This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File:                     gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier:          KEkSQqrh5jwgtXVuDPKP3clVPsYpiV1ZvBNqXtKt+n8=
Subject key identifier:   48:22:0A:C3:EA:C6:B1:D6:86:86:E8:19:79:C7:83:8B:5E:4B:33:53
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer:       /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial:       019C42EB7D14D3377C77EB0E634B5B7F35F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number:          0BCD
Signing time:             Mon 09 Feb 2026 15:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:55 +0000
Files and hashes:         1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
                          2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
                          3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
                          4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
                          5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
                          6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: kLMLWnAafIv5EuxSXsiDhZIyDfkCFk2DLtnTvlHKCTg=)
                          7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
                          8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:7d:14:d3:37:7c:77:eb:0e:63:4b:5b:7f:35:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
        Validity
            Not Before: Feb  9 15:00:55 2026 GMT
            Not After : Feb 10 15:00:55 2026 GMT
        Subject: CN=48220ac3eac6b1d68686e81979c7838b5e4b3353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:59:10:d5:c4:05:02:e3:51:a0:2e:27:d4:
                    9b:15:cb:ae:93:98:26:59:85:19:2d:3d:36:c9:9b:
                    8a:82:5e:90:33:30:ae:a3:40:0b:ce:08:88:80:a9:
                    c7:40:93:9f:3f:66:20:ee:0a:20:1d:7d:c7:6a:26:
                    4c:39:3c:be:c0:85:5a:b8:b9:85:c1:1e:99:cb:f5:
                    0b:e4:bb:f3:6a:dc:49:34:9d:12:db:f6:b0:4a:c4:
                    a3:1f:79:c8:10:f7:7f:e2:35:d8:86:79:8e:4c:ba:
                    8b:d8:39:d0:4d:f2:13:fe:3d:6e:aa:e2:fb:59:00:
                    14:23:ef:cb:1e:8e:7a:61:e9:69:2d:40:11:ec:c4:
                    f7:5f:e8:ff:1f:ed:6d:85:25:be:cb:9b:8b:97:66:
                    3e:a0:bf:ca:c3:98:35:c2:11:44:97:99:11:ed:ea:
                    8a:b5:7e:4a:0e:59:76:33:0c:d0:16:6f:4d:9b:a8:
                    b1:01:38:73:4d:22:99:c8:3d:da:ed:1a:bc:8b:ba:
                    26:17:a9:78:a2:91:c7:3d:ca:7f:5c:64:55:bc:9f:
                    48:c4:9a:20:c4:d6:c4:ce:dd:4e:b1:cd:d4:90:59:
                    24:04:e1:5d:f5:d8:29:55:c8:4f:9b:41:39:14:ed:
                    43:88:ef:7b:a0:da:3f:6f:bc:9d:5c:1d:c6:55:6c:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:22:0A:C3:EA:C6:B1:D6:86:86:E8:19:79:C7:83:8B:5E:4B:33:53
            X509v3 Authority Key Identifier:
                keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e4:96:ec:1c:82:0d:8d:74:5c:e9:ab:6b:eb:45:54:d0:42:
         ae:14:c6:e0:6e:c0:b2:df:d6:1a:50:16:7f:67:6f:43:56:e4:
         64:65:94:87:3c:bc:79:af:b8:b7:39:19:81:8f:e9:5a:a5:e1:
         b0:69:a8:94:93:c1:74:a6:b7:70:ce:ef:64:41:0d:f2:a5:70:
         ea:e6:a9:63:77:bd:0c:92:f6:bf:b4:e4:7e:98:5e:e1:13:26:
         2e:22:0f:45:86:7e:72:ae:d6:da:19:09:09:be:4e:99:c0:02:
         20:08:db:0e:34:ca:42:0e:71:45:93:56:37:a3:04:a9:77:63:
         47:dc:55:14:18:7e:ae:83:d3:00:69:36:b5:d8:eb:2a:72:30:
         f0:72:54:05:5d:e6:43:a3:85:d0:5a:54:24:b6:a9:c9:34:5c:
         ed:e4:ea:f6:82:77:62:44:ff:c6:29:6e:6f:14:40:e2:d5:ba:
         a9:b8:7a:23:d5:dd:92:68:7a:b7:58:c8:6c:6e:ae:eb:54:5d:
         33:96:1b:67:b5:e9:a5:f7:f4:07:4c:b6:63:2b:b1:98:56:50:
         7b:06:22:4f:08:43:81:d1:c5:01:92:0e:b4:4d:98:a0:d0:85:
         9f:8b:0c:99:27:3f:95:68:d5:b4:25:7b:16:03:b0:a9:1d:c9:
         da:42:12:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC630U0zd8d+sOY0tbfzXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjYwMjA5MTUwMDU1WhcNMjYwMjEwMTUwMDU1WjAzMTEwLwYDVQQD
Eyg0ODIyMGFjM2VhYzZiMWQ2ODY4NmU4MTk3OWM3ODM4YjVlNGIzMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMNZENXEBQLjUaAuJ9SbFcuuk5gm
WYUZLT02yZuKgl6QMzCuo0ALzgiIgKnHQJOfP2Yg7gogHX3HaiZMOTy+wIVauLmF
wR6Zy/UL5LvzatxJNJ0S2/awSsSjH3nIEPd/4jXYhnmOTLqL2DnQTfIT/j1uquL7
WQAUI+/LHo56YelpLUAR7MT3X+j/H+1thSW+y5uLl2Y+oL/Kw5g1whFEl5kR7eqK
tX5KDll2MwzQFm9Nm6ixAThzTSKZyD3a7Rq8i7omF6l4opHHPcp/XGRVvJ9IxJog
xNbEzt1Osc3UkFkkBOFd9dgpVchPm0E5FO1DiO97oNo/b7ydXB3GVWxdQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgiCsPqxrHWhoboGXnHg4teSzNTMB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreSW7ByC
DY10XOmra+tFVNBCrhTG4G7Ast/WGlAWf2dvQ1bkZGWUhzy8ea+4tzkZgY/pWqXh
sGmolJPBdKa3cM7vZEEN8qVw6uapY3e9DJL2v7Tkfphe4RMmLiIPRYZ+cq7W2hkJ
Cb5OmcACIAjbDjTKQg5xRZNWN6MEqXdjR9xVFBh+roPTAGk2tdjrKnIw8HJUBV3m
Q6OF0FpUJLapyTRc7eTq9oJ3YkT/xilubxRA4tW6qbh6I9Xdkmh6t1jIbG6u61Rd
M5YbZ7Xppff0B0y2YyuxmFZQewYiTwhDgdHFAZIOtE2YoNCFn4sMmSc/lWjVtCV7
FgOwqR3J2kIS/Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:09 2026 by rpki-client