This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File:                     8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier:          sTNIkbZEKNQAMdanfJUPoHqxaGyc6iGlHu9fuoiJLiA=
Subject key identifier:   87:B0:45:6A:F2:60:9F:C1:7F:4E:EF:28:72:27:93:05:E6:E3:2F:C8
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer:       /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial:       019C43900884784E8F27FDD397447EF99D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number:          0EC0
Signing time:             Mon 09 Feb 2026 18:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:38 +0000
Files and hashes:         1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: ITxOzvv1cudxI3/0eqCf0eoJFzLxpKRXdcu76zbqL8A=)
                          2: ENsz-0iVPKp8W2IcDjZ6BMwRa7I.roa (hash: wKwXUWVND8Peb/CdhSLfx3qPjXKmandyITMcJv3M6kk=)
                          3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:08:84:78:4e:8f:27:fd:d3:97:44:7e:f9:9d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
        Validity
            Not Before: Feb  9 18:00:38 2026 GMT
            Not After : Feb 10 18:00:38 2026 GMT
        Subject: CN=87b0456af2609fc17f4eef2872279305e6e32fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:65:7c:18:4d:1d:a9:7c:61:4f:08:48:15:
                    c1:0f:63:d0:30:c8:d9:ef:d3:6f:17:db:fe:61:7d:
                    ae:1c:4b:20:1d:31:10:82:18:46:5b:f8:5e:2f:f2:
                    56:c5:0c:4d:1c:79:19:6d:09:5a:48:ab:03:43:60:
                    ec:13:f7:57:c9:f6:1e:90:44:d3:b6:c5:1f:cf:96:
                    28:f9:0d:2c:7b:53:31:cd:91:94:5d:a4:a3:67:f4:
                    47:de:f9:ad:1e:4e:cd:ac:ea:be:ed:0b:34:ae:de:
                    ca:5f:fd:39:4a:c3:eb:8f:b5:06:ee:87:4c:8e:39:
                    84:00:48:f6:fb:b6:14:a4:4a:66:c8:79:8b:3c:3e:
                    18:5c:af:2c:d0:77:e3:7c:22:70:25:a0:ca:d0:13:
                    67:24:20:52:3c:2a:f2:8b:5f:35:bd:cd:0a:e0:24:
                    9c:d6:8c:0b:6b:b5:a1:08:bc:8e:6b:dc:81:6e:3c:
                    29:43:37:3d:a9:12:5c:cd:0f:78:27:b1:b1:f5:b4:
                    7d:69:d9:6b:a7:86:b0:c3:14:62:63:9f:6d:40:57:
                    68:d0:11:3f:da:6b:ef:99:e1:cc:d9:a4:4a:0a:1a:
                    3c:1b:c0:d0:07:2e:ad:7a:ba:f8:1c:8e:9d:f8:40:
                    f1:74:2b:c6:15:fe:08:21:91:68:d0:b5:62:cf:10:
                    24:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:45:6A:F2:60:9F:C1:7F:4E:EF:28:72:27:93:05:E6:E3:2F:C8
            X509v3 Authority Key Identifier:
                keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:27:c9:04:94:94:8b:24:03:84:7d:b5:ff:f2:a0:4b:e0:4c:
         17:58:3e:2f:d6:c9:97:da:85:a4:5a:a6:53:f2:71:1f:7c:88:
         54:4c:24:75:bd:32:8f:2c:17:da:c8:34:16:f6:19:a8:42:e2:
         1e:07:35:7f:61:74:76:53:e1:1f:72:c0:10:bf:92:bf:11:8e:
         e2:d0:55:d5:5d:1e:56:75:b1:6f:59:b3:87:1f:ee:bf:7d:db:
         a8:15:df:d9:33:67:02:3e:6b:14:d4:8e:f7:13:3a:9e:6a:44:
         9a:8a:be:5b:54:99:32:70:7b:5c:ea:54:a6:69:e6:27:26:7d:
         b1:22:84:4b:02:76:95:23:40:57:9b:eb:ad:4b:57:fc:a8:00:
         cb:be:0f:53:5a:07:46:e4:8c:1b:68:fc:dc:e1:72:96:92:1d:
         ef:76:06:c7:fb:de:f0:48:fc:9e:7d:f9:de:e4:e0:e8:8a:b3:
         9f:22:40:77:71:02:a2:17:64:97:ed:55:07:49:87:2a:c7:c1:
         70:47:9f:e3:5b:b3:09:8a:f9:d4:cc:6b:15:a4:5f:20:fa:af:
         a2:83:7c:9c:77:3f:9b:b5:dd:54:8f:f1:56:7e:99:94:c8:07:
         2a:fa:df:37:82:98:50:a3:96:b3:4d:6f:83:93:8e:a5:7b:f5:
         95:97:12:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkAiEeE6PJ/3Tl0R++Z0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRi
YWY1ZGQwHhcNMjYwMjA5MTgwMDM4WhcNMjYwMjEwMTgwMDM4WjAzMTEwLwYDVQQD
Eyg4N2IwNDU2YWYyNjA5ZmMxN2Y0ZWVmMjg3MjI3OTMwNWU2ZTMyZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukxlfBhNHal8YU8ISBXBD2PQMMjZ
79NvF9v+YX2uHEsgHTEQghhGW/heL/JWxQxNHHkZbQlaSKsDQ2DsE/dXyfYekETT
tsUfz5Yo+Q0se1MxzZGUXaSjZ/RH3vmtHk7NrOq+7Qs0rt7KX/05SsPrj7UG7odM
jjmEAEj2+7YUpEpmyHmLPD4YXK8s0HfjfCJwJaDK0BNnJCBSPCryi181vc0K4CSc
1owLa7WhCLyOa9yBbjwpQzc9qRJczQ94J7Gx9bR9adlrp4awwxRiY59tQFdo0BE/
2mvvmeHM2aRKCho8G8DQBy6terr4HI6d+EDxdCvGFf4IIZFo0LVizxAkJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIewRWryYJ/Bf07vKHInkwXm4y/IMB8GA1UdIwQY
MBaAFPIi++ha5AjTd7IX1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzkt
YjBjMWUzMzA0ZTc0LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0
LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCfJBJSU
iyQDhH21//KgS+BMF1g+L9bJl9qFpFqmU/JxH3yIVEwkdb0yjywX2sg0FvYZqELi
Hgc1f2F0dlPhH3LAEL+SvxGO4tBV1V0eVnWxb1mzhx/uv33bqBXf2TNnAj5rFNSO
9xM6nmpEmoq+W1SZMnB7XOpUpmnmJyZ9sSKESwJ2lSNAV5vrrUtX/KgAy74PU1oH
RuSMG2j83OFylpId73YGx/ve8Ej8nn353uTg6IqznyJAd3ECohdkl+1VB0mHKsfB
cEef41uzCYr51MxrFaRfIPqvooN8nHc/m7XdVI/xVn6ZlMgHKvrfN4KYUKOWs01v
g5OOpXv1lZcSzA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:50 2026 by rpki-client