This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File:                     AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier:          fWTdb2VoVG4Co+ZFgw9mqz503HwNth8UANuIqY8jZ5s=
Subject key identifier:   02:68:E2:87:2D:4A:9A:53:22:7A:0C:CE:CF:74:62:73:AF:64:2A:A7
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer:       /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial:       019C43595B94047AA316D7ECB32513B98E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number:          069B
Signing time:             Mon 09 Feb 2026 17:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:55 +0000
Files and hashes:         1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: w7kVhI9ozkxV+UOqZXCDnbmoFtucarFz4mGL4xB/y6o=)
                          2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:5b:94:04:7a:a3:16:d7:ec:b3:25:13:b9:8e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
        Validity
            Not Before: Feb  9 17:00:55 2026 GMT
            Not After : Feb 10 17:00:55 2026 GMT
        Subject: CN=0268e2872d4a9a53227a0ccecf746273af642aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:5b:ca:74:99:c1:94:15:2c:e8:ca:c2:fb:
                    79:8f:b5:53:10:fa:73:ca:a9:67:57:3e:15:bf:e1:
                    c9:47:e9:38:cc:30:38:bc:1a:bd:1a:62:59:f9:69:
                    7d:ea:90:f5:39:02:49:53:ba:45:45:0f:3b:1f:eb:
                    65:11:3e:6d:85:64:98:ed:52:73:57:c0:99:4c:01:
                    dd:a5:67:62:94:aa:09:f6:ee:11:ca:00:71:c4:76:
                    7d:9a:d8:57:e8:c2:50:b6:f7:3c:6b:51:2b:11:74:
                    da:28:5d:7e:48:22:5e:d2:06:73:64:24:38:84:b1:
                    d7:29:da:e5:2f:5c:5d:b2:d8:a8:7d:b8:4a:40:2a:
                    aa:1b:de:d5:d2:af:9d:9c:b3:a3:a5:69:6b:ed:cf:
                    f7:4e:08:a4:b9:74:db:e0:9b:49:d5:06:86:20:29:
                    b6:c2:2b:08:9d:97:bf:24:54:05:6d:4b:ad:d7:d4:
                    8d:ba:99:79:2d:21:6f:13:06:d5:60:82:a4:82:2f:
                    82:be:23:18:73:78:24:6d:3e:37:7f:c7:41:a2:db:
                    0c:e8:34:36:34:30:52:09:4a:14:d1:3a:7e:86:f4:
                    a5:57:08:79:7e:41:55:14:b8:04:4b:a4:a0:b6:85:
                    6c:cc:d6:a4:9f:b1:54:ae:25:d0:8e:ed:a0:4e:33:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:68:E2:87:2D:4A:9A:53:22:7A:0C:CE:CF:74:62:73:AF:64:2A:A7
            X509v3 Authority Key Identifier:
                keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:94:db:00:85:37:cd:55:b2:e2:5b:00:7e:76:c5:ca:e0:
         db:12:e8:58:7b:df:59:00:3f:fa:15:a1:f7:47:fe:36:ca:ce:
         dd:9b:38:ab:f9:11:a6:79:f9:f7:c1:39:bc:54:6b:0a:4f:7d:
         cd:0d:ff:a4:ff:8a:3b:70:d0:b1:41:d1:d5:66:a8:d0:cb:ab:
         e5:14:92:83:d0:08:25:62:18:04:5b:34:02:94:74:c2:1f:76:
         9f:89:e7:0b:e2:0c:64:45:06:fd:55:29:a2:17:47:c1:d9:2c:
         3e:c2:22:da:06:2a:f2:42:96:b5:8e:a3:20:43:1a:8a:4f:65:
         83:cc:c8:76:88:f9:23:ae:b2:07:ee:a3:0c:48:da:d5:be:ee:
         34:2e:35:fb:58:6e:0d:c9:d3:e6:02:13:9f:b3:fd:e0:f5:c0:
         4d:d0:cc:86:55:64:3f:65:55:b7:98:16:70:b1:88:d1:a1:16:
         af:e6:fb:d9:23:dd:b8:cd:57:b4:55:e4:1b:8a:d3:5d:37:a6:
         e7:a8:5f:27:00:15:2e:b0:47:f9:fb:58:f2:01:d8:1b:24:fc:
         d5:6c:e6:db:48:2b:a4:0d:16:8d:de:69:40:63:01:fa:2b:ec:
         84:bf:3a:59:10:d9:4d:ae:15:8e:32:98:4a:3c:42:da:e2:aa:
         4f:79:b0:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWVuUBHqjFtfssyUTuY4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm
NjQ5NDgwHhcNMjYwMjA5MTcwMDU1WhcNMjYwMjEwMTcwMDU1WjAzMTEwLwYDVQQD
EygwMjY4ZTI4NzJkNGE5YTUzMjI3YTBjY2VjZjc0NjI3M2FmNjQyYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziRbynSZwZQVLOjKwvt5j7VTEPpz
yqlnVz4Vv+HJR+k4zDA4vBq9GmJZ+Wl96pD1OQJJU7pFRQ87H+tlET5thWSY7VJz
V8CZTAHdpWdilKoJ9u4RygBxxHZ9mthX6MJQtvc8a1ErEXTaKF1+SCJe0gZzZCQ4
hLHXKdrlL1xdstiofbhKQCqqG97V0q+dnLOjpWlr7c/3TgikuXTb4JtJ1QaGICm2
wisInZe/JFQFbUut19SNupl5LSFvEwbVYIKkgi+CviMYc3gkbT43f8dBotsM6DQ2
NDBSCUoU0Tp+hvSlVwh5fkFVFLgES6SgtoVszNakn7FUriXQju2gTjNFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJo4octSppTInoMzs90YnOvZCqnMB8GA1UdIwQY
MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt
OWUyZGEzN2I0MTllLzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll
LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUuU2wCF
N81VsuJbAH52xcrg2xLoWHvfWQA/+hWh90f+NsrO3Zs4q/kRpnn598E5vFRrCk99
zQ3/pP+KO3DQsUHR1Wao0Mur5RSSg9AIJWIYBFs0ApR0wh92n4nnC+IMZEUG/VUp
ohdHwdksPsIi2gYq8kKWtY6jIEMaik9lg8zIdoj5I66yB+6jDEja1b7uNC41+1hu
DcnT5gITn7P94PXATdDMhlVkP2VVt5gWcLGI0aEWr+b72SPduM1XtFXkG4rTXTem
56hfJwAVLrBH+ftY8gHYGyT81Wzm20grpA0Wjd5pQGMB+ivshL86WRDZTa4VjjKY
SjxC2uKqT3mwUw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:02 2026 by rpki-client