This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File:                     RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier:          oNRtVQ1TJxhQKCV5Li17UO3J7hkeucWuEFvAPaZRibM=
Subject key identifier:   87:B4:96:2E:66:20:5C:84:0B:B1:FB:FE:E5:FE:39:D5:EA:F1:D5:24
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer:       /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial:       019C44A2E6A1780CE7A99A31684F079DBDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number:          0EF8
Signing time:             Mon 09 Feb 2026 23:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:52 +0000
Files and hashes:         1: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: pY849yGg8RHjJqfSCEBPwsfyanWCF58n8Ed87ePkG9U=)
                          2: mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa (hash: V44Naao5RDfVhy6IuyFd+Vu8qSPEdskdDn/73lkjw0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:e6:a1:78:0c:e7:a9:9a:31:68:4f:07:9d:bd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
        Validity
            Not Before: Feb  9 23:00:52 2026 GMT
            Not After : Feb 10 23:00:52 2026 GMT
        Subject: CN=87b4962e66205c840bb1fbfee5fe39d5eaf1d524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:62:0b:4f:0f:2c:e2:69:a1:b6:cf:0a:33:
                    fc:fe:79:a0:03:00:4f:fe:b3:db:4f:c7:3a:78:23:
                    d3:df:6c:6b:8b:0f:06:77:6e:03:1d:dc:94:8e:b8:
                    76:c6:86:ae:4d:fa:8c:2b:fb:b3:1f:0e:d7:b6:d3:
                    13:8b:87:e8:e8:fb:0d:bf:ca:ac:54:e5:85:7c:ad:
                    73:fc:9e:52:40:17:e0:88:31:0f:00:2d:a0:4e:91:
                    1a:9a:69:bf:e5:ed:0b:ae:5c:1e:59:75:39:4b:06:
                    4c:62:38:70:e8:32:a5:f4:82:10:ef:64:45:6f:1b:
                    34:0e:33:bf:61:a0:d9:21:31:b7:65:1b:cc:00:60:
                    f3:f2:2e:5f:3d:75:de:63:b1:f2:f8:68:3c:e0:80:
                    3d:cf:14:82:4d:82:e8:47:0b:29:36:4e:0f:8c:35:
                    09:12:4e:a0:97:ff:d3:6d:91:6c:d3:0c:25:08:09:
                    3d:88:9a:3c:fe:56:69:c6:d3:9b:7f:04:d8:25:5d:
                    b9:ac:62:78:f5:56:54:3e:67:c4:5c:89:a4:50:67:
                    3a:54:48:fb:70:24:d3:51:79:b3:ca:d2:93:0b:70:
                    3a:ca:1b:13:d6:98:7d:4f:0c:ab:bd:ac:6c:9f:69:
                    44:e5:1a:5f:f9:d8:8f:93:ff:15:9b:54:ae:50:97:
                    67:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B4:96:2E:66:20:5C:84:0B:B1:FB:FE:E5:FE:39:D5:EA:F1:D5:24
            X509v3 Authority Key Identifier:
                keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:67:d2:10:7b:e9:8f:ab:d0:2c:b4:0a:4b:a3:04:48:2c:
         b8:d6:91:10:7f:87:f4:69:2b:f3:65:a2:b1:5d:6d:0e:ed:6e:
         7f:e2:b3:e1:71:58:38:95:a5:b3:62:12:c8:80:03:38:48:33:
         39:fe:a4:c3:de:b1:b0:43:ae:97:9d:7e:e6:92:0d:0e:4f:b8:
         dc:0a:c4:fa:e8:c6:79:60:39:bb:fd:08:41:32:4b:e6:e7:df:
         6f:57:05:ca:1d:13:29:33:f1:20:7b:c0:fc:5c:5a:eb:c0:f9:
         49:4f:8a:57:87:01:77:0e:33:3e:c1:a5:0a:0d:61:d8:b1:1a:
         bd:80:61:e6:db:10:17:f1:f4:25:a0:f5:b2:84:33:a7:e0:cf:
         9b:7f:da:36:b4:08:68:0f:30:00:5b:5a:e2:40:7f:bc:bb:14:
         e8:f4:e8:b4:7b:c9:90:ac:58:42:8a:e6:fa:e0:a5:f8:e2:02:
         19:90:7e:64:c3:25:19:e3:9e:2f:58:b6:39:14:54:10:33:fa:
         8f:16:0b:46:54:65:e2:1f:2b:ef:f1:ef:73:26:9e:db:52:47:
         34:40:30:41:95:15:12:3d:9b:9e:bd:a2:51:9d:9e:b1:77:b1:
         cf:64:43:44:ad:71:95:d1:6e:60:27:7b:be:4a:51:20:8a:4a:
         fe:76:c5:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEouaheAznqZoxaE8Hnb3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDJlNzU3OGFhYzk0ZjQyOTYwYTc4MGQzOTk2ZGE4YmI0
Njk0NzcwHhcNMjYwMjA5MjMwMDUyWhcNMjYwMjEwMjMwMDUyWjAzMTEwLwYDVQQD
Eyg4N2I0OTYyZTY2MjA1Yzg0MGJiMWZiZmVlNWZlMzlkNWVhZjFkNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbhiC08PLOJpobbPCjP8/nmgAwBP
/rPbT8c6eCPT32xriw8Gd24DHdyUjrh2xoauTfqMK/uzHw7XttMTi4fo6PsNv8qs
VOWFfK1z/J5SQBfgiDEPAC2gTpEammm/5e0LrlweWXU5SwZMYjhw6DKl9IIQ72RF
bxs0DjO/YaDZITG3ZRvMAGDz8i5fPXXeY7Hy+Gg84IA9zxSCTYLoRwspNk4PjDUJ
Ek6gl//TbZFs0wwlCAk9iJo8/lZpxtObfwTYJV25rGJ49VZUPmfEXImkUGc6VEj7
cCTTUXmzytKTC3A6yhsT1ph9Twyrvaxsn2lE5Rpf+diPk/8Vm1SuUJdnJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe0li5mIFyEC7H7/uX+OdXq8dUkMB8GA1UdIwQY
MBaAFETS51eKrJT0KWCngNOZbai7RpR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2Qt
ZjZmZDZiZDg1N2I4LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2QtZjZmZDZiZDg1N2I4
LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWxn0hB7
6Y+r0Cy0CkujBEgsuNaREH+H9Gkr82WisV1tDu1uf+Kz4XFYOJWls2ISyIADOEgz
Of6kw96xsEOul51+5pINDk+43ArE+ujGeWA5u/0IQTJL5uffb1cFyh0TKTPxIHvA
/Fxa68D5SU+KV4cBdw4zPsGlCg1h2LEavYBh5tsQF/H0JaD1soQzp+DPm3/aNrQI
aA8wAFta4kB/vLsU6PTotHvJkKxYQorm+uCl+OICGZB+ZMMlGeOeL1i2ORRUEDP6
jxYLRlRl4h8r7/Hvcyae21JHNEAwQZUVEj2bnr2iUZ2esXexz2RDRK1xldFuYCd7
vkpRIIpK/nbFSQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:55 2026 by rpki-client