This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File:                     gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier:          jE+3T9cex8JBNBR3jpzPs7wQkk5k99f68GxABcdFBIs=
Subject key identifier:   38:2E:15:92:68:9E:59:F7:3F:69:04:46:BD:8D:0B:A1:89:F3:D0:61
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer:       /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial:       019C42B3EFD88CDDCBBC9F32F4048AFB0246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number:          14D0
Signing time:             Mon 09 Feb 2026 14:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:14 +0000
Files and hashes:         1: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (hash: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs=)
                          2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: dFWLd3t6htwiEcbcqs26C21/InEO7X5P4mG48K/U1cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:ef:d8:8c:dd:cb:bc:9f:32:f4:04:8a:fb:02:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
        Validity
            Not Before: Feb  9 14:00:14 2026 GMT
            Not After : Feb 10 14:00:14 2026 GMT
        Subject: CN=382e1592689e59f73f690446bd8d0ba189f3d061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:db:57:24:2e:3a:8a:77:3e:c3:87:69:ae:
                    ed:13:05:98:9b:70:3f:96:25:8d:30:a9:f9:1d:b2:
                    ea:cd:c7:0d:59:47:5d:06:41:92:a3:1d:dc:ba:e3:
                    30:98:d7:e2:75:85:bd:10:5a:f7:73:cb:c9:f2:3e:
                    b3:eb:a6:a8:ec:21:78:ef:48:88:07:2c:1f:aa:d5:
                    30:14:a8:97:83:4b:9e:81:37:2f:a5:4d:c6:fa:76:
                    6f:65:6a:cc:e5:17:25:4b:c7:09:eb:06:f8:c3:44:
                    db:3b:9a:af:68:4b:27:1c:e2:89:d7:01:86:88:e7:
                    8d:5f:b5:94:8e:4d:eb:d1:7f:11:58:41:fe:ec:13:
                    2a:dd:ff:64:d5:f3:f9:55:28:aa:4f:cb:4f:f1:40:
                    de:53:51:8b:df:73:15:b1:d7:dc:96:09:2b:82:cf:
                    e0:4b:c2:d9:0e:e4:c0:0c:af:d1:6a:a0:8a:40:0f:
                    18:ef:30:a6:87:99:6f:79:bf:8d:2f:2d:b2:c6:ec:
                    6d:b5:a1:15:6b:6d:39:51:15:f5:8c:ec:e3:73:69:
                    fc:8e:c2:e1:ec:3a:83:d9:0b:51:e7:fb:33:72:f3:
                    15:9b:a3:66:ab:1f:82:69:74:3f:9c:8e:87:0e:61:
                    bd:3d:44:e7:8b:3f:24:bc:ef:41:25:e1:2f:67:73:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:15:92:68:9E:59:F7:3F:69:04:46:BD:8D:0B:A1:89:F3:D0:61
            X509v3 Authority Key Identifier:
                keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:b7:6a:21:b6:67:c0:df:5e:2d:1e:b3:ca:2b:25:73:6a:
         07:75:95:e3:ae:66:59:9c:fb:bd:6f:61:5e:02:e1:ab:e1:0c:
         91:38:c7:d7:3a:e9:77:e4:ad:1f:d3:2a:e7:87:01:8d:1d:a4:
         71:68:38:5a:a5:ac:a4:2c:ea:50:37:13:e6:72:f7:78:ed:bf:
         8a:29:cb:52:50:90:c6:d5:3b:b5:0c:35:ab:49:8b:5b:24:e5:
         5e:88:bd:c7:ee:05:99:2a:1b:4b:62:b3:e9:1b:c8:a6:74:e7:
         1e:55:4d:8a:d0:27:73:8e:76:5a:f6:ff:50:5a:80:96:73:21:
         b3:40:2e:99:5f:43:54:5f:11:99:dc:9c:4b:8d:2f:b2:b4:63:
         54:ef:cd:82:19:04:05:f7:64:55:43:b1:0f:c1:9c:6c:0d:53:
         21:42:19:0f:35:42:cb:ee:12:1e:b7:57:52:13:6c:cc:ab:51:
         3f:c2:13:bf:73:c0:64:97:dc:91:eb:07:e1:50:00:31:b0:b4:
         48:fd:b6:11:01:66:5c:ca:3b:73:d7:93:d2:6c:b4:49:c7:90:
         03:1e:9e:d6:c5:c0:3f:3b:15:ec:c8:6a:21:92:be:bc:bb:02:
         fa:35:15:a6:56:3e:f3:74:ae:04:56:20:dc:06:3e:02:67:b4:
         fe:e4:28:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCs+/YjN3LvJ8y9ASK+wJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzJjMDdmYWEyMmZlYjU5NjlmZjFmM2I0OTA1ZDFlYTFl
NGRlZWIwHhcNMjYwMjA5MTQwMDE0WhcNMjYwMjEwMTQwMDE0WjAzMTEwLwYDVQQD
EygzODJlMTU5MjY4OWU1OWY3M2Y2OTA0NDZiZDhkMGJhMTg5ZjNkMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JXbVyQuOop3PsOHaa7tEwWYm3A/
liWNMKn5HbLqzccNWUddBkGSox3cuuMwmNfidYW9EFr3c8vJ8j6z66ao7CF470iI
BywfqtUwFKiXg0uegTcvpU3G+nZvZWrM5RclS8cJ6wb4w0TbO5qvaEsnHOKJ1wGG
iOeNX7WUjk3r0X8RWEH+7BMq3f9k1fP5VSiqT8tP8UDeU1GL33MVsdfclgkrgs/g
S8LZDuTADK/RaqCKQA8Y7zCmh5lveb+NLy2yxuxttaEVa205URX1jOzjc2n8jsLh
7DqD2QtR5/szcvMVm6Nmqx+CaXQ/nI6HDmG9PUTniz8kvO9BJeEvZ3OocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDguFZJonln3P2kERr2NC6GJ89BhMB8GA1UdIwQY
MBaAFIAywH+qIv61lp/x87SQXR6h5N7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUt
ODcwY2M1ZjQzY2Q1LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUtODcwY2M1ZjQzY2Q1
LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPa3aiG2
Z8DfXi0es8orJXNqB3WV465mWZz7vW9hXgLhq+EMkTjH1zrpd+StH9Mq54cBjR2k
cWg4WqWspCzqUDcT5nL3eO2/iinLUlCQxtU7tQw1q0mLWyTlXoi9x+4FmSobS2Kz
6RvIpnTnHlVNitAnc452Wvb/UFqAlnMhs0AumV9DVF8RmdycS40vsrRjVO/NghkE
BfdkVUOxD8GcbA1TIUIZDzVCy+4SHrdXUhNszKtRP8ITv3PAZJfckesH4VAAMbC0
SP22EQFmXMo7c9eT0my0SceQAx6e1sXAPzsV7MhqIZK+vLsC+jUVplY+83SuBFYg
3AY+Ame0/uQoZw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:02 2026 by rpki-client