This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          3etsoRp291TB6pOrEQ47M0RL/9Roduxj44VJ4/JdwcU=
Subject key identifier:   D8:29:10:1C:11:98:A4:C9:6A:24:8A:66:5A:0C:6F:36:F1:36:B1:7F
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019C43594D9B0039703086973E0EDD3F0F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1026
Signing time:             Mon 09 Feb 2026 17:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:51 +0000
Files and hashes:         1: BER7jGO8I5iYjkTrcND0slZ5a14.roa (hash: zBr5jX84fYtYB5VXfo1ZqvBELNbpywjIMLIB4xZ1YIs=)
                          2: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: thlN3ZlYP7MVarz0Xh0Mj5WHdBEIDgQrWuHA8cv01qw=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:4d:9b:00:39:70:30:86:97:3e:0e:dd:3f:0f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Feb  9 17:00:51 2026 GMT
            Not After : Feb 10 17:00:51 2026 GMT
        Subject: CN=d829101c1198a4c96a248a665a0c6f36f136b17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:8f:f2:93:0b:37:53:b9:30:28:0d:c4:b5:
                    7c:2d:e5:ee:77:35:a9:9f:53:b9:ff:38:f0:55:d7:
                    fa:13:0e:94:0b:f3:de:2d:b1:77:f7:e6:a3:42:e2:
                    78:43:00:b3:ba:66:64:ba:b1:68:f5:21:07:39:5f:
                    62:f2:f6:1c:86:45:7a:e5:d2:ca:fd:03:17:88:72:
                    75:2a:f2:e7:37:2b:a1:f9:15:60:85:8a:f6:ea:a9:
                    17:bf:06:71:f1:a3:39:06:63:75:ad:71:5f:4c:c4:
                    62:36:84:4b:04:4b:28:91:f8:e7:57:a3:78:f5:a2:
                    c8:0c:13:a8:47:33:59:d5:53:83:0f:3a:a0:ea:24:
                    64:b2:09:12:42:0a:fa:54:41:98:ac:00:4f:09:76:
                    48:97:09:75:fa:26:29:3d:e5:b8:71:8c:14:a7:30:
                    bc:d5:4c:39:f9:90:2d:cf:a8:6c:3f:65:aa:73:a6:
                    27:b3:20:89:97:17:bb:a4:f5:77:a7:88:d9:fa:ca:
                    54:f0:dc:bd:26:d1:62:9c:44:3f:9f:28:79:ac:a3:
                    f4:ac:43:5b:a4:f0:ad:07:bc:e2:ed:ab:ae:ed:d6:
                    34:d6:ab:75:d6:c6:3c:4c:e4:40:75:dd:44:9d:ef:
                    7c:77:84:22:da:48:fd:1b:ea:0b:a2:1e:f3:06:5a:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:29:10:1C:11:98:A4:C9:6A:24:8A:66:5A:0C:6F:36:F1:36:B1:7F
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:49:81:7c:42:30:53:09:21:3d:0c:8e:27:a8:93:c0:94:f6:
         a5:de:ce:4b:7e:76:cf:da:1f:46:88:55:9c:d2:5a:72:52:b0:
         db:09:8b:ef:8c:54:5e:52:43:01:d1:dd:e1:2e:f6:7a:11:ad:
         d9:58:0b:c5:76:58:dd:49:18:19:3d:31:64:36:dc:22:b6:08:
         8a:2f:d4:f6:45:26:fd:81:0b:cd:05:72:54:c3:e8:b7:3c:ca:
         1e:0c:c7:b7:03:c6:dd:16:f2:c7:68:32:98:b7:5f:b9:f7:ca:
         80:b5:aa:2c:ea:51:60:f8:39:81:28:73:06:f2:3c:51:f3:4d:
         49:4f:a8:55:cc:76:cb:e5:f5:25:fe:10:b8:43:98:78:7b:f9:
         fb:b2:37:00:a9:c5:de:63:2e:54:43:4d:c5:06:e4:e0:03:85:
         8e:77:86:3f:b6:03:b0:8b:d7:93:f5:b1:4b:ed:2b:a0:0c:00:
         4a:3b:0a:7b:68:d5:d4:67:79:1e:74:d1:36:be:23:a4:48:71:
         09:4a:33:6c:29:c3:fb:bf:bb:b1:fb:9f:c1:79:ac:62:4c:4f:
         a9:9c:f4:0a:b2:34:1a:b9:4b:74:69:75:a1:0a:fb:38:75:aa:
         a0:9a:0f:f5:4d:ad:43:9d:34:50:9b:4b:25:e1:31:4a:5e:6f:
         c3:5b:73:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWU2bADlwMIaXPg7dPw+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjYwMjA5MTcwMDUxWhcNMjYwMjEwMTcwMDUxWjAzMTEwLwYDVQQD
EyhkODI5MTAxYzExOThhNGM5NmEyNDhhNjY1YTBjNmYzNmYxMzZiMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm2P8pMLN1O5MCgNxLV8LeXudzWp
n1O5/zjwVdf6Ew6UC/PeLbF39+ajQuJ4QwCzumZkurFo9SEHOV9i8vYchkV65dLK
/QMXiHJ1KvLnNyuh+RVghYr26qkXvwZx8aM5BmN1rXFfTMRiNoRLBEsokfjnV6N4
9aLIDBOoRzNZ1VODDzqg6iRksgkSQgr6VEGYrABPCXZIlwl1+iYpPeW4cYwUpzC8
1Uw5+ZAtz6hsP2Wqc6YnsyCJlxe7pPV3p4jZ+spU8Ny9JtFinEQ/nyh5rKP0rENb
pPCtB7zi7auu7dY01qt11sY8TORAdd1Ene98d4Qi2kj9G+oLoh7zBlqd6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgpEBwRmKTJaiSKZloMbzbxNrF/MB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEmBfEIw
UwkhPQyOJ6iTwJT2pd7OS352z9ofRohVnNJaclKw2wmL74xUXlJDAdHd4S72ehGt
2VgLxXZY3UkYGT0xZDbcIrYIii/U9kUm/YELzQVyVMPotzzKHgzHtwPG3Rbyx2gy
mLdfuffKgLWqLOpRYPg5gShzBvI8UfNNSU+oVcx2y+X1Jf4QuEOYeHv5+7I3AKnF
3mMuVENNxQbk4AOFjneGP7YDsIvXk/WxS+0roAwASjsKe2jV1Gd5HnTRNr4jpEhx
CUozbCnD+7+7sfufwXmsYkxPqZz0CrI0GrlLdGl1oQr7OHWqoJoP9U2tQ500UJtL
JeExSl5vw1tzpw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:53 2026 by rpki-client