This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
File:                     v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json)
Hash identifier:          eXWP+0HRB0UeXdr7jb+IxAxlHI1kT4CAnA5/UufkV2k=
Subject key identifier:   8B:44:25:A2:D6:43:CA:84:B1:67:89:68:16:1F:C9:95:14:B3:1F:7E
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Certificate issuer:       /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial:       019C4246BC1874356FD5F01F3114E3FB9E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
Manifest number:          14E3
Signing time:             Mon 09 Feb 2026 12:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:57 +0000
Files and hashes:         1: v2jnTdk8Ahk3_NZELDsN38q8Dig.roa (hash: At3bpbo91k63f3L/tEszUY99MgueIkIhRgrR03val0o=)
                          2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: OXKtsI3wQVD2S+SoqZFdJg7aYF98yu/b95w+D8c/WUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:bc:18:74:35:6f:d5:f0:1f:31:14:e3:fb:9e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
        Validity
            Not Before: Feb  9 12:00:57 2026 GMT
            Not After : Feb 10 12:00:57 2026 GMT
        Subject: CN=8b4425a2d643ca84b1678968161fc99514b31f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:bb:92:7f:57:f3:f9:fb:40:8f:11:39:8b:
                    ab:1a:d8:ab:dd:41:d8:b7:74:4b:bf:45:10:9b:4f:
                    31:7b:f1:e4:d6:41:6b:16:2c:c0:9a:9a:e2:28:89:
                    b1:50:99:92:1a:a7:1d:26:77:89:82:04:f6:73:de:
                    a7:4c:86:a0:2f:63:b6:36:14:11:fa:27:9a:34:6e:
                    9b:f8:d4:d2:8b:fe:0d:38:00:a5:93:bf:3b:67:64:
                    fe:d8:90:56:ed:ce:9b:9b:1e:2b:d1:93:4a:9b:74:
                    ac:02:35:e4:8b:c8:3e:b3:8a:4e:a7:67:72:e1:a4:
                    d5:32:24:1c:1a:2a:e3:44:2e:50:8e:d6:f8:2d:82:
                    b7:e0:a7:8e:4a:2a:18:ce:34:ab:17:23:1a:86:e7:
                    e9:11:32:68:a5:25:b4:94:31:61:ab:55:74:5f:2d:
                    3d:8d:90:fc:0b:12:52:14:50:5f:94:fc:73:d4:cc:
                    12:2b:37:21:70:28:4c:43:49:bb:59:61:58:57:fa:
                    cf:bc:f8:a2:7a:8a:43:29:da:b5:ab:61:2b:c4:d4:
                    62:98:ae:29:78:e9:99:ed:76:a6:67:69:e5:1a:1d:
                    c1:dd:f7:bf:1d:1b:e4:ba:f3:20:cc:c4:2f:a0:38:
                    6a:d3:05:39:be:2e:86:f3:61:43:f7:19:a8:1b:28:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:44:25:A2:D6:43:CA:84:B1:67:89:68:16:1F:C9:95:14:B3:1F:7E
            X509v3 Authority Key Identifier:
                keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:4d:0e:8d:aa:d7:5f:e8:52:e5:14:a0:dd:07:70:61:eb:
         a3:4b:24:e7:b5:75:54:bb:51:20:26:04:cc:74:c3:1c:ae:bf:
         52:ac:ed:aa:c8:f9:8f:3f:b8:d0:cd:46:f3:3d:c5:7c:81:4b:
         c9:b0:14:fb:6f:e8:47:f0:67:d3:8f:be:c8:2a:0d:2d:25:dd:
         06:ac:f1:89:58:2b:6a:6f:96:a2:8b:90:34:77:f1:c2:69:cf:
         2f:00:43:79:90:fb:da:53:d2:6a:80:57:3e:71:27:80:55:ef:
         a0:83:ab:ca:84:3f:88:b7:f3:17:28:d3:d3:63:7d:49:82:38:
         60:be:39:05:a2:2c:01:a5:a9:c2:a7:00:ab:8a:6d:05:09:20:
         7a:a8:ef:a2:2d:fc:e8:fb:97:80:d5:8b:bb:f7:d9:53:ec:18:
         7d:f1:28:fe:fd:55:7b:56:85:ab:ac:86:e6:19:9c:b7:b9:ab:
         99:9a:b2:3c:b3:90:db:9a:79:d6:90:87:64:42:27:f4:a6:28:
         95:d0:7a:93:27:3b:ae:60:69:d4:b0:8c:fb:8b:58:59:8b:10:
         35:35:37:66:94:1d:f1:11:25:00:1c:b5:d3:61:44:96:a0:3c:
         47:33:ea:8e:96:6e:b5:a7:7b:bc:72:93:a2:85:82:03:7e:9a:
         a5:a3:05:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRrwYdDVv1fAfMRTj+540MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWQ4MjMxYTQ2YzY0MWM3YWIzMDFkN2JmYmVmMGRjMDlh
Y2Q0Y2UwHhcNMjYwMjA5MTIwMDU3WhcNMjYwMjEwMTIwMDU3WjAzMTEwLwYDVQQD
Eyg4YjQ0MjVhMmQ2NDNjYTg0YjE2Nzg5NjgxNjFmYzk5NTE0YjMxZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwba7kn9X8/n7QI8ROYurGtir3UHY
t3RLv0UQm08xe/Hk1kFrFizAmpriKImxUJmSGqcdJneJggT2c96nTIagL2O2NhQR
+ieaNG6b+NTSi/4NOAClk787Z2T+2JBW7c6bmx4r0ZNKm3SsAjXki8g+s4pOp2dy
4aTVMiQcGirjRC5Qjtb4LYK34KeOSioYzjSrFyMahufpETJopSW0lDFhq1V0Xy09
jZD8CxJSFFBflPxz1MwSKzchcChMQ0m7WWFYV/rPvPiieopDKdq1q2ErxNRimK4p
eOmZ7XamZ2nlGh3B3fe/HRvkuvMgzMQvoDhq0wU5vi6G82FD9xmoGygdvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItEJaLWQ8qEsWeJaBYfyZUUsx9+MB8GA1UdIwQY
MBaAFL+tgjGkbGQcerMB17++8NwJrNTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUt
OWRkNDJjMTcxMTEyLzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUtOWRkNDJjMTcxMTEy
LzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGpNDo2q
11/oUuUUoN0HcGHro0sk57V1VLtRICYEzHTDHK6/Uqztqsj5jz+40M1G8z3FfIFL
ybAU+2/oR/Bn04++yCoNLSXdBqzxiVgram+WoouQNHfxwmnPLwBDeZD72lPSaoBX
PnEngFXvoIOryoQ/iLfzFyjT02N9SYI4YL45BaIsAaWpwqcAq4ptBQkgeqjvoi38
6PuXgNWLu/fZU+wYffEo/v1Ve1aFq6yG5hmct7mrmZqyPLOQ25p51pCHZEIn9KYo
ldB6kyc7rmBp1LCM+4tYWYsQNTU3ZpQd8RElABy102FElqA8RzPqjpZutad7vHKT
ooWCA36apaMFHA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:39 2026 by rpki-client