This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File:                     _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier:          2uTOxJq20phQuz3WJ5DSd83GmU6OQFlazf0HYZ6w9sc=
Subject key identifier:   AE:56:18:91:1B:1D:2E:8F:E0:C3:22:3B:39:7B:2E:D3:C3:4B:57:EA
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer:       /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial:       019C40FCEAE1C8CC2E03BF027EB1A909A447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number:          0648
Signing time:             Mon 09 Feb 2026 06:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:42 +0000
Files and hashes:         1: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: glIkHSV1zVxrNKd8YwCH6h/vNG5ErMIhJybnPNBePZE=)
                          2: mvCe3f9mkn2mitGHtGGloSB3nS8.roa (hash: 0bqyMFhS31D4KUaalrXamAweNa9OOdMZFGOzpiIcELU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:ea:e1:c8:cc:2e:03:bf:02:7e:b1:a9:09:a4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
        Validity
            Not Before: Feb  9 06:00:42 2026 GMT
            Not After : Feb 10 06:00:42 2026 GMT
        Subject: CN=ae5618911b1d2e8fe0c3223b397b2ed3c34b57ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:8d:0b:9c:b1:0f:e8:54:23:fb:45:6e:0f:
                    76:27:75:b0:7d:7b:2e:c4:fe:17:d1:90:f7:63:b5:
                    52:2d:71:e0:24:3d:4e:60:e1:86:c3:2c:fa:46:2b:
                    9c:28:0b:af:a6:79:e2:4f:31:d3:1f:c3:aa:77:fd:
                    24:af:29:90:4f:74:53:2c:cd:63:c2:1b:c4:36:ea:
                    44:3b:80:5f:01:be:89:8b:9f:75:6a:80:5e:92:33:
                    62:04:60:41:fd:e1:24:48:45:da:45:a1:f6:e8:58:
                    36:08:c1:88:c3:73:32:45:9f:14:fd:74:d0:41:6e:
                    88:c5:d1:ae:bc:93:42:a0:50:70:94:48:54:9a:c7:
                    65:12:d5:b8:57:e9:fd:b9:4a:32:87:4c:2d:1b:c4:
                    33:56:a5:79:8c:89:6d:d4:60:ff:68:3d:46:d9:03:
                    c2:a7:83:d8:ad:ac:46:89:fd:2a:b2:6e:27:f8:34:
                    23:d1:5e:01:f7:16:59:5b:cd:4a:a9:b3:96:47:82:
                    a9:36:5b:11:08:69:93:fc:5b:90:b1:72:ff:36:b6:
                    66:af:52:c7:d7:4c:56:b1:84:86:e9:76:d2:7a:41:
                    3b:1d:c5:0c:77:d0:03:84:53:e8:98:d6:44:ed:2c:
                    7e:99:42:5b:7e:19:d1:81:d8:ad:98:16:09:e2:8e:
                    1a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:56:18:91:1B:1D:2E:8F:E0:C3:22:3B:39:7B:2E:D3:C3:4B:57:EA
            X509v3 Authority Key Identifier:
                keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:d7:b0:90:95:3b:e8:94:7a:c2:01:cb:84:04:da:0f:ac:
         00:e0:f9:7b:f1:fa:32:9c:a5:7c:37:13:25:e4:0e:b0:d1:f0:
         9f:1a:6e:35:28:0b:c5:39:14:f0:73:4f:33:3b:28:6d:9b:bb:
         55:5d:19:e6:74:71:eb:f3:25:d6:71:f2:42:81:f0:22:1b:d7:
         bf:08:ff:94:11:00:34:13:1d:52:e0:b7:b9:50:f8:0f:21:c4:
         eb:89:6c:5b:28:54:cd:d7:f2:ac:d5:fb:55:4d:59:33:2d:d6:
         43:7d:c1:da:1f:e2:fe:3e:ec:01:89:34:8e:c5:8f:9e:ff:66:
         15:5b:e5:0c:93:29:21:02:14:d4:4f:89:77:fd:63:0c:b4:5e:
         b8:4f:dc:40:cb:c9:fe:dc:d1:dd:ad:94:bf:e2:2a:84:6f:a7:
         0b:58:5c:66:20:28:17:cc:c2:43:4c:04:d6:47:6c:b3:14:ca:
         0a:b7:a2:2a:ac:eb:fc:7c:57:fa:bb:71:ad:10:9c:43:65:28:
         20:85:b0:87:f9:95:12:b2:93:bb:68:cf:63:e7:9c:6f:5e:af:
         a6:5d:24:aa:c6:7d:d8:0f:b3:f9:64:59:58:b8:26:e8:4b:e2:
         32:a0:c7:5c:ef:bc:5d:83:ee:05:ff:b8:6a:6d:5f:30:50:c9:
         45:88:09:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/OrhyMwuA78CfrGpCaRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjM5Y2NmMjZlYTM4MjU3YTA3ZDQwOTRmYTZkNzBiMjY5
NjlmYjkwHhcNMjYwMjA5MDYwMDQyWhcNMjYwMjEwMDYwMDQyWjAzMTEwLwYDVQQD
EyhhZTU2MTg5MTFiMWQyZThmZTBjMzIyM2IzOTdiMmVkM2MzNGI1N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8iNC5yxD+hUI/tFbg92J3WwfXsu
xP4X0ZD3Y7VSLXHgJD1OYOGGwyz6RiucKAuvpnniTzHTH8Oqd/0krymQT3RTLM1j
whvENupEO4BfAb6Ji591aoBekjNiBGBB/eEkSEXaRaH26Fg2CMGIw3MyRZ8U/XTQ
QW6IxdGuvJNCoFBwlEhUmsdlEtW4V+n9uUoyh0wtG8QzVqV5jIlt1GD/aD1G2QPC
p4PYraxGif0qsm4n+DQj0V4B9xZZW81KqbOWR4KpNlsRCGmT/FuQsXL/NrZmr1LH
10xWsYSG6XbSekE7HcUMd9ADhFPomNZE7Sx+mUJbfhnRgditmBYJ4o4aXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5WGJEbHS6P4MMiOzl7LtPDS1fqMB8GA1UdIwQY
MBaAFPwjnM8m6jglegfUCU+m1wsmlp+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAt
YThhOTExYTNlMmUwLzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAtYThhOTExYTNlMmUw
LzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmzXsJCV
O+iUesIBy4QE2g+sAOD5e/H6MpylfDcTJeQOsNHwnxpuNSgLxTkU8HNPMzsobZu7
VV0Z5nRx6/Ml1nHyQoHwIhvXvwj/lBEANBMdUuC3uVD4DyHE64lsWyhUzdfyrNX7
VU1ZMy3WQ33B2h/i/j7sAYk0jsWPnv9mFVvlDJMpIQIU1E+Jd/1jDLReuE/cQMvJ
/tzR3a2Uv+IqhG+nC1hcZiAoF8zCQ0wE1kdssxTKCreiKqzr/HxX+rtxrRCcQ2Uo
IIWwh/mVErKTu2jPY+ecb16vpl0kqsZ92A+z+WRZWLgm6EviMqDHXO+8XYPuBf+4
am1fMFDJRYgJ4g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:44 2026 by rpki-client