This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File:                     vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier:          Ikh9wgpQqvI8BtvDBeeFVW4YDeC8/Mt8s5eQW+0wnIw=
Subject key identifier:   38:BE:E7:CC:E1:A1:38:1F:60:C3:55:FF:46:4B:A7:E6:B3:D0:59:C5
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer:       /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial:       019C432283A708FBB73EAC52DE8403137A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number:          09F8
Signing time:             Mon 09 Feb 2026 16:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:01 +0000
Files and hashes:         1: diX6GVWjjxp4Oq6XrZsBh5j9i0M.roa (hash: xBkybsQcEpoTXkJLBjkUd7QB1bLl7/Ehg38seV+oQ+w=)
                          2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: rhm6Ap7Fq/RZmKBy1KbGXyawVW2dIM8pJnddaDqQGZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:83:a7:08:fb:b7:3e:ac:52:de:84:03:13:7a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
        Validity
            Not Before: Feb  9 16:01:01 2026 GMT
            Not After : Feb 10 16:01:01 2026 GMT
        Subject: CN=38bee7cce1a1381f60c355ff464ba7e6b3d059c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:58:f8:e0:e5:41:70:8a:2a:1b:a7:20:c2:
                    ac:11:c3:96:17:e6:c1:3d:5d:52:78:f8:6d:b6:63:
                    8e:d5:b1:d6:9c:54:c3:e6:96:4c:a4:f6:29:f5:e6:
                    5b:19:54:b1:6d:e7:83:8d:07:39:b6:93:db:1b:e6:
                    35:df:e6:46:19:c8:98:9c:b1:a7:33:df:e6:fa:bb:
                    ff:35:6d:61:57:be:ec:56:76:4a:e8:bc:d8:88:dd:
                    9f:d0:53:62:5e:25:f0:30:ed:e3:d7:e3:dc:4e:cc:
                    4e:bd:d4:16:45:8d:0b:5e:7c:68:94:86:3c:fd:76:
                    af:84:b4:0b:12:43:de:7b:e9:5c:0b:2f:b7:10:6b:
                    ec:c7:a8:7a:a8:c8:c1:cf:76:f6:c7:7c:3a:59:08:
                    b1:c1:ec:39:64:b8:c5:0b:5e:df:09:24:74:87:f8:
                    6f:43:b6:30:10:35:e3:46:3f:fd:b8:ed:8c:c9:6e:
                    e1:d2:3b:a2:41:1b:42:6f:09:d6:41:7d:9f:79:79:
                    ca:29:ab:94:a0:eb:b0:94:ec:5c:4d:a8:b1:5a:74:
                    78:c7:b6:6d:c6:c1:f7:9d:d4:97:77:3b:8a:6b:2d:
                    7d:46:89:01:8f:50:f3:f9:c0:12:9a:b4:8b:60:dd:
                    ea:f5:6e:2c:b5:2c:71:19:92:b0:9f:3b:ef:c8:f0:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BE:E7:CC:E1:A1:38:1F:60:C3:55:FF:46:4B:A7:E6:B3:D0:59:C5
            X509v3 Authority Key Identifier:
                keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:b3:6e:63:a1:80:e0:70:0e:77:ea:36:d2:71:e1:a3:13:
         31:de:fe:e0:c1:bb:f0:66:6a:d4:b1:93:73:3e:05:69:2c:dc:
         8a:7a:c5:f8:d8:fa:82:85:b3:1a:00:c3:73:e3:95:64:93:fa:
         f5:24:10:87:8e:3a:ef:66:97:ed:d6:a1:79:6f:56:de:96:ad:
         2d:5b:b5:e7:8f:92:d2:0a:42:02:30:c8:b1:a8:5d:1a:36:a3:
         d9:2c:b8:86:55:71:ff:28:98:c0:d6:b8:1f:df:1d:b6:d3:74:
         7e:d8:51:f0:78:58:7f:a6:ac:43:bb:ec:0b:a4:cf:c3:c4:33:
         b5:37:b8:19:ba:02:c2:68:2d:36:58:30:b5:c8:d0:7a:4e:c9:
         52:6e:43:d4:83:05:ad:ae:a7:06:30:72:30:98:08:83:d6:e6:
         be:4c:d7:ff:70:19:c5:8c:c0:9c:8a:bc:0b:94:0c:80:3b:54:
         ae:1e:99:38:fc:fc:a4:1e:63:a9:2c:8a:2e:5f:31:db:95:be:
         c8:26:4d:6c:17:a8:3a:5e:71:12:91:83:bc:21:48:23:88:23:
         1b:2b:3b:b9:9c:22:41:c4:6a:92:02:41:f9:4b:6f:ee:3a:4c:
         88:53:44:6b:61:5b:14:d8:16:af:07:9b:f9:c0:86:26:fd:5b:
         cf:c2:e3:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIoOnCPu3PqxS3oQDE3oOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMDQ5Y2E0MmUxZDgyY2UyN2I1NGJiZmQwMTc3ODFkNTQ1
YTc5YjcwHhcNMjYwMjA5MTYwMTAxWhcNMjYwMjEwMTYwMTAxWjAzMTEwLwYDVQQD
EygzOGJlZTdjY2UxYTEzODFmNjBjMzU1ZmY0NjRiYTdlNmIzZDA1OWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yFY+ODlQXCKKhunIMKsEcOWF+bB
PV1SePhttmOO1bHWnFTD5pZMpPYp9eZbGVSxbeeDjQc5tpPbG+Y13+ZGGciYnLGn
M9/m+rv/NW1hV77sVnZK6LzYiN2f0FNiXiXwMO3j1+PcTsxOvdQWRY0LXnxolIY8
/XavhLQLEkPee+lcCy+3EGvsx6h6qMjBz3b2x3w6WQixwew5ZLjFC17fCSR0h/hv
Q7YwEDXjRj/9uO2MyW7h0juiQRtCbwnWQX2feXnKKauUoOuwlOxcTaixWnR4x7Zt
xsH3ndSXdzuKay19RokBj1Dz+cASmrSLYN3q9W4stSxxGZKwnzvvyPDvAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi+58zhoTgfYMNV/0ZLp+az0FnFMB8GA1UdIwQY
MBaAFL0EnKQuHYLOJ7VLv9AXeB1UWnm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUt
MWFhMDM0YTJhZjljLzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNDgyMGYtZTgxNS00NGYzLWFmNjUtMWFhMDM0YTJhZjlj
LzEvdlFTY3BDNGRnczRudFV1XzBCZDRIVlJhZWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuuzbmOh
gOBwDnfqNtJx4aMTMd7+4MG78GZq1LGTcz4FaSzcinrF+Nj6goWzGgDDc+OVZJP6
9SQQh44672aX7daheW9W3patLVu154+S0gpCAjDIsahdGjaj2Sy4hlVx/yiYwNa4
H98dttN0fthR8HhYf6asQ7vsC6TPw8QztTe4GboCwmgtNlgwtcjQek7JUm5D1IMF
ra6nBjByMJgIg9bmvkzX/3AZxYzAnIq8C5QMgDtUrh6ZOPz8pB5jqSyKLl8x25W+
yCZNbBeoOl5xEpGDvCFII4gjGys7uZwiQcRqkgJB+Utv7jpMiFNEa2FbFNgWrweb
+cCGJv1bz8LjHg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:42 2026 by rpki-client