This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File:                     noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier:          PJXDcsELWFKN8xmv19P7lJ6J2Y08E2gaF5CnU2IPGdg=
Subject key identifier:   BA:94:CE:74:3F:3C:6F:CA:37:00:86:5C:69:8D:8D:C3:06:3D:42:5B
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer:       /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial:       019C420F4075EFA0C6A02FBF7D71F6FA313A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number:          0EBB
Signing time:             Mon 09 Feb 2026 11:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:21 +0000
Files and hashes:         1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
                          2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: nTg10XCE1+sQfm1kcGAG5xMUS+JR7nqEbi6PEIyV+LI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:40:75:ef:a0:c6:a0:2f:bf:7d:71:f6:fa:31:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
        Validity
            Not Before: Feb  9 11:00:21 2026 GMT
            Not After : Feb 10 11:00:21 2026 GMT
        Subject: CN=ba94ce743f3c6fca3700865c698d8dc3063d425b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:04:c3:f2:c9:72:dd:e0:88:cc:f9:88:3b:
                    6e:d1:44:a0:9f:2a:e2:46:bb:00:2b:4b:9b:08:19:
                    62:7c:99:67:1f:18:0d:94:f3:57:1d:56:fd:e3:fe:
                    36:1b:14:5d:8d:ec:e3:a1:8b:ac:aa:e2:6d:bd:ed:
                    09:4d:6c:c2:4d:d4:70:4e:3d:41:c7:c9:9a:5c:62:
                    9f:4f:b6:d8:54:54:c9:30:0b:f7:46:18:cf:6f:fe:
                    f9:ff:5e:1f:0a:d3:8e:6b:e9:29:49:a7:ec:2e:a7:
                    28:fb:7c:3f:c2:0e:d4:ef:70:7c:dd:ba:fd:eb:34:
                    80:14:c4:74:9d:95:b4:b0:44:ed:a0:44:23:d8:fd:
                    8c:08:58:38:1a:5b:c1:17:59:d3:f6:c2:cc:c0:83:
                    81:d6:b2:03:8d:8f:85:90:61:e5:35:6b:ae:e1:f0:
                    e9:e5:a7:e3:73:20:dd:f4:3f:b1:13:10:5c:bc:03:
                    5f:67:1a:b8:e1:94:7c:d1:95:44:07:d2:f5:f6:d2:
                    58:1a:0b:d7:1f:9c:40:b6:cb:4f:02:a7:0a:34:87:
                    8d:dd:68:e5:8b:4f:c6:be:22:65:d2:0c:13:24:3d:
                    6f:bc:30:79:94:5c:a3:72:9f:00:a6:0d:b5:65:8d:
                    0e:37:05:7d:46:51:50:3b:3d:51:14:d9:2c:03:86:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:94:CE:74:3F:3C:6F:CA:37:00:86:5C:69:8D:8D:C3:06:3D:42:5B
            X509v3 Authority Key Identifier:
                keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b9:ad:a6:ca:8b:88:d9:ae:de:81:3e:27:02:7f:e6:e6:83:
         4c:ed:9f:6b:1f:22:21:7b:53:c4:61:da:4b:dc:d9:ae:39:c1:
         3c:d2:a7:e0:0f:80:8e:f3:92:62:5a:bd:70:05:90:9a:b7:5a:
         e2:30:7c:16:bb:f5:98:ad:68:9c:7e:93:38:b1:4c:f8:b2:61:
         18:fe:45:44:84:45:4c:08:af:39:45:a9:9a:04:07:d8:46:25:
         fc:05:c6:32:31:8f:9e:a1:76:f6:29:30:ee:56:d7:0b:36:c8:
         4e:07:75:5f:b9:eb:27:cc:be:34:63:76:d9:22:1a:77:8d:a3:
         d5:e9:e9:62:9f:d8:c6:ba:24:ba:1d:ba:06:7a:e6:b4:d2:0d:
         a7:54:62:ef:98:f9:51:fe:d8:d6:32:e8:80:51:7d:26:6a:01:
         05:d9:35:40:2a:3b:cd:b6:a9:e1:59:18:69:75:69:78:14:2c:
         31:3f:62:67:44:52:97:72:14:8e:2d:b0:13:ce:7c:84:ed:b9:
         9f:ba:6f:0c:95:9c:c9:aa:3a:f0:52:95:e9:43:2c:6d:e4:86:
         ca:1e:6b:ed:25:27:2c:f5:85:6f:d5:d9:f1:b4:c2:05:db:98:
         13:92:f8:51:a0:e5:ab:49:d1:11:2b:5c:65:c7:22:f8:72:e4:
         ee:a9:a0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD0B176DGoC+/fXH2+jE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllODFkZGFhZDg4ZjcwNzE2MTJkN2MzYjc2MThlMjRkMWE1
MjMzYmIwHhcNMjYwMjA5MTEwMDIxWhcNMjYwMjEwMTEwMDIxWjAzMTEwLwYDVQQD
EyhiYTk0Y2U3NDNmM2M2ZmNhMzcwMDg2NWM2OThkOGRjMzA2M2Q0MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTUEw/LJct3giMz5iDtu0USgnyri
RrsAK0ubCBlifJlnHxgNlPNXHVb94/42GxRdjezjoYusquJtve0JTWzCTdRwTj1B
x8maXGKfT7bYVFTJMAv3RhjPb/75/14fCtOOa+kpSafsLqco+3w/wg7U73B83br9
6zSAFMR0nZW0sETtoEQj2P2MCFg4GlvBF1nT9sLMwIOB1rIDjY+FkGHlNWuu4fDp
5afjcyDd9D+xExBcvANfZxq44ZR80ZVEB9L19tJYGgvXH5xAtstPAqcKNIeN3Wjl
i0/GviJl0gwTJD1vvDB5lFyjcp8Apg21ZY0ONwV9RlFQOz1RFNksA4aFnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqUznQ/PG/KNwCGXGmNjcMGPUJbMB8GA1UdIwQY
MBaAFJ6B3arYj3BxYS18O3YY4k0aUjO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYt
YmY2OWIxMmE2NzQ0LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYtYmY2OWIxMmE2NzQ0
LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbmtpsqL
iNmu3oE+JwJ/5uaDTO2fax8iIXtTxGHaS9zZrjnBPNKn4A+AjvOSYlq9cAWQmrda
4jB8Frv1mK1onH6TOLFM+LJhGP5FRIRFTAivOUWpmgQH2EYl/AXGMjGPnqF29ikw
7lbXCzbITgd1X7nrJ8y+NGN22SIad42j1enpYp/Yxrokuh26BnrmtNINp1Ri75j5
Uf7Y1jLogFF9JmoBBdk1QCo7zbap4VkYaXVpeBQsMT9iZ0RSl3IUji2wE858hO25
n7pvDJWcyao68FKV6UMsbeSGyh5r7SUnLPWFb9XZ8bTCBduYE5L4UaDlq0nREStc
Zcci+HLk7qmgmQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:31 2026 by rpki-client