This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File:                     RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier:          7XsXG0efJu+jCumo1baqeVMBwZlOdHlGkSAAomRsb+k=
Subject key identifier:   E6:45:60:A0:7A:D4:CF:DD:4C:2D:20:51:D0:73:46:E4:E5:6D:8D:74
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer:       /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial:       019C427DB9452EE836D7C1C2FA2DD082B1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number:          05C1
Signing time:             Mon 09 Feb 2026 13:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:01 +0000
Files and hashes:         1: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: 2aAbmTAC/ZblRSN32CRhiorSZHT3HnVsRbubwTJMWL4=)
                          2: tgLyfLjlcwMzEupMfST57LV3Kh8.roa (hash: 0v0L+j/WsnBYBPti3JFWgZtxat+165mo5Q0XdxS+nu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:b9:45:2e:e8:36:d7:c1:c2:fa:2d:d0:82:b1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
        Validity
            Not Before: Feb  9 13:01:01 2026 GMT
            Not After : Feb 10 13:01:01 2026 GMT
        Subject: CN=e64560a07ad4cfdd4c2d2051d07346e4e56d8d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:ad:5f:21:ab:e4:1a:9f:32:b5:de:68:f8:
                    05:de:36:95:35:d6:61:e9:8b:1d:8f:2d:0a:2f:a1:
                    bd:b4:ca:61:da:45:5f:22:32:b8:3b:f2:4d:2d:18:
                    32:ae:72:85:c6:8a:fc:49:b5:11:be:ba:57:f0:30:
                    51:de:b8:95:06:01:a6:06:3f:6c:4f:b5:cd:e0:40:
                    48:5e:8c:d5:5e:a2:0f:93:ce:4f:f9:41:65:cd:4d:
                    34:6c:19:d1:b8:4b:0e:7c:5c:6f:2a:3f:ad:b2:3d:
                    27:7f:98:d1:96:4e:29:01:b9:c1:42:45:aa:e6:fd:
                    34:b8:88:75:5d:62:e5:23:c8:58:6c:14:6b:93:a0:
                    d6:6e:ff:8f:4a:82:1b:b3:b6:fc:47:12:60:9e:b5:
                    4e:88:23:b8:4f:25:96:d5:72:9a:9a:88:3e:6f:40:
                    28:c6:0e:ed:22:94:14:2b:88:48:f4:1e:21:2c:42:
                    60:85:d5:b9:aa:4e:e9:c4:45:58:e6:7c:0c:16:25:
                    71:5a:a5:79:9d:96:0c:7c:56:a2:96:96:5d:9c:88:
                    8a:5c:b1:71:1e:2f:90:ab:ba:d6:ec:9d:53:c2:f7:
                    d4:4a:1b:61:34:66:7a:ef:a7:f5:8b:6d:ac:2e:0b:
                    b1:8b:16:82:0e:43:97:9f:f6:a1:e1:78:18:c1:d8:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:45:60:A0:7A:D4:CF:DD:4C:2D:20:51:D0:73:46:E4:E5:6D:8D:74
            X509v3 Authority Key Identifier:
                keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:69:75:ff:3a:cf:eb:e3:32:42:fc:e4:87:4a:fe:c7:7c:
         6a:47:3d:79:03:fd:90:aa:04:f4:12:69:c8:08:59:59:ad:78:
         d3:9b:8b:fa:1c:03:b3:db:7f:dd:69:83:e1:e2:cb:e9:d4:39:
         43:56:09:62:29:87:b5:7d:50:f5:ed:98:60:c9:00:06:55:54:
         60:ae:5b:53:aa:c4:8b:d4:39:1d:7b:9d:df:67:ad:b8:a8:72:
         f1:50:be:a6:77:b7:87:c1:e5:75:83:ad:d5:e6:d1:28:db:69:
         12:09:88:06:4d:da:b2:06:b4:7b:f8:6c:ab:e3:cc:fc:c7:c3:
         95:4c:bc:e3:9b:88:79:92:91:4a:97:96:c5:0e:24:fa:67:d3:
         4d:96:f0:bd:56:50:76:c9:7f:7a:f8:ca:51:ba:82:99:3c:98:
         b2:5a:38:5a:ac:69:92:f0:7c:93:df:70:47:ab:fd:ab:98:c0:
         78:42:e2:35:67:c4:0b:f2:f4:71:6d:5f:26:2c:cb:5b:fe:4f:
         65:81:be:7f:d8:71:3c:d4:4b:28:5b:ab:9a:8e:b9:25:c6:80:
         c4:0c:1f:5f:fe:b4:fc:ce:4a:33:1d:48:c5:e3:e5:d0:ff:b9:
         48:c1:9e:46:cb:62:25:33:f7:34:88:22:ca:a7:5d:b7:ef:48:
         91:7d:2c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfblFLug218HC+i3QgrG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3
MTA4NWYwHhcNMjYwMjA5MTMwMTAxWhcNMjYwMjEwMTMwMTAxWjAzMTEwLwYDVQQD
EyhlNjQ1NjBhMDdhZDRjZmRkNGMyZDIwNTFkMDczNDZlNGU1NmQ4ZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbCtXyGr5BqfMrXeaPgF3jaVNdZh
6Ysdjy0KL6G9tMph2kVfIjK4O/JNLRgyrnKFxor8SbURvrpX8DBR3riVBgGmBj9s
T7XN4EBIXozVXqIPk85P+UFlzU00bBnRuEsOfFxvKj+tsj0nf5jRlk4pAbnBQkWq
5v00uIh1XWLlI8hYbBRrk6DWbv+PSoIbs7b8RxJgnrVOiCO4TyWW1XKamog+b0Ao
xg7tIpQUK4hI9B4hLEJghdW5qk7pxEVY5nwMFiVxWqV5nZYMfFailpZdnIiKXLFx
Hi+Qq7rW7J1TwvfUShthNGZ676f1i22sLguxixaCDkOXn/ah4XgYwdh8oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZFYKB61M/dTC0gUdBzRuTlbY10MB8GA1UdIwQY
MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt
OTI3MTliMDBiYmQ0LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0
LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkJpdf86
z+vjMkL85IdK/sd8akc9eQP9kKoE9BJpyAhZWa1405uL+hwDs9t/3WmD4eLL6dQ5
Q1YJYimHtX1Q9e2YYMkABlVUYK5bU6rEi9Q5HXud32etuKhy8VC+pne3h8HldYOt
1ebRKNtpEgmIBk3asga0e/hsq+PM/MfDlUy845uIeZKRSpeWxQ4k+mfTTZbwvVZQ
dsl/evjKUbqCmTyYslo4WqxpkvB8k99wR6v9q5jAeELiNWfEC/L0cW1fJizLW/5P
ZYG+f9hxPNRLKFurmo65JcaAxAwfX/60/M5KMx1IxePl0P+5SMGeRstiJTP3NIgi
yqddt+9IkX0sgA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:22 2026 by rpki-client