X+WjNLW8fV1RkXRDyppa5cpQdbQ41mJBWahF99uUFhes59p1K8WEbXeYlxy1
X8rmch5thvTgOA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:39 2026 by rpki-client