This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File:                     BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier:          Eoui5vOZ0DPcd/QvzTKHLuy581HSXSfOaRiwzq169Bo=
Subject key identifier:   9E:76:BF:C1:B0:6E:5F:03:33:37:35:7A:9E:26:2F:EE:D9:E2:59:52
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer:       /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial:       019C4434D5E092D5F733E0F7D44486476DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 21:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:39 +0000
Files and hashes:         1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
                          2: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (hash: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q=)
                          3: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
                          4: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
                          5: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
                          6: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
                          7: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: xha56AbmBpclBziyzyOutiHHETfdpT8zl3urcTGHdIw=)
                          8: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
                          9: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
                          10: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
                          11: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
                          12: hMC8ouPga06DMuQ-1nVP3iL6_yU.roa (hash: bNzck35dxk6Gqi9cN9AAQtvE47sk8feFX04wDlazWdw=)
                          13: i-N27op-z7hkiqBEGNqq-kz27FM.roa (hash: rCF63L7W07eBpUJCTAH9Z0zj4zxOfcnsBXrV71Po2W0=)
                          14: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
                          15: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
                          16: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
                          17: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
                          18: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:d5:e0:92:d5:f7:33:e0:f7:d4:44:86:47:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
        Validity
            Not Before: Feb  9 21:00:39 2026 GMT
            Not After : Feb 10 21:00:39 2026 GMT
        Subject: CN=9e76bfc1b06e5f033337357a9e262feed9e25952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:af:f8:36:24:84:55:db:9a:cd:9b:6e:52:67:
                    43:c0:30:0e:f9:a9:bc:6e:fe:06:d1:9d:3e:61:f4:
                    11:82:fb:a2:e5:03:d6:ed:92:31:e8:23:6f:53:4c:
                    84:e8:ac:ed:0e:36:5b:0d:07:19:3c:55:94:21:b7:
                    f3:7f:b4:8a:78:f3:9c:c6:7a:50:db:3b:f0:c4:fb:
                    a6:e9:8a:15:d4:3e:aa:2d:1b:20:64:b7:8f:0a:6f:
                    2f:a4:42:57:10:d3:75:8b:4f:ae:a8:ae:97:72:74:
                    1f:ba:7d:46:33:10:89:7b:25:a1:d3:f8:77:96:00:
                    bb:b8:15:98:78:16:87:58:f0:d2:07:ef:2e:0b:01:
                    07:ee:61:b5:b9:37:06:20:01:24:0e:0e:36:c5:3b:
                    95:0e:b6:57:cc:0e:55:ea:e1:02:b7:5b:3d:50:0f:
                    a4:69:64:e5:3a:ba:b2:63:ac:f1:3b:e1:15:5b:af:
                    5f:d5:99:60:c7:85:a9:61:14:fb:7d:bf:83:54:98:
                    45:2f:09:c0:05:bb:e5:59:4c:ba:98:60:1b:19:d3:
                    2b:0c:b9:e3:c8:11:aa:39:d8:99:d2:a4:f7:37:b0:
                    c4:ed:89:12:2f:12:05:81:63:5d:85:f3:59:cb:f6:
                    5e:a1:8a:71:ff:3f:d3:8a:bb:a6:62:c5:36:57:d6:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:BF:C1:B0:6E:5F:03:33:37:35:7A:9E:26:2F:EE:D9:E2:59:52
            X509v3 Authority Key Identifier:
                keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e3:85:40:9d:e7:90:03:df:87:3e:c5:1e:9f:66:10:ba:db:
         c3:86:bc:fe:4f:af:0c:97:c9:72:44:f4:de:20:d7:6f:16:46:
         7d:03:45:2e:0a:09:ab:cc:0b:c3:f7:8a:33:ed:b8:f2:d8:5d:
         e0:b5:a8:d1:f6:42:13:f6:8d:ed:7a:3a:d5:6c:9e:9c:7e:2c:
         0c:59:b1:d3:72:57:38:43:f6:04:ce:3c:f2:ac:7c:ae:69:48:
         31:12:c6:49:29:1e:4a:34:1b:49:0e:8f:d9:21:58:fb:2b:40:
         d4:5c:c6:a7:25:fc:56:fc:be:0d:78:28:d1:09:f2:7c:42:ac:
         dd:cd:be:56:22:ae:78:1e:e8:ea:d3:c4:11:dc:4d:b5:9d:66:
         49:61:22:51:ea:46:9f:30:1f:0e:72:bc:e1:93:31:e8:fd:86:
         4c:03:ea:78:6b:80:95:63:d0:5e:7f:bb:40:fe:bc:11:87:f8:
         b0:ca:6f:32:0a:6f:37:4b:35:72:17:0d:c7:b6:b1:c6:d4:51:
         93:9d:6c:53:11:33:2f:2d:53:ff:ad:32:e7:d6:48:7b:34:9d:
         6e:7a:83:48:72:65:15:b2:93:8f:12:eb:5f:c7:f2:37:c3:3b:
         82:c6:a0:1c:6e:e9:20:6e:8d:0a:fe:e5:9f:c0:b7:20:f7:9e:
         ec:93:5e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENNXgktX3M+D31ESGR22gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwMjA5MjEwMDM5WhcNMjYwMjEwMjEwMDM5WjAzMTEwLwYDVQQD
Eyg5ZTc2YmZjMWIwNmU1ZjAzMzMzNzM1N2E5ZTI2MmZlZWQ5ZTI1OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9q/4NiSEVduazZtuUmdDwDAO+am8
bv4G0Z0+YfQRgvui5QPW7ZIx6CNvU0yE6KztDjZbDQcZPFWUIbfzf7SKePOcxnpQ
2zvwxPum6YoV1D6qLRsgZLePCm8vpEJXENN1i0+uqK6XcnQfun1GMxCJeyWh0/h3
lgC7uBWYeBaHWPDSB+8uCwEH7mG1uTcGIAEkDg42xTuVDrZXzA5V6uECt1s9UA+k
aWTlOrqyY6zxO+EVW69f1Zlgx4WpYRT7fb+DVJhFLwnABbvlWUy6mGAbGdMrDLnj
yBGqOdiZ0qT3N7DE7YkSLxIFgWNdhfNZy/ZeoYpx/z/TirumYsU2V9amSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ52v8Gwbl8DMzc1ep4mL+7Z4llSMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOOFQJ3n
kAPfhz7FHp9mELrbw4a8/k+vDJfJckT03iDXbxZGfQNFLgoJq8wLw/eKM+248thd
4LWo0fZCE/aN7Xo61WyenH4sDFmx03JXOEP2BM488qx8rmlIMRLGSSkeSjQbSQ6P
2SFY+ytA1FzGpyX8Vvy+DXgo0QnyfEKs3c2+ViKueB7o6tPEEdxNtZ1mSWEiUepG
nzAfDnK84ZMx6P2GTAPqeGuAlWPQXn+7QP68EYf4sMpvMgpvN0s1chcNx7axxtRR
k51sUxEzLy1T/60y59ZIezSdbnqDSHJlFbKTjxLrX8fyN8M7gsagHG7pIG6NCv7l
n8C3IPee7JNekQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 06:41:10 2026 by rpki-client