This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File:                     b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier:          jLFz8Dx90OWPEvbcWt0Y9NmSqQTY7fjhRVi1paMjpkg=
Subject key identifier:   9E:E7:68:32:3E:D2:E5:34:29:97:D3:3C:F2:BB:75:83:E5:35:2D:20
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer:       /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial:       019C41A1ECDF93380574D4DCFEBB27AD4E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 09:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:56 +0000
Files and hashes:         1: 91k_fzpu7lp58TCmwUevrrQ5DoY.roa (hash: yHiArpJVE3/8ANiCK9PBsJFPh8JxnEYzY6bUgQPEitY=)
                          2: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: GIWcKqWM1w0CIwCx5ziYKdzIfJ4AY8FW40YanUvakAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:ec:df:93:38:05:74:d4:dc:fe:bb:27:ad:4e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
        Validity
            Not Before: Feb  9 09:00:56 2026 GMT
            Not After : Feb 10 09:00:56 2026 GMT
        Subject: CN=9ee768323ed2e5342997d33cf2bb7583e5352d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:36:74:25:8e:9b:a1:b5:b2:df:a6:f9:ce:
                    1f:64:63:72:1b:5e:ed:76:6d:04:36:4b:e0:be:36:
                    7c:50:45:17:35:4e:ba:e3:09:19:8e:43:dc:3e:68:
                    15:ee:da:24:44:68:74:5f:8c:11:7a:02:77:38:bb:
                    20:1e:9a:df:49:fc:8c:07:6f:21:c2:d3:7e:98:5e:
                    e8:7d:fe:4a:59:32:d4:9e:a8:37:ca:b5:16:96:eb:
                    b5:4c:57:a3:d6:97:66:f7:d4:9b:ac:45:6d:37:4e:
                    e9:3b:60:c2:c8:92:aa:45:b2:59:a8:13:84:75:ae:
                    bd:20:67:8a:2a:96:5a:6c:22:db:df:1f:7a:82:be:
                    fa:24:f2:50:ac:da:98:1f:57:0c:b1:a6:9f:fc:1b:
                    6f:fe:5d:0a:43:b5:da:43:cb:a1:65:51:47:c6:f7:
                    af:8f:9c:00:58:2d:a6:58:fc:7a:5f:e6:8a:47:25:
                    b7:1e:19:bb:18:d5:04:3d:c3:b5:7a:11:e8:e2:79:
                    ff:a7:12:7d:7c:15:1c:51:44:70:f5:85:a4:3d:a6:
                    9c:99:7c:7a:d7:66:c7:9e:81:78:f5:f9:dd:8d:d2:
                    1e:64:46:2e:af:45:db:b9:25:9c:dc:71:f8:80:6b:
                    b6:d6:5f:ab:df:95:27:cf:4d:cc:0a:4b:05:60:3c:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E7:68:32:3E:D2:E5:34:29:97:D3:3C:F2:BB:75:83:E5:35:2D:20
            X509v3 Authority Key Identifier:
                keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fe:66:a2:58:e1:f9:7e:92:1b:34:5d:32:7d:04:0b:d6:44:
         e3:2f:73:8e:b9:2f:24:2e:9d:25:f7:a7:14:b8:0b:24:bf:5b:
         92:71:9c:1b:21:5a:a0:48:58:e2:8c:f4:08:5c:b8:34:c1:53:
         57:c0:05:d3:1b:bc:57:8b:b9:fb:33:cd:75:a1:aa:58:34:82:
         81:7b:e5:d2:31:6a:f5:a2:c0:64:96:13:09:e0:1e:57:cb:4d:
         48:df:25:5a:2c:7d:5a:8b:43:33:6b:b1:03:12:8b:bf:be:4a:
         33:9e:f3:a1:59:93:9a:be:9f:f8:ad:55:92:a3:2f:dd:a7:b4:
         b9:26:d1:fc:2c:8b:ad:94:97:6c:81:82:98:56:83:65:99:58:
         d9:8b:1b:db:ca:22:11:ba:36:1b:9b:e4:f4:85:ed:31:d4:b7:
         39:86:98:ec:f6:09:10:d8:1c:e9:6e:8c:2a:77:f5:61:65:34:
         8d:5f:39:37:22:d4:c4:14:59:ad:ab:90:19:f2:d3:ed:4c:65:
         07:25:a5:9c:4e:fe:24:e7:bf:03:e3:57:96:2b:69:d8:5c:41:
         43:cb:c2:ad:79:b6:c9:ec:b3:ac:fb:19:2e:44:eb:36:f7:fd:
         3a:42:49:b6:ef:9c:78:8b:0e:0b:d3:4c:c4:be:8e:ef:32:08:
         61:57:11:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoezfkzgFdNTc/rsnrU4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZWUyN2Q1OTRkZGIyZjA5YzhjYjU5MjQ1ODAxYzlhZjVh
MzRjMjIwHhcNMjYwMjA5MDkwMDU2WhcNMjYwMjEwMDkwMDU2WjAzMTEwLwYDVQQD
Eyg5ZWU3NjgzMjNlZDJlNTM0Mjk5N2QzM2NmMmJiNzU4M2U1MzUyZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9M2dCWOm6G1st+m+c4fZGNyG17t
dm0ENkvgvjZ8UEUXNU664wkZjkPcPmgV7tokRGh0X4wRegJ3OLsgHprfSfyMB28h
wtN+mF7off5KWTLUnqg3yrUWluu1TFej1pdm99SbrEVtN07pO2DCyJKqRbJZqBOE
da69IGeKKpZabCLb3x96gr76JPJQrNqYH1cMsaaf/Btv/l0KQ7XaQ8uhZVFHxvev
j5wAWC2mWPx6X+aKRyW3Hhm7GNUEPcO1ehHo4nn/pxJ9fBUcUURw9YWkPaacmXx6
12bHnoF49fndjdIeZEYur0XbuSWc3HH4gGu21l+r35Unz03MCksFYDy3uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7naDI+0uU0KZfTPPK7dYPlNS0gMB8GA1UdIwQY
MBaAFG/uJ9WU3bLwnIy1kkWAHJr1o0wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDct
ODc1NGExYzkwNjBiLzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDctODc1NGExYzkwNjBi
LzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/5moljh
+X6SGzRdMn0EC9ZE4y9zjrkvJC6dJfenFLgLJL9bknGcGyFaoEhY4oz0CFy4NMFT
V8AF0xu8V4u5+zPNdaGqWDSCgXvl0jFq9aLAZJYTCeAeV8tNSN8lWix9WotDM2ux
AxKLv75KM57zoVmTmr6f+K1VkqMv3ae0uSbR/CyLrZSXbIGCmFaDZZlY2Ysb28oi
Ebo2G5vk9IXtMdS3OYaY7PYJENgc6W6MKnf1YWU0jV85NyLUxBRZrauQGfLT7Uxl
ByWlnE7+JOe/A+NXlitp2FxBQ8vCrXm2yeyzrPsZLkTrNvf9OkJJtu+ceIsOC9NM
xL6O7zIIYVcRYQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:38 2026 by rpki-client