This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File:                     o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier:          G7SfCV9+yEHD/yngi3UJluKx5wBl/aA2IW4HSCGTNy4=
Subject key identifier:   04:77:22:5A:E4:7C:96:67:0B:F0:DA:FA:A8:38:9B:15:22:0A:46:D9
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer:       /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial:       019C42466B95039F45694F73AFD35D2B1F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number:          0701
Signing time:             Mon 09 Feb 2026 12:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:37 +0000
Files and hashes:         1: IASV8JRGEsONowruVRVAzSNBd00.roa (hash: q96LZrsQ0DU3+JLJjXjHuPPjiyhj2TOBmHbW59vMX1E=)
                          2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: HlKxYEDPphvywch3IN0kKTz3h4LpthghHGl//N9QW8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:6b:95:03:9f:45:69:4f:73:af:d3:5d:2b:1f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
        Validity
            Not Before: Feb  9 12:00:37 2026 GMT
            Not After : Feb 10 12:00:37 2026 GMT
        Subject: CN=0477225ae47c96670bf0dafaa8389b15220a46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:fb:f1:7a:d1:ea:ef:97:78:dc:14:33:1f:
                    97:46:81:73:d0:d7:fb:70:e9:a5:03:f6:88:0e:cd:
                    cb:44:40:94:34:08:0b:ed:d4:08:34:59:ad:a2:92:
                    e7:a9:11:ff:43:65:a4:26:63:4e:d2:14:b5:3f:3e:
                    41:8b:c3:2e:fc:24:79:1a:4c:07:73:e9:55:9f:8d:
                    30:ff:52:6c:96:a9:49:a8:5d:f7:4f:5e:80:0d:24:
                    46:64:81:c2:f6:33:62:f5:0b:7a:0c:ab:7f:c3:d0:
                    96:0a:19:11:b9:03:40:d5:d7:a2:da:26:a9:59:bd:
                    9d:59:10:8c:27:43:cd:01:1b:5a:f3:ce:b9:fb:fd:
                    62:36:81:6a:01:a3:f3:82:eb:73:e1:7b:db:7c:a6:
                    ea:9e:99:36:16:33:8b:95:96:18:68:2b:34:4e:09:
                    27:d6:bd:3e:34:99:2e:a1:e4:bc:d1:81:6f:5f:ce:
                    ba:40:ca:77:1b:f3:c3:fc:4b:95:14:a9:2b:2d:b5:
                    e4:7a:b8:e4:38:81:e9:da:d3:a4:ee:73:59:4b:57:
                    b6:52:23:30:f1:ad:94:1c:6f:f1:35:f0:84:9e:bf:
                    d7:44:cd:42:4d:36:a9:a5:6b:9e:80:0c:4d:be:fa:
                    d7:f0:f5:59:0b:9d:47:c2:16:d4:fc:98:be:4b:88:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:22:5A:E4:7C:96:67:0B:F0:DA:FA:A8:38:9B:15:22:0A:46:D9
            X509v3 Authority Key Identifier:
                keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:17:7b:0a:00:c5:2a:3f:fd:a0:36:44:de:9c:41:e6:38:4a:
         29:f2:c3:83:25:22:14:45:86:6e:94:a5:57:a5:62:e9:79:4a:
         b3:b1:7c:53:bc:9e:f7:59:79:d0:29:9d:c1:a4:38:c3:d4:6e:
         e1:eb:31:09:90:b8:3a:7f:4c:c2:33:19:df:b7:5e:48:2a:11:
         bc:c2:63:91:c7:dc:a3:77:87:f8:b1:8f:be:c4:a7:48:a2:dd:
         2f:aa:8f:81:8e:b5:ad:ee:60:40:31:7b:21:f8:82:6c:1a:c2:
         0c:cd:2c:12:41:08:29:5e:24:42:5c:2a:8d:22:0a:a2:cd:f5:
         2b:e5:7c:ed:2c:35:be:71:85:8a:b2:60:cc:70:62:b8:62:a3:
         af:7f:7e:33:ab:e0:23:15:ea:0a:91:34:46:7e:e8:bd:94:37:
         41:41:10:fd:35:3c:bd:52:ea:6a:06:f0:ac:73:d7:61:34:b8:
         eb:c7:c7:e3:8a:b0:a6:dd:aa:58:6b:ea:ef:9c:af:67:d8:54:
         32:f4:51:a0:0b:51:e0:f6:f2:33:60:c8:33:a5:6d:c3:07:b7:
         4e:91:06:69:b8:68:1d:20:73:0d:49:db:ba:89:37:1e:8c:1f:
         a5:d3:6b:26:3b:65:53:1e:0b:77:4b:93:56:1f:30:f5:28:d1:
         1a:ef:cd:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRmuVA59FaU9zr9NdKx8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTMwOTM2OGE4YWQxM2JiMDgyNjQ0OTdmYzJlNDMxNTFl
NmQ1YTYwHhcNMjYwMjA5MTIwMDM3WhcNMjYwMjEwMTIwMDM3WjAzMTEwLwYDVQQD
EygwNDc3MjI1YWU0N2M5NjY3MGJmMGRhZmFhODM4OWIxNTIyMGE0NmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL778XrR6u+XeNwUMx+XRoFz0Nf7
cOmlA/aIDs3LRECUNAgL7dQINFmtopLnqRH/Q2WkJmNO0hS1Pz5Bi8Mu/CR5GkwH
c+lVn40w/1JslqlJqF33T16ADSRGZIHC9jNi9Qt6DKt/w9CWChkRuQNA1dei2iap
Wb2dWRCMJ0PNARta8865+/1iNoFqAaPzgutz4XvbfKbqnpk2FjOLlZYYaCs0Tgkn
1r0+NJkuoeS80YFvX866QMp3G/PD/EuVFKkrLbXkerjkOIHp2tOk7nNZS1e2UiMw
8a2UHG/xNfCEnr/XRM1CTTappWuegAxNvvrX8PVZC51HwhbU/Ji+S4j+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAR3IlrkfJZnC/Da+qg4mxUiCkbZMB8GA1UdIwQY
MBaAFKNTCTaKitE7sIJkSX/C5DFR5tWmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lZTZmZDAtMjc5Mi00OWM0LWIyZDIt
MTcxNDIyM2I5NDllLzEvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lZTZmZDAtMjc5Mi00OWM0LWIyZDItMTcxNDIyM2I5NDll
LzEvbzFNSk5vcUswVHV3Z21SSmY4TGtNVkhtMWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORd7CgDF
Kj/9oDZE3pxB5jhKKfLDgyUiFEWGbpSlV6Vi6XlKs7F8U7ye91l50CmdwaQ4w9Ru
4esxCZC4On9MwjMZ37deSCoRvMJjkcfco3eH+LGPvsSnSKLdL6qPgY61re5gQDF7
IfiCbBrCDM0sEkEIKV4kQlwqjSIKos31K+V87Sw1vnGFirJgzHBiuGKjr39+M6vg
IxXqCpE0Rn7ovZQ3QUEQ/TU8vVLqagbwrHPXYTS468fH44qwpt2qWGvq75yvZ9hU
MvRRoAtR4PbyM2DIM6Vtwwe3TpEGabhoHSBzDUnbuok3HowfpdNrJjtlUx4Ld0uT
Vh8w9SjRGu/N1g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:19 2026 by rpki-client