This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File:                     mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier:          Ek4g//ikD+ieGvQSWQLMLhquHM/Ix/8eXCYMplVaxbA=
Subject key identifier:   BF:E5:11:A4:F5:A0:7F:A2:F6:45:D2:EE:C6:2A:92:63:14:A0:98:0F
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer:       /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial:       019C42B4041080D46B4AD40105985EB7F3D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number:          0676
Signing time:             Mon 09 Feb 2026 14:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:19 +0000
Files and hashes:         1: 1hrgzjhdA5Y-F7fISIbwYJa2IVc.roa (hash: 8PAttc7ZrtZswXRaiAtTSylop3DYOKrwU34TygYkrxs=)
                          2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: 0pQr59GKfudHcRwtVR/mJZNry+NRJ/PaJ/zT8Da//AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:04:10:80:d4:6b:4a:d4:01:05:98:5e:b7:f3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
        Validity
            Not Before: Feb  9 14:00:19 2026 GMT
            Not After : Feb 10 14:00:19 2026 GMT
        Subject: CN=bfe511a4f5a07fa2f645d2eec62a926314a0980f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:4b:66:48:00:44:f4:8e:34:b0:84:00:42:
                    4f:b4:f4:35:dd:64:34:76:39:ea:b8:fb:4a:fd:2b:
                    7e:c7:41:c4:da:60:3a:f3:50:d1:c5:10:4b:20:e0:
                    0a:01:2a:9d:77:5f:6c:49:0d:79:25:02:ae:60:e0:
                    02:c4:83:15:99:21:36:23:4a:38:8b:1d:dd:a0:89:
                    a3:90:9a:4b:55:b7:20:a7:b7:57:fe:19:b5:be:d1:
                    78:9d:2f:1a:96:df:7b:bd:e5:a3:59:29:68:c3:bc:
                    13:40:f8:21:31:ea:6a:e5:6d:36:02:db:93:f7:f8:
                    cb:b4:54:cf:4b:bb:fb:ac:c7:11:83:74:f1:12:81:
                    f6:3c:8e:05:3f:78:04:0c:71:06:1f:04:27:6a:9e:
                    0e:b4:9a:01:30:76:95:ea:7b:bf:aa:76:93:a3:57:
                    a7:03:f4:fe:ae:f8:b0:8b:90:1b:c8:c9:81:b6:f8:
                    6e:ef:57:78:23:b1:c3:b1:93:c1:3f:f8:18:ad:40:
                    eb:42:fa:5b:20:8c:ec:7b:ad:ba:6b:13:fa:ee:dc:
                    a1:7f:09:24:44:ff:a8:54:a6:57:02:92:0d:3e:d7:
                    74:24:a4:7a:c3:06:64:45:46:f4:e2:df:8a:a3:ef:
                    ba:1b:8c:bf:4f:be:7f:e5:93:3c:c7:b5:ee:51:f0:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:11:A4:F5:A0:7F:A2:F6:45:D2:EE:C6:2A:92:63:14:A0:98:0F
            X509v3 Authority Key Identifier:
                keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:81:02:ed:b6:54:65:cd:ba:76:87:f0:b0:c5:47:a3:28:33:
         c5:91:18:b1:f9:b7:2e:cc:83:f5:a7:db:83:7a:e9:d0:ad:8f:
         8e:75:b8:ff:d3:15:40:0e:3e:5a:42:8c:68:8f:63:3f:ee:fb:
         b5:2d:b7:04:61:44:c8:68:d7:93:8e:0d:1f:8c:3c:20:53:28:
         0d:ff:85:87:1b:d7:d1:6c:0b:26:27:c9:16:83:8a:85:31:6c:
         1f:85:53:3a:8e:cb:95:6d:f0:69:5d:6e:9e:8a:5e:e7:9f:9c:
         92:96:bc:28:bb:1f:08:0f:1f:87:48:da:e3:40:15:9a:e2:03:
         56:43:a0:a2:8d:ac:e8:bf:a9:3c:04:48:bf:28:7a:1c:7d:d9:
         5c:76:8a:ba:6f:81:b5:15:bc:ac:33:38:e8:70:ba:34:cf:24:
         4c:1b:bd:6f:c3:41:14:68:a2:73:95:37:89:35:26:6f:57:3e:
         b9:ab:74:02:a0:7c:05:37:76:f0:6a:73:a4:e4:e7:4a:f5:e9:
         92:b0:94:93:08:cb:6f:27:89:03:3e:29:bb:28:f1:d5:f6:8e:
         bc:dc:49:28:77:fd:7f:dd:1f:0e:ce:b9:89:44:01:91:9d:36:
         92:fc:ff:20:88:c4:9d:06:0c:ba:10:ef:05:06:65:30:63:02:
         42:e2:02:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtAQQgNRrStQBBZhet/PYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NmIyMjljYmYzNjY3YWNlMjc3YjE2MDA1YzM5MDcyZDA2
NzNmY2YwHhcNMjYwMjA5MTQwMDE5WhcNMjYwMjEwMTQwMDE5WjAzMTEwLwYDVQQD
EyhiZmU1MTFhNGY1YTA3ZmEyZjY0NWQyZWVjNjJhOTI2MzE0YTA5ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbJLZkgARPSONLCEAEJPtPQ13WQ0
djnquPtK/St+x0HE2mA681DRxRBLIOAKASqdd19sSQ15JQKuYOACxIMVmSE2I0o4
ix3doImjkJpLVbcgp7dX/hm1vtF4nS8alt97veWjWSlow7wTQPghMepq5W02AtuT
9/jLtFTPS7v7rMcRg3TxEoH2PI4FP3gEDHEGHwQnap4OtJoBMHaV6nu/qnaTo1en
A/T+rviwi5AbyMmBtvhu71d4I7HDsZPBP/gYrUDrQvpbIIzse626axP67tyhfwkk
RP+oVKZXApINPtd0JKR6wwZkRUb04t+Ko++6G4y/T75/5ZM8x7XuUfAygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/lEaT1oH+i9kXS7sYqkmMUoJgPMB8GA1UdIwQY
MBaAFJlrIpy/Nmes4nexYAXDkHLQZz/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zNjYzYmEtYTgwZC00MTA4LTg3MDgt
MGIxNWQ5N2FkNTYxLzEvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zNjYzYmEtYTgwZC00MTA4LTg3MDgtMGIxNWQ5N2FkNTYx
LzEvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIEC7bZU
Zc26dofwsMVHoygzxZEYsfm3LsyD9afbg3rp0K2PjnW4/9MVQA4+WkKMaI9jP+77
tS23BGFEyGjXk44NH4w8IFMoDf+FhxvX0WwLJifJFoOKhTFsH4VTOo7LlW3waV1u
nope55+ckpa8KLsfCA8fh0ja40AVmuIDVkOgoo2s6L+pPARIvyh6HH3ZXHaKum+B
tRW8rDM46HC6NM8kTBu9b8NBFGiic5U3iTUmb1c+uat0AqB8BTd28GpzpOTnSvXp
krCUkwjLbyeJAz4puyjx1faOvNxJKHf9f90fDs65iUQBkZ02kvz/IIjEnQYMuhDv
BQZlMGMCQuICoA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:21 2026 by rpki-client