This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
File:                     g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json)
Hash identifier:          dyDUH+XLFHhjYKvcJekAlso0XLxValU4MlMm9qUcJLk=
Subject key identifier:   41:FB:B3:45:68:90:E7:34:E5:F2:A1:13:BC:4A:2F:DE:82:89:69:55
Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
Certificate issuer:       /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Certificate serial:       019C42EB08ADD0D40269267A57431F6ECF03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
Manifest number:          02E7
Signing time:             Mon 09 Feb 2026 15:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:25 +0000
Files and hashes:         1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: dfpLBfBuOFh5OiXwVt3li4TYDgJK8r6rj0QYXQ9oyKo=)
                          2: uIfUkBd_2uvsZ7jS1ZsJEmyn92c.roa (hash: GOXOMoC6ne/A4gF/DBNRcpJh+oHhM3k8jJSQVwLmm48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:08:ad:d0:d4:02:69:26:7a:57:43:1f:6e:cf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
        Validity
            Not Before: Feb  9 15:00:25 2026 GMT
            Not After : Feb 10 15:00:25 2026 GMT
        Subject: CN=41fbb3456890e734e5f2a113bc4a2fde82896955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:de:da:7c:b3:79:be:e9:9d:d0:7f:96:ce:db:
                    16:f5:4e:39:cd:dd:8a:8f:9f:be:44:b7:b7:57:0b:
                    bf:cc:dd:2c:99:0c:78:a7:f1:c9:de:a6:0f:db:b0:
                    20:27:58:7f:f8:08:3a:41:bc:53:0d:e0:45:47:17:
                    8b:ad:8d:79:2b:a2:21:78:93:75:49:c5:45:a9:a3:
                    27:9a:74:89:72:b2:aa:a1:63:ab:98:5c:68:5b:1b:
                    87:84:fd:6c:d4:b1:35:dd:21:89:4d:33:28:b9:71:
                    86:1a:32:7e:cb:72:34:e3:27:a1:b2:1e:1f:04:1a:
                    f7:bd:57:43:70:8e:2d:ed:71:01:52:35:50:c1:69:
                    0c:3f:fc:26:b0:20:92:eb:cc:51:1c:33:e3:20:0a:
                    2d:b1:b0:0a:04:37:da:36:7f:07:56:56:48:85:91:
                    2b:f3:f9:75:3b:cd:1c:01:cd:33:18:35:a2:df:dc:
                    4c:b0:36:74:08:68:cf:a9:92:81:fc:ef:ff:de:02:
                    c9:e0:70:66:b0:8b:4c:f2:c6:59:dd:5c:1a:66:f7:
                    92:44:5d:b1:ad:cd:8d:44:ca:7a:50:32:1e:51:8f:
                    a9:e7:88:c2:87:cd:c9:9f:40:9f:de:f2:9d:77:72:
                    11:1d:52:3d:9e:ed:45:93:44:6c:28:bf:82:ec:9e:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:B3:45:68:90:E7:34:E5:F2:A1:13:BC:4A:2F:DE:82:89:69:55
            X509v3 Authority Key Identifier:
                keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:da:de:dc:f3:a7:fe:f8:4b:75:a5:e0:67:63:de:eb:ce:14:
         0b:e5:a8:0a:3d:c8:90:e6:d5:62:70:13:4d:5a:4a:bb:f9:8c:
         10:4f:55:48:f0:49:73:fe:8a:c1:1c:dd:c3:8e:92:bd:b9:70:
         bd:4c:2a:07:2a:4e:7f:c9:b8:6a:aa:73:e5:4f:9e:c4:b7:d2:
         35:0f:e1:5e:8a:d7:b9:de:2c:92:dc:11:10:e2:3f:85:c8:08:
         a0:ae:fa:f0:62:18:9a:75:81:99:4c:56:2f:5f:00:97:bd:59:
         9e:38:e7:7d:bc:83:81:2b:fd:42:c6:5e:cb:f4:29:0c:c1:80:
         23:b4:ad:e8:eb:26:da:77:ab:60:2f:4f:05:8a:83:7e:41:c9:
         e0:89:17:eb:e1:02:4b:54:7e:73:82:35:0d:a0:b9:45:51:2e:
         9c:8b:4b:4f:ea:9b:aa:fc:12:f2:65:26:b0:57:2b:1b:0f:dc:
         3a:5d:cd:e6:95:e6:07:28:4d:dd:71:9c:0d:bb:b5:06:15:be:
         76:2c:05:4e:fb:ce:79:ce:51:5d:02:65:4c:46:d9:05:58:51:
         1d:d7:e6:17:6b:d2:fd:63:56:6f:0e:58:e2:73:d0:13:e1:33:
         d1:4b:23:d1:16:e6:34:49:6e:e8:3f:68:e3:09:30:72:c7:89:
         e0:98:93:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6wit0NQCaSZ6V0Mfbs8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZGYwY2FjYjlmZDUwZTFiZTdkZmJmM2QwYWM4NTRiZWVk
Nzg2YmUwHhcNMjYwMjA5MTUwMDI1WhcNMjYwMjEwMTUwMDI1WjAzMTEwLwYDVQQD
Eyg0MWZiYjM0NTY4OTBlNzM0ZTVmMmExMTNiYzRhMmZkZTgyODk2OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA697afLN5vumd0H+WztsW9U45zd2K
j5++RLe3Vwu/zN0smQx4p/HJ3qYP27AgJ1h/+Ag6QbxTDeBFRxeLrY15K6IheJN1
ScVFqaMnmnSJcrKqoWOrmFxoWxuHhP1s1LE13SGJTTMouXGGGjJ+y3I04yehsh4f
BBr3vVdDcI4t7XEBUjVQwWkMP/wmsCCS68xRHDPjIAotsbAKBDfaNn8HVlZIhZEr
8/l1O80cAc0zGDWi39xMsDZ0CGjPqZKB/O//3gLJ4HBmsItM8sZZ3VwaZveSRF2x
rc2NRMp6UDIeUY+p54jCh83Jn0Cf3vKdd3IRHVI9nu1Fk0RsKL+C7J7rpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH7s0VokOc05fKhE7xKL96CiWlVMB8GA1UdIwQY
MBaAFIPfDKy5/VDhvn3789CshUvu14a+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYt
NGUwMGMzYjcwODc4LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hYTFjNTEtOTI2NC00MDZlLWI3OTYtNGUwMGMzYjcwODc4
LzEvZzk4TXJMbjlVT0ctZmZ2ejBLeUZTLTdYaHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9re3POn
/vhLdaXgZ2Pe684UC+WoCj3IkObVYnATTVpKu/mMEE9VSPBJc/6KwRzdw46Svblw
vUwqBypOf8m4aqpz5U+exLfSNQ/hXorXud4sktwREOI/hcgIoK768GIYmnWBmUxW
L18Al71ZnjjnfbyDgSv9QsZey/QpDMGAI7St6Osm2nerYC9PBYqDfkHJ4IkX6+EC
S1R+c4I1DaC5RVEunItLT+qbqvwS8mUmsFcrGw/cOl3N5pXmByhN3XGcDbu1BhW+
diwFTvvOec5RXQJlTEbZBVhRHdfmF2vS/WNWbw5Y4nPQE+Ez0Usj0RbmNElu6D9o
4wkwcseJ4JiThg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:26 2026 by rpki-client