This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
File:                     hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json)
Hash identifier:          2H+HZBy4a9Dd+gEyLOz8ifu+Vu383QfD1+i9DwCbQ1g=
Subject key identifier:   B9:FD:C7:97:6A:89:46:8D:72:22:A7:D3:46:D1:2E:B8:C6:DB:FB:1B
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Certificate issuer:       /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial:       019C42EBCE49F13D66CCC6EAA29EDB1D62CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
Manifest number:          1431
Signing time:             Mon 09 Feb 2026 15:01:15 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:15 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:15 +0000
Files and hashes:         1: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=)
                          2: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=)
                          3: 8rDvMkxptJnltjzzUCN1e7h2mu0.roa (hash: bN6iyJOU8RYfCqW0mfWStueUrIARdx585ED2RX3ioso=)
                          4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=)
                          5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=)
                          6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=)
                          7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=)
                          8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=)
                          9: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=)
                          10: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=)
                          11: ggV7rBXwprR59jciPQhDDTZxxmQ.roa (hash: I4MtXY7ClGvNcIjMAoHA2mKMcNbnijfTuvNa/n/j6Xw=)
                          12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: s7NG28bxmokN7MVg89+n0unGyJc2sK8YyaisEXJ7wM8=)
                          13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=)
                          14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:ce:49:f1:3d:66:cc:c6:ea:a2:9e:db:1d:62:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
        Validity
            Not Before: Feb  9 15:01:15 2026 GMT
            Not After : Feb 10 15:01:15 2026 GMT
        Subject: CN=b9fdc7976a89468d7222a7d346d12eb8c6dbfb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:74:43:94:16:d0:f2:53:a4:70:52:c8:02:a5:
                    ef:b0:96:24:cd:03:6b:32:74:dd:e2:6d:7a:bb:71:
                    2c:43:85:71:9a:d1:8b:57:4e:26:d1:85:fd:38:d0:
                    2c:15:0c:7d:23:b4:a5:c8:05:03:f9:df:83:25:2a:
                    50:73:76:4e:5e:56:14:33:80:90:31:99:59:5c:57:
                    35:98:66:c6:23:b9:c7:fa:1a:34:39:ce:cf:63:84:
                    f8:00:be:aa:6c:ef:c2:04:c1:73:e2:9d:1d:c9:e7:
                    0a:ec:f6:a3:96:da:41:79:30:d2:79:6d:f5:5e:08:
                    58:6b:12:b1:87:7a:ae:f0:23:e5:1a:aa:0c:ba:28:
                    54:a6:c3:d5:94:f8:49:fa:c3:9c:7e:e4:a1:b1:e1:
                    5d:de:69:4f:15:bc:fc:3e:09:06:98:46:a7:43:4e:
                    c8:13:61:90:a0:7d:7e:fb:b6:17:3d:7b:b0:e0:cb:
                    e9:85:a9:ec:45:81:e8:11:2a:44:9a:70:e0:2e:15:
                    81:e2:2d:c5:a1:49:ed:b3:8f:a4:50:55:76:b9:bc:
                    1f:7c:3a:f0:5a:db:d6:a9:d2:e9:35:8d:94:94:64:
                    84:f5:12:16:47:6f:8f:48:40:03:39:fa:3f:5c:05:
                    32:c3:76:90:ed:4b:d3:5e:b6:2c:13:ce:cf:bd:87:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FD:C7:97:6A:89:46:8D:72:22:A7:D3:46:D1:2E:B8:C6:DB:FB:1B
            X509v3 Authority Key Identifier:
                keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:ba:88:34:ea:c1:4c:06:54:20:84:b2:24:0e:82:5f:11:
         7a:9b:de:c2:17:d5:37:c9:a5:13:10:df:c1:07:83:00:30:c3:
         98:2f:4d:bc:5a:68:a1:4a:13:0d:86:d9:7f:28:c9:83:7c:35:
         17:85:25:0f:10:4d:ca:d9:06:ca:71:e3:28:8f:16:8c:71:c4:
         55:9c:81:76:9e:3e:93:72:d2:63:37:b9:73:d9:3e:dc:5b:f3:
         bd:26:ff:b3:31:bd:e9:40:50:05:01:aa:89:55:75:90:68:66:
         74:ec:3e:f1:76:ae:e6:3d:50:e4:88:2b:56:4c:d5:86:88:c5:
         a0:9e:4c:f6:9d:43:8e:0d:cd:0b:f3:ce:88:58:9a:5a:df:21:
         b2:f4:59:d1:72:6e:62:fd:5e:cd:28:f0:5e:a8:8a:53:d1:f4:
         6f:a9:46:4e:8d:11:e4:36:b4:b3:b1:b2:31:19:c3:e6:82:8c:
         a6:7c:16:b2:bf:de:59:79:26:ee:84:e5:0e:cd:f2:6e:4c:c6:
         8d:98:b2:18:16:ea:1b:4f:38:f8:21:7a:09:0d:2f:05:4e:f0:
         b0:1e:0c:cf:a9:40:ab:8f:58:ca:b3:e9:35:8e:72:96:05:a6:
         e2:99:eb:cb:2d:25:8c:c4:b6:58:50:1d:75:f7:83:f3:8f:22:
         98:66:6b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC685J8T1mzMbqop7bHWLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi
MmUyY2QwHhcNMjYwMjA5MTUwMTE1WhcNMjYwMjEwMTUwMTE1WjAzMTEwLwYDVQQD
EyhiOWZkYzc5NzZhODk0NjhkNzIyMmE3ZDM0NmQxMmViOGM2ZGJmYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+3RDlBbQ8lOkcFLIAqXvsJYkzQNr
MnTd4m16u3EsQ4VxmtGLV04m0YX9ONAsFQx9I7SlyAUD+d+DJSpQc3ZOXlYUM4CQ
MZlZXFc1mGbGI7nH+ho0Oc7PY4T4AL6qbO/CBMFz4p0dyecK7PajltpBeTDSeW31
XghYaxKxh3qu8CPlGqoMuihUpsPVlPhJ+sOcfuShseFd3mlPFbz8PgkGmEanQ07I
E2GQoH1++7YXPXuw4MvphansRYHoESpEmnDgLhWB4i3FoUnts4+kUFV2ubwffDrw
WtvWqdLpNY2UlGSE9RIWR2+PSEADOfo/XAUyw3aQ7UvTXrYsE87PvYeqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn9x5dqiUaNciKn00bRLrjG2/sbMB8GA1UdIwQY
MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt
ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi
LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOv66iDTq
wUwGVCCEsiQOgl8RepvewhfVN8mlExDfwQeDADDDmC9NvFpooUoTDYbZfyjJg3w1
F4UlDxBNytkGynHjKI8WjHHEVZyBdp4+k3LSYze5c9k+3FvzvSb/szG96UBQBQGq
iVV1kGhmdOw+8Xau5j1Q5IgrVkzVhojFoJ5M9p1Djg3NC/POiFiaWt8hsvRZ0XJu
Yv1ezSjwXqiKU9H0b6lGTo0R5Da0s7GyMRnD5oKMpnwWsr/eWXkm7oTlDs3ybkzG
jZiyGBbqG084+CF6CQ0vBU7wsB4Mz6lAq49YyrPpNY5ylgWm4pnryy0ljMS2WFAd
dfeD848imGZrsg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:03:06 2026 by rpki-client