This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File:                     vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier:          p9mzDKPi1oPjnAj/Cp6Y1w2d2qDMGns7kxzdTuXqwTo=
Subject key identifier:   FD:29:DA:F3:02:F5:80:1D:9F:F4:54:49:06:C3:A3:F3:09:E3:38:FF
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer:       /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial:       019C4322F0E16A533DFEA234006B7DDAC4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number:          02FA
Signing time:             Mon 09 Feb 2026 16:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:29 +0000
Files and hashes:         1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
                          2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
                          3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: TbXKZgNaFcvpUFfmvTSwl+5XSnqLnWcisFVqr3eOKlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:f0:e1:6a:53:3d:fe:a2:34:00:6b:7d:da:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
        Validity
            Not Before: Feb  9 16:01:29 2026 GMT
            Not After : Feb 10 16:01:29 2026 GMT
        Subject: CN=fd29daf302f5801d9ff4544906c3a3f309e338ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:cf:60:60:96:53:cb:bb:f7:36:9f:1b:cc:
                    6d:b3:fd:16:e1:49:c9:78:de:74:65:da:c5:67:6a:
                    37:ae:83:22:a1:ef:a8:49:ae:d9:48:81:f8:4f:4c:
                    f1:91:95:32:39:6f:bd:7e:67:7c:e1:e0:9d:ff:45:
                    f2:5f:4a:10:c2:ea:24:e0:87:74:ea:60:aa:72:fb:
                    e0:96:e8:43:2f:e7:7d:56:cc:a0:d5:6a:4c:2a:f8:
                    4c:00:53:41:b4:29:c5:47:7a:d7:ec:76:b4:19:4d:
                    29:7b:c5:ba:5e:c6:18:61:eb:cc:33:3c:fb:f7:91:
                    90:9d:89:ba:6a:a5:08:de:c0:90:01:a5:c2:93:77:
                    a5:aa:ea:da:ba:12:75:13:1c:56:50:08:9d:82:50:
                    e3:d4:19:b4:52:f5:80:7f:d7:c0:7d:c0:1e:80:dc:
                    31:06:de:c9:a1:13:8d:0d:c6:89:e2:84:9b:aa:13:
                    f3:8e:5a:66:bc:f9:17:db:a2:0d:d9:70:b9:a1:7e:
                    e8:6d:49:dc:f0:f7:2b:72:5e:86:ed:ef:10:ab:8e:
                    8e:22:95:1f:52:43:36:e8:a3:0f:7e:b0:3f:90:72:
                    91:ac:79:59:b1:31:2b:0b:50:d0:3a:13:25:f6:4f:
                    4b:b2:3a:15:71:18:d0:5b:71:54:e9:9d:69:68:06:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:29:DA:F3:02:F5:80:1D:9F:F4:54:49:06:C3:A3:F3:09:E3:38:FF
            X509v3 Authority Key Identifier:
                keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:f7:05:39:4b:82:1e:b3:01:2c:e2:6e:5d:15:0a:a2:bd:
         ba:37:16:4f:03:5f:97:0c:f0:e5:06:c6:3f:d8:2c:c2:cc:5c:
         fa:52:63:b6:3a:4c:94:b0:8d:8e:54:ce:7c:48:b8:cb:5c:0c:
         10:0c:31:6d:74:34:59:9c:e9:04:18:72:91:69:b4:b5:eb:1d:
         4e:56:87:e6:bf:f3:78:19:5b:fd:bf:3f:75:5e:c2:6c:94:aa:
         84:f7:43:20:92:91:d6:5e:d8:93:4f:c4:cb:db:13:7c:b0:da:
         c2:f7:b6:bc:84:57:8d:2f:75:ef:f3:03:8a:ce:9a:21:63:58:
         9a:b3:aa:2e:7b:be:83:06:61:15:63:3e:13:97:7a:af:97:52:
         d3:8e:fd:6c:06:b8:98:8c:71:0f:1f:1d:1f:b7:07:57:3b:41:
         42:11:ab:9b:ec:e1:5e:0b:9c:29:2d:04:5c:3b:56:61:ac:2c:
         b6:c4:1a:51:3c:92:24:83:0a:8e:31:f9:f0:16:f1:09:30:22:
         dc:a7:97:d1:7b:ec:84:85:d2:2f:0b:cb:93:bd:97:be:d5:ab:
         33:b3:7e:86:0c:8c:d0:9c:be:73:ac:a3:7c:bb:85:0c:d9:5f:
         a9:3d:ea:08:9a:0a:91:c9:78:d8:4d:2c:8f:65:bd:39:8b:6c:
         61:2b:e0:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIvDhalM9/qI0AGt92sTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOWEwMzUyMTg2NGZkZTU3MWFmYWRlZjAxZjMyOTc1OTgz
ZDFmNjIwHhcNMjYwMjA5MTYwMTI5WhcNMjYwMjEwMTYwMTI5WjAzMTEwLwYDVQQD
EyhmZDI5ZGFmMzAyZjU4MDFkOWZmNDU0NDkwNmMzYTNmMzA5ZTMzOGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RnPYGCWU8u79zafG8xts/0W4UnJ
eN50ZdrFZ2o3roMioe+oSa7ZSIH4T0zxkZUyOW+9fmd84eCd/0XyX0oQwuok4Id0
6mCqcvvgluhDL+d9Vsyg1WpMKvhMAFNBtCnFR3rX7Ha0GU0pe8W6XsYYYevMMzz7
95GQnYm6aqUI3sCQAaXCk3elqurauhJ1ExxWUAidglDj1Bm0UvWAf9fAfcAegNwx
Bt7JoRONDcaJ4oSbqhPzjlpmvPkX26IN2XC5oX7obUnc8Pcrcl6G7e8Qq46OIpUf
UkM26KMPfrA/kHKRrHlZsTErC1DQOhMl9k9LsjoVcRjQW3FU6Z1paAZL5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0p2vMC9YAdn/RUSQbDo/MJ4zj/MB8GA1UdIwQY
MBaAFL2aA1IYZP3lca+t7wHzKXWYPR9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQt
Njc5NWU2Yzg3MjQ3LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQtNjc5NWU2Yzg3MjQ3
LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUH3BTlL
gh6zASzibl0VCqK9ujcWTwNflwzw5QbGP9gswsxc+lJjtjpMlLCNjlTOfEi4y1wM
EAwxbXQ0WZzpBBhykWm0tesdTlaH5r/zeBlb/b8/dV7CbJSqhPdDIJKR1l7Yk0/E
y9sTfLDawve2vIRXjS917/MDis6aIWNYmrOqLnu+gwZhFWM+E5d6r5dS0479bAa4
mIxxDx8dH7cHVztBQhGrm+zhXgucKS0EXDtWYawstsQaUTySJIMKjjH58BbxCTAi
3KeX0XvshIXSLwvLk72XvtWrM7N+hgyM0Jy+c6yjfLuFDNlfqT3qCJoKkcl42E0s
j2W9OYtsYSvg/Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:57 2026 by rpki-client