This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File:                     AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier:          raAtgpA0gNmtLO9+RlMTumB1HpWVIUvC/HSxgkeW0J4=
Subject key identifier:   80:23:82:93:0A:54:FA:3F:27:DC:DD:F5:E6:FC:D8:64:B6:45:1B:F4
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer:       /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial:       019C42B486390297F6C6D89BE978B10995C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number:          103F
Signing time:             Mon 09 Feb 2026 14:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:52 +0000
Files and hashes:         1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: XY59EYNTm4eDbCC1ZC/lKUmTF4G3SOfha5cEbFdaXAM=)
                          2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:86:39:02:97:f6:c6:d8:9b:e9:78:b1:09:95:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
        Validity
            Not Before: Feb  9 14:00:52 2026 GMT
            Not After : Feb 10 14:00:52 2026 GMT
        Subject: CN=802382930a54fa3f27dcddf5e6fcd864b6451bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:cb:55:94:f6:e8:b6:92:04:9c:63:74:13:
                    32:e2:a4:b8:e9:e6:b0:9c:75:0c:64:27:0b:a5:5f:
                    0a:a8:c2:6c:51:a5:e9:f1:33:f9:b2:86:b9:7a:4b:
                    ca:e0:c8:d3:cf:13:ae:d0:70:5d:8b:c0:87:f2:0e:
                    8a:5e:5a:e5:31:fa:43:8c:25:5e:12:00:36:c4:1a:
                    15:7d:80:90:27:df:43:fc:7a:75:7a:07:ed:ca:dd:
                    d7:8d:47:35:18:1c:a2:5d:59:3d:67:93:cc:c8:58:
                    4a:93:83:0e:64:1c:e7:de:75:c9:f3:58:b5:30:c1:
                    9b:af:eb:40:63:59:3c:ce:b8:a4:55:1f:bd:4a:c7:
                    c0:05:43:63:f9:95:c3:64:28:b5:8f:65:0d:81:ca:
                    5f:66:17:2c:e1:5b:88:e6:80:6f:c3:00:63:a7:47:
                    43:bd:65:6d:9e:70:b4:39:86:ad:88:61:67:a8:4a:
                    80:14:b0:91:dd:13:ce:a7:94:cc:5c:2b:a6:9d:3c:
                    d4:8b:3b:f1:bd:eb:bd:f9:6b:43:98:64:be:b4:bc:
                    dc:89:2e:6d:7b:f3:34:a5:a8:e5:bd:ad:34:44:41:
                    cb:f6:e5:91:d3:10:52:59:e7:ce:a9:c7:e4:25:83:
                    6f:09:e5:cf:3c:9b:28:e5:74:d6:01:3a:d7:c8:57:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:23:82:93:0A:54:FA:3F:27:DC:DD:F5:E6:FC:D8:64:B6:45:1B:F4
            X509v3 Authority Key Identifier:
                keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:5d:55:3c:0e:0a:00:49:62:fb:5f:6d:c1:4f:96:92:4b:
         16:97:52:b1:12:8c:33:da:56:0c:b2:63:36:bd:d8:a4:77:5e:
         af:b6:d0:a3:eb:15:ec:6e:65:f3:0d:91:58:7a:7b:38:4a:c2:
         b5:c7:68:37:d4:01:78:fe:19:4d:74:e0:1b:72:40:20:c6:68:
         b8:40:a2:32:0b:1d:4f:7b:2c:b7:a1:86:04:66:02:83:37:90:
         8b:4f:f2:ab:ce:18:83:4a:69:6d:f6:e7:01:23:52:49:49:a1:
         da:32:07:a6:d5:c5:2d:00:3f:75:22:6d:57:2d:41:8d:c8:c4:
         c1:6a:00:23:e3:18:fa:20:05:a2:d5:82:79:08:0c:ef:de:93:
         4f:41:19:cf:0a:eb:94:84:cb:95:7e:6f:58:a2:64:c9:a1:13:
         7c:b1:29:52:26:46:b2:d0:0c:2c:85:db:48:e4:32:c0:f8:1f:
         19:6c:37:01:55:23:aa:2d:7d:39:00:66:ed:9c:65:16:d7:ff:
         7d:fd:b6:35:6b:d8:99:07:65:fb:7e:06:53:d0:2f:a8:ce:b4:
         0b:7e:41:61:9d:8d:de:1d:6c:00:56:52:f8:2a:1b:c8:52:5c:
         83:67:ac:af:53:e3:28:f2:a9:8d:bb:1b:3d:5c:bd:11:92:52:
         fe:4d:3e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtIY5Apf2xtib6XixCZXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzI0ZTZhYTU4ODMyOWVhYzdhOTM4ZmI5ODc4ZDEzMmYy
YTg1YWYwHhcNMjYwMjA5MTQwMDUyWhcNMjYwMjEwMTQwMDUyWjAzMTEwLwYDVQQD
Eyg4MDIzODI5MzBhNTRmYTNmMjdkY2RkZjVlNmZjZDg2NGI2NDUxYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7/LVZT26LaSBJxjdBMy4qS46eaw
nHUMZCcLpV8KqMJsUaXp8TP5soa5ekvK4MjTzxOu0HBdi8CH8g6KXlrlMfpDjCVe
EgA2xBoVfYCQJ99D/Hp1egftyt3XjUc1GByiXVk9Z5PMyFhKk4MOZBzn3nXJ81i1
MMGbr+tAY1k8zrikVR+9SsfABUNj+ZXDZCi1j2UNgcpfZhcs4VuI5oBvwwBjp0dD
vWVtnnC0OYatiGFnqEqAFLCR3RPOp5TMXCumnTzUizvxveu9+WtDmGS+tLzciS5t
e/M0pajlva00REHL9uWR0xBSWefOqcfkJYNvCeXPPJso5XTWATrXyFd8xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAjgpMKVPo/J9zd9eb82GS2RRv0MB8GA1UdIwQY
MBaAFAIyTmqliDKerHqTj7mHjRMvKoWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAt
NGRiOTg0ZTFjODMxLzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAtNGRiOTg0ZTFjODMx
LzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChFdVTwO
CgBJYvtfbcFPlpJLFpdSsRKMM9pWDLJjNr3YpHder7bQo+sV7G5l8w2RWHp7OErC
tcdoN9QBeP4ZTXTgG3JAIMZouECiMgsdT3sst6GGBGYCgzeQi0/yq84Yg0ppbfbn
ASNSSUmh2jIHptXFLQA/dSJtVy1BjcjEwWoAI+MY+iAFotWCeQgM796TT0EZzwrr
lITLlX5vWKJkyaETfLEpUiZGstAMLIXbSOQywPgfGWw3AVUjqi19OQBm7ZxlFtf/
ff22NWvYmQdl+34GU9AvqM60C35BYZ2N3h1sAFZS+CobyFJcg2esr1PjKPKpjbsb
PVy9EZJS/k0+mw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:00 2026 by rpki-client