This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File:                     bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier:          a5C4xRuAeCUus4PKqxzcnKkF5bJyogEzrQjQoHIkpTo=
Subject key identifier:   B7:E6:6B:8A:9D:4F:00:8B:42:A2:A0:76:20:1D:0B:FC:3C:E5:3F:7E
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer:       /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial:       019C427DBB15259F70182FEB7D1CFD2EDDB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number:          09A7
Signing time:             Mon 09 Feb 2026 13:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:02 +0000
Files and hashes:         1: 1wP7tKrHU793i9lAANAvF98w4jY.roa (hash: tk+jnzJLSmGPklGJJhOITYrmNwlbyXIF9jo1MJSghJ8=)
                          2: Xw4UeKgRwb2lGPFXPKGIgFV8zIg.roa (hash: O4zDvnneI6b8HVvHo7KP4twgP2izdITJyTreaB9hdaQ=)
                          3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: CUcwZaCQ48M/njOO6z06rH76p1WJZwENvtzAsGmMUJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:bb:15:25:9f:70:18:2f:eb:7d:1c:fd:2e:dd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
        Validity
            Not Before: Feb  9 13:01:02 2026 GMT
            Not After : Feb 10 13:01:02 2026 GMT
        Subject: CN=b7e66b8a9d4f008b42a2a076201d0bfc3ce53f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e6:3f:2f:3e:c7:fb:75:c1:be:78:7f:71:7b:
                    2a:53:93:ad:ce:c4:3b:92:e9:a4:26:0c:64:c2:f8:
                    39:45:38:77:91:27:b4:4d:cc:c0:e7:0b:f5:29:62:
                    ba:e3:60:67:d7:57:bd:db:5e:b4:8e:cc:47:c0:c5:
                    d9:75:45:1d:bf:12:df:8a:9d:56:69:89:5b:98:29:
                    dc:fe:20:9a:88:cd:04:9f:b5:ed:7b:80:6a:c8:a8:
                    76:70:e7:a1:cf:cb:24:51:01:e8:af:56:5d:14:0f:
                    87:b4:8f:d5:d4:e5:a3:dc:cb:b1:87:d9:d6:60:77:
                    44:b6:ab:1b:30:b7:9e:8a:85:5d:91:c5:68:73:af:
                    fc:eb:13:c1:19:33:8d:1e:ae:fd:8e:14:16:bc:04:
                    d5:df:48:c9:03:b8:e5:cb:3d:f1:37:50:ec:d5:b1:
                    7d:92:0a:f7:86:48:7e:09:cf:d5:c2:63:88:4a:3e:
                    65:53:4a:d9:54:e4:6b:3d:8a:9a:91:33:1c:64:00:
                    63:e4:e8:cc:d5:b7:e6:51:1f:3b:e2:7e:40:b8:2e:
                    f5:61:c5:ef:b5:eb:2b:5e:ee:aa:2a:d1:bf:06:49:
                    dd:b5:13:ea:2f:25:30:9b:5f:fe:ce:1e:3f:e0:b7:
                    b6:76:4e:a3:cf:e9:69:4b:b9:dc:8c:b1:07:05:1d:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E6:6B:8A:9D:4F:00:8B:42:A2:A0:76:20:1D:0B:FC:3C:E5:3F:7E
            X509v3 Authority Key Identifier:
                keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:da:5a:c3:bc:e8:bb:ee:b9:2e:64:df:77:28:2c:30:0b:6f:
         30:22:f5:14:25:5c:d5:db:e3:12:2e:aa:77:22:2d:14:1c:b7:
         eb:f8:54:71:6c:63:fe:a8:2b:e6:52:0d:a8:d0:07:5b:c7:e0:
         be:0c:6a:cc:35:c2:a1:4a:05:56:f7:bb:c2:4f:29:5e:3a:29:
         3e:d1:1c:18:22:8b:d9:3e:70:e5:46:04:a4:b6:2f:13:97:db:
         6c:03:96:4f:e9:75:82:37:1d:7c:c4:1c:44:ad:a3:e4:db:fc:
         8c:93:43:db:ef:39:1d:6c:17:7a:23:1f:e4:50:d5:6a:99:f2:
         9f:46:d1:8a:70:db:6d:11:20:22:26:7e:a9:fb:37:ce:13:53:
         e7:ae:c5:b0:16:07:f4:38:1d:87:1c:56:df:11:7c:11:6d:0f:
         6d:e5:cb:75:58:b6:ab:ae:cc:72:34:4e:5f:10:01:21:25:32:
         9c:46:fb:60:59:6b:13:8d:a6:88:ce:fa:32:c3:c9:ed:79:d6:
         02:18:4c:20:4e:11:d4:76:6d:81:aa:3e:52:2a:30:19:de:48:
         b2:2c:db:95:34:1b:ef:03:ff:18:96:53:34:d5:c3:54:ca:cc:
         63:c6:20:4e:76:4a:12:b6:ee:c2:3d:52:bc:d0:35:ca:a8:b3:
         1a:aa:6e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfbsVJZ9wGC/rfRz9Lt20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzIzNjcwZjk3ODljMDJkODNiYTdjMmU3ZTRjNmU5ZWRl
NTJmN2EwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD
EyhiN2U2NmI4YTlkNGYwMDhiNDJhMmEwNzYyMDFkMGJmYzNjZTUzZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eY/Lz7H+3XBvnh/cXsqU5OtzsQ7
kumkJgxkwvg5RTh3kSe0TczA5wv1KWK642Bn11e92160jsxHwMXZdUUdvxLfip1W
aYlbmCnc/iCaiM0En7Xte4BqyKh2cOehz8skUQHor1ZdFA+HtI/V1OWj3Muxh9nW
YHdEtqsbMLeeioVdkcVoc6/86xPBGTONHq79jhQWvATV30jJA7jlyz3xN1Ds1bF9
kgr3hkh+Cc/VwmOISj5lU0rZVORrPYqakTMcZABj5OjM1bfmUR874n5AuC71YcXv
tesrXu6qKtG/BkndtRPqLyUwm1/+zh4/4Le2dk6jz+lpS7ncjLEHBR3EJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfma4qdTwCLQqKgdiAdC/w85T9+MB8GA1UdIwQY
MBaAFGzCNnD5eJwC2Dunwufkxunt5S96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDct
OTA4N2UwZmYzZDM2LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDctOTA4N2UwZmYzZDM2
LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9paw7zo
u+65LmTfdygsMAtvMCL1FCVc1dvjEi6qdyItFBy36/hUcWxj/qgr5lINqNAHW8fg
vgxqzDXCoUoFVve7wk8pXjopPtEcGCKL2T5w5UYEpLYvE5fbbAOWT+l1gjcdfMQc
RK2j5Nv8jJND2+85HWwXeiMf5FDVapnyn0bRinDbbREgIiZ+qfs3zhNT567FsBYH
9DgdhxxW3xF8EW0PbeXLdVi2q67McjROXxABISUynEb7YFlrE42miM76MsPJ7XnW
AhhMIE4R1HZtgao+UiowGd5IsizblTQb7wP/GJZTNNXDVMrMY8YgTnZKErbuwj1S
vNA1yqizGqpuRA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:13 2026 by rpki-client