This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File:                     rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier:          MuVzEvBAN0/6W/Rj/IlFe8IWU9RBpu/fYSoYIi0UoQ8=
Subject key identifier:   26:12:0B:E7:9B:5C:2C:64:11:9B:0D:E3:18:70:76:CC:64:0E:08:94
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer:       /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial:       019C446C22171F381451FB9A6A5C55A56EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number:          16D5
Signing time:             Mon 09 Feb 2026 22:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:03 +0000
Files and hashes:         1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=)
                          2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=)
                          3: hAy8VtAwci_v3cGOO19dEdefvMA.roa (hash: g1nY4ONoPi4/cXPph4hFcjnMaUzSfWsZYHkL3fHcL7Y=)
                          4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=)
                          5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=)
                          6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=)
                          7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: G2nXkqYkUf+RjT0/NrRWYP58EjFSjtplcO9c57nUW9E=)
                          8: suUbWGeNBw5ePtioMY9U94S7lSw.roa (hash: M06oDkMYsepjO/1pxSEeQ8cUvDUMgzU9aQtQ7cy78x8=)
                          9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=)
                          10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:22:17:1f:38:14:51:fb:9a:6a:5c:55:a5:6e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
        Validity
            Not Before: Feb  9 22:01:03 2026 GMT
            Not After : Feb 10 22:01:03 2026 GMT
        Subject: CN=26120be79b5c2c64119b0de3187076cc640e0894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:25:68:57:70:a3:3a:b8:30:44:19:3b:ee:
                    b4:98:b3:45:2b:4b:39:2f:5a:e8:78:31:76:b3:25:
                    d4:3f:65:2b:69:4a:2a:d0:1f:8e:af:6f:5c:30:dd:
                    58:43:aa:f9:1c:dd:15:31:71:5c:b2:da:83:28:9f:
                    0c:96:d7:a6:be:02:58:47:a8:da:8a:b3:89:99:b0:
                    ae:99:9d:03:ce:8d:a8:c6:30:d3:60:0d:30:db:9b:
                    4e:83:5d:ef:fa:94:d3:c0:11:b3:12:ba:eb:6a:ed:
                    4b:a8:1d:7a:b6:0d:04:4c:3a:3c:ea:c8:ea:13:db:
                    74:68:0d:ca:e8:3f:ba:a0:aa:ea:67:90:ca:f1:ca:
                    8b:02:22:2a:a4:f8:11:47:26:ff:ba:18:14:ae:8e:
                    9c:9c:f0:a5:02:29:d7:30:f1:c3:66:6b:84:3d:42:
                    f5:15:25:cd:27:90:24:33:58:84:9d:18:32:d9:8e:
                    31:17:50:2a:29:f0:66:41:fb:1c:2e:9e:75:55:e3:
                    2c:f8:7b:d4:ad:56:59:d2:d9:b4:ad:b2:8a:6a:21:
                    dd:b8:80:42:77:43:ed:98:fa:31:eb:b2:a5:1e:00:
                    d8:f8:e4:68:a4:92:9f:73:3c:f1:19:ac:24:c3:cd:
                    f7:e7:6d:a5:9b:a9:b0:a5:4c:b3:34:b3:8f:49:0c:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:12:0B:E7:9B:5C:2C:64:11:9B:0D:E3:18:70:76:CC:64:0E:08:94
            X509v3 Authority Key Identifier:
                keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:13:75:d8:3a:d2:53:4d:89:88:b7:b1:bd:db:34:9e:6b:
         39:48:5c:77:34:31:36:0b:07:df:84:b5:a0:2a:ba:f2:92:80:
         01:88:9b:6a:a1:23:ab:86:38:3d:ff:76:83:d9:d4:f5:65:0f:
         6a:05:30:6b:8b:7d:73:24:28:2c:f7:94:76:35:25:c1:8f:31:
         0e:cc:b8:a7:73:bb:a8:d3:00:26:b7:e0:3d:19:e4:2b:1f:95:
         71:f4:71:16:df:81:01:94:c0:3b:e6:56:9c:9d:27:03:c0:7c:
         06:11:c6:c5:7c:17:e5:ce:e3:6e:a2:fc:08:c4:86:62:57:34:
         22:e3:fb:02:3c:e9:57:d5:cf:b4:f3:1d:66:10:62:89:bf:2c:
         3d:87:d4:c1:a7:69:90:b9:1f:68:18:dd:0c:94:c8:f9:d8:fa:
         39:74:e9:d4:c3:c0:cc:a1:ed:23:61:68:eb:06:f5:37:f8:22:
         f7:88:e5:b8:73:9a:e0:3a:ef:28:aa:6a:bc:89:aa:00:05:a6:
         8a:69:c0:54:43:6d:8f:48:b2:8b:bf:bb:ac:31:3c:62:cc:70:
         db:a1:dd:2e:05:02:2b:a6:4c:da:a8:93:61:46:98:a0:ea:43:
         9b:23:42:59:45:f3:68:44:8b:5e:7f:f4:25:90:0e:f1:55:d2:
         54:60:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:34 2026 by rpki-client