This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File:                     pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier:          sEWLASUtuspeajWr16XkSiCFYuQXV9UrVfS62Hxl8S8=
Subject key identifier:   EA:51:27:B7:B2:52:FD:D6:4E:A6:D1:56:A5:C9:DF:77:73:89:02:74
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer:       /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial:       019C44349AEA3ECBE9CE7BCA57B3442E13A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number:          1118
Signing time:             Mon 09 Feb 2026 21:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:23 +0000
Files and hashes:         1: L7-WIklCKzAwiReoXEp9xRVENo0.roa (hash: MFsW1dq4HLP+RBbceeVBdgcqk98TN9POqdqj/eyse6g=)
                          2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: A/119EBeZzCIUpHgex6ghN3BEp0vWjJCXlV7Ahq01x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:9a:ea:3e:cb:e9:ce:7b:ca:57:b3:44:2e:13:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
        Validity
            Not Before: Feb  9 21:00:23 2026 GMT
            Not After : Feb 10 21:00:23 2026 GMT
        Subject: CN=ea5127b7b252fdd64ea6d156a5c9df7773890274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:8b:8a:cb:33:2c:6b:68:4b:38:e3:6e:84:
                    a3:e6:5c:33:8e:63:04:44:03:32:40:5d:c3:12:c8:
                    82:17:bc:f9:7d:fc:7d:16:e7:98:15:bd:a5:c7:fe:
                    a0:ac:9a:5e:96:ca:da:e8:e5:67:60:51:58:67:47:
                    e6:00:1c:58:e7:ca:0c:07:db:16:61:de:d0:d8:33:
                    92:44:28:0c:e9:0d:4b:d5:bb:d7:d7:66:51:81:e3:
                    9b:76:22:02:bd:b1:bc:7e:5d:47:7d:85:08:8e:aa:
                    18:0b:79:f9:be:68:28:70:37:00:05:f7:c9:55:cd:
                    18:aa:68:52:41:bf:31:ff:7e:df:0e:b9:10:7b:29:
                    03:7b:a9:a6:aa:40:01:71:64:60:1e:fe:7c:1e:a3:
                    14:d6:51:c1:6b:c3:0a:63:07:ab:c3:41:8b:ae:f0:
                    fa:0c:a5:14:7b:f5:04:da:64:aa:ad:27:3c:5b:fe:
                    d2:51:ab:3a:d4:8b:16:f3:01:cf:bd:c5:27:6a:30:
                    12:c9:45:1b:be:47:31:a4:a2:85:f2:48:87:4d:47:
                    cd:5b:a2:18:35:a6:c5:70:a9:d7:f5:3e:25:c3:0f:
                    0b:d5:c5:3c:f8:ca:89:29:d5:d6:fe:ef:61:34:1f:
                    19:e9:f0:bd:5b:0d:db:90:fe:71:55:a0:3f:02:aa:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:51:27:B7:B2:52:FD:D6:4E:A6:D1:56:A5:C9:DF:77:73:89:02:74
            X509v3 Authority Key Identifier:
                keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:ab:2f:ef:37:18:6b:40:3b:7c:ca:20:aa:2e:ab:da:10:
         b7:36:2c:9f:b8:4b:b2:3c:df:6d:f2:a2:b5:bd:fc:ea:34:30:
         cc:93:55:a6:d1:ff:f9:0e:20:f9:d5:e2:82:20:ef:46:bf:8d:
         33:49:07:99:b7:ec:b1:83:85:a1:58:e0:d2:75:35:11:1b:06:
         60:2c:dc:ba:46:36:6f:1d:96:99:c6:b6:b7:52:a1:09:66:0e:
         46:da:60:c4:25:a2:09:c6:e6:d2:9d:db:b5:98:12:4d:f5:a7:
         f9:09:39:14:7d:d5:d5:8d:bf:a0:dd:ad:82:12:47:99:e0:da:
         c1:04:01:85:7f:27:7f:3f:a6:64:62:46:41:6f:d8:81:53:e6:
         3c:d3:67:cb:a1:f8:52:0b:8c:3c:7e:01:2b:f8:45:01:09:9b:
         f8:fa:f0:f4:71:3e:c9:22:75:b2:61:1e:33:d4:c4:35:0c:ab:
         3e:81:7b:04:4a:f0:b2:8b:65:cb:ae:3e:95:a2:1a:98:d0:72:
         7b:28:6d:50:61:10:40:93:f3:50:0e:17:82:3a:db:3a:30:5b:
         b3:8a:b8:5f:6f:09:51:29:a9:da:8e:8f:92:82:4a:21:2d:5d:
         99:ee:df:c3:cf:1a:ec:1c:de:7d:aa:dd:bc:d8:ae:71:4f:bc:
         1a:03:4c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENJrqPsvpznvKV7NELhOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTg3MGZjMTg1NGEzYjA5MzkzOGMwOWNmNjA2NTFiYTk5
M2ZmYzYwHhcNMjYwMjA5MjEwMDIzWhcNMjYwMjEwMjEwMDIzWjAzMTEwLwYDVQQD
EyhlYTUxMjdiN2IyNTJmZGQ2NGVhNmQxNTZhNWM5ZGY3NzczODkwMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpeLisszLGtoSzjjboSj5lwzjmME
RAMyQF3DEsiCF7z5ffx9FueYFb2lx/6grJpelsra6OVnYFFYZ0fmABxY58oMB9sW
Yd7Q2DOSRCgM6Q1L1bvX12ZRgeObdiICvbG8fl1HfYUIjqoYC3n5vmgocDcABffJ
Vc0YqmhSQb8x/37fDrkQeykDe6mmqkABcWRgHv58HqMU1lHBa8MKYwerw0GLrvD6
DKUUe/UE2mSqrSc8W/7SUas61IsW8wHPvcUnajASyUUbvkcxpKKF8kiHTUfNW6IY
NabFcKnX9T4lww8L1cU8+MqJKdXW/u9hNB8Z6fC9Ww3bkP5xVaA/AqpUQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpRJ7eyUv3WTqbRVqXJ33dziQJ0MB8GA1UdIwQY
MBaAFKQYcPwYVKOwk5OMCc9gZRupk//GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83NzhjNDctNDYwOS00M2QzLWFlZWYt
NzljOGEyNDcyYTBjLzEvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83NzhjNDctNDYwOS00M2QzLWFlZWYtNzljOGEyNDcyYTBj
LzEvcEJod19CaFVvN0NUazR3SnoyQmxHNm1UXzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm6rL+83
GGtAO3zKIKouq9oQtzYsn7hLsjzfbfKitb386jQwzJNVptH/+Q4g+dXigiDvRr+N
M0kHmbfssYOFoVjg0nU1ERsGYCzcukY2bx2Wmca2t1KhCWYORtpgxCWiCcbm0p3b
tZgSTfWn+Qk5FH3V1Y2/oN2tghJHmeDawQQBhX8nfz+mZGJGQW/YgVPmPNNny6H4
UguMPH4BK/hFAQmb+Prw9HE+ySJ1smEeM9TENQyrPoF7BErwsotly64+laIamNBy
eyhtUGEQQJPzUA4XgjrbOjBbs4q4X28JUSmp2o6PkoJKIS1dme7fw88a7Bzefard
vNiucU+8GgNMXw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:16 2026 by rpki-client