This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File:                     9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier:          V9a6ChkqvAPQJ8tmQ20c8YzZ0uscu83iAxlVLimAN4c=
Subject key identifier:   CF:83:0F:CD:83:C2:EC:6C:E8:7A:77:E0:49:ED:98:EE:E7:19:1C:CA
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer:       /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial:       019C420FEEFE5ED18A13403C73CCC929946C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number:          0EDC
Signing time:             Mon 09 Feb 2026 11:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:06 +0000
Files and hashes:         1: 3LeKDjeMeS0PWJqQLmDkQl4RYGw.roa (hash: ceiJdKG/7eDY4f/rbJBgWYQ8nd++a/SiKCb4GKOrND8=)
                          2: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: +TJ5hUMRDx4jr3usg2Qha/3mZtOgtqkziXe1QMgQ1fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:ee:fe:5e:d1:8a:13:40:3c:73:cc:c9:29:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
        Validity
            Not Before: Feb  9 11:01:06 2026 GMT
            Not After : Feb 10 11:01:06 2026 GMT
        Subject: CN=cf830fcd83c2ec6ce87a77e049ed98eee7191cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:d8:da:67:01:7f:6b:81:b8:e3:ca:50:42:
                    2b:ae:bf:e4:5e:93:56:bc:3b:68:3d:d1:6b:85:ad:
                    b4:be:1c:0a:be:e2:0d:27:e1:fd:20:14:eb:2a:a6:
                    73:d4:e1:fb:5e:87:a5:a1:e6:65:2e:19:15:76:7f:
                    c9:91:6d:5e:e8:a4:3a:c0:0b:a1:ef:b4:05:40:c5:
                    cd:0e:f1:ac:33:73:bd:8c:6c:ba:09:26:73:19:31:
                    96:ae:9f:58:ba:ec:70:25:fd:01:a6:b4:b6:e3:99:
                    2d:6e:4b:e0:f2:1c:d0:96:54:e0:44:92:58:fa:0a:
                    f3:f6:22:6f:1c:4c:c7:8b:4b:5b:fb:d0:4a:95:34:
                    9a:c0:f2:cf:8d:90:b6:8b:6f:21:47:3c:ed:79:4a:
                    7f:e7:23:c7:f5:e6:e9:6a:3d:bd:53:cf:7d:7d:a3:
                    78:09:cb:22:ac:bf:c2:ec:1e:d0:ca:76:a5:b2:f9:
                    cb:84:d0:cd:52:45:8e:63:06:8f:61:26:2c:80:ac:
                    e7:3c:63:f8:77:5a:32:df:c8:af:53:45:01:03:96:
                    61:40:f0:52:3b:59:46:67:ac:29:26:60:c3:e7:c9:
                    13:6c:6d:b8:34:1a:4c:f9:77:c9:e1:a8:1d:d7:24:
                    b1:de:44:9f:74:27:d0:02:ac:dd:02:54:a8:e4:c8:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:0F:CD:83:C2:EC:6C:E8:7A:77:E0:49:ED:98:EE:E7:19:1C:CA
            X509v3 Authority Key Identifier:
                keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:40:f0:b0:cb:82:b6:02:bf:7d:55:f2:f8:f0:a0:53:4c:22:
         ee:f9:37:df:f8:9d:2c:d7:e7:65:94:78:22:3d:d5:66:50:67:
         62:34:d0:9a:56:c8:39:bb:fb:8c:2e:9a:6b:ad:d0:ab:09:2e:
         1c:43:39:67:04:08:ea:df:37:2a:fd:d8:87:ba:1f:01:af:0d:
         38:19:f0:0a:26:1c:f2:69:8d:16:60:f3:45:b3:ea:97:af:76:
         47:ff:60:66:70:b3:dd:2d:81:2a:e1:a6:40:13:66:28:7c:dd:
         29:29:5c:8a:c2:af:23:60:7a:7b:37:85:d9:fe:e5:19:7a:0c:
         bd:d1:11:57:6a:24:c9:4f:39:65:11:eb:95:ff:4a:4a:e6:e9:
         30:72:74:ab:83:60:8d:0a:5e:3e:a7:cc:7b:e2:ff:48:3f:92:
         13:a7:44:6f:d0:36:f4:56:1c:9b:4c:36:bd:30:88:fb:97:d2:
         27:bd:9b:10:20:74:2a:8f:92:83:c8:af:72:f9:3d:9d:b3:39:
         11:5e:1e:0e:d3:09:d2:76:9b:3b:f8:6f:67:70:4e:13:cf:f9:
         0b:c6:1b:65:6f:84:82:30:c3:f9:1e:97:d9:da:c9:98:df:9b:
         79:94:52:23:51:67:e3:c0:ec:4f:f3:55:66:e6:46:52:12:72:
         3a:91:10:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD+7+XtGKE0A8c8zJKZRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm
NGU3N2YwHhcNMjYwMjA5MTEwMTA2WhcNMjYwMjEwMTEwMTA2WjAzMTEwLwYDVQQD
EyhjZjgzMGZjZDgzYzJlYzZjZTg3YTc3ZTA0OWVkOThlZWU3MTkxY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLHY2mcBf2uBuOPKUEIrrr/kXpNW
vDtoPdFrha20vhwKvuINJ+H9IBTrKqZz1OH7XoeloeZlLhkVdn/JkW1e6KQ6wAuh
77QFQMXNDvGsM3O9jGy6CSZzGTGWrp9YuuxwJf0BprS245ktbkvg8hzQllTgRJJY
+grz9iJvHEzHi0tb+9BKlTSawPLPjZC2i28hRzzteUp/5yPH9ebpaj29U899faN4
CcsirL/C7B7QynalsvnLhNDNUkWOYwaPYSYsgKznPGP4d1oy38ivU0UBA5ZhQPBS
O1lGZ6wpJmDD58kTbG24NBpM+XfJ4agd1ySx3kSfdCfQAqzdAlSo5Mir7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+DD82Dwuxs6Hp34EntmO7nGRzKMB8GA1UdIwQY
MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut
MzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4
LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzUDwsMuC
tgK/fVXy+PCgU0wi7vk33/idLNfnZZR4Ij3VZlBnYjTQmlbIObv7jC6aa63Qqwku
HEM5ZwQI6t83Kv3Yh7ofAa8NOBnwCiYc8mmNFmDzRbPql692R/9gZnCz3S2BKuGm
QBNmKHzdKSlcisKvI2B6ezeF2f7lGXoMvdERV2okyU85ZRHrlf9KSubpMHJ0q4Ng
jQpePqfMe+L/SD+SE6dEb9A29FYcm0w2vTCI+5fSJ72bECB0Ko+Sg8ivcvk9nbM5
EV4eDtMJ0nabO/hvZ3BOE8/5C8YbZW+EgjDD+R6X2drJmN+beZRSI1Fn48DsT/NV
ZuZGUhJyOpEQPA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:43 2026 by rpki-client