This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File:                     a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier:          2Y4jb0UQRvmTsEBtvYxcBFhReLscY0ZZuJjgFxJrHm4=
Subject key identifier:   06:05:82:52:46:00:7D:D1:88:CC:7C:5F:25:02:B5:46:02:B4:41:98
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer:       /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial:       019C42461822BBF1EB8B9264654419308DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number:          074E
Signing time:             Mon 09 Feb 2026 12:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:15 +0000
Files and hashes:         1: 6jji6GeuDi-28zZLjTZ0rqsVQ5g.roa (hash: jhgAVRcRyQTR4kfw/aMMXP8njp+EzzXJbfCtIYZkQOE=)
                          2: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: Dw4Iz4HjNIupkOoteBisbge6kgD6tmKNAnY5dH1wx6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:18:22:bb:f1:eb:8b:92:64:65:44:19:30:8d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
        Validity
            Not Before: Feb  9 12:00:15 2026 GMT
            Not After : Feb 10 12:00:15 2026 GMT
        Subject: CN=0605825246007dd188cc7c5f2502b54602b44198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:38:5d:26:1d:9b:8b:a7:b2:ad:73:d7:93:
                    92:be:1f:ab:22:ce:87:7f:dd:f6:0f:05:32:df:ad:
                    cd:c9:28:32:92:b4:d5:ca:b6:41:ad:3a:f0:1d:7c:
                    17:d0:4e:c5:52:76:f0:38:7e:1e:e7:d5:bb:d3:28:
                    d1:67:10:9d:2b:97:dd:d1:a2:1e:5f:38:07:c6:e2:
                    48:94:a8:4f:2b:a2:95:dd:84:3e:7d:26:34:60:c9:
                    f8:60:58:2e:be:c3:27:4c:fa:f5:0a:85:27:5c:62:
                    c1:8a:ff:9e:cd:c6:24:1d:5e:c6:9a:0b:48:7e:ae:
                    94:29:c6:11:6a:86:c5:14:9c:de:02:7d:14:ba:7f:
                    58:6d:15:17:cc:7d:99:59:a7:f9:a8:16:38:1c:4f:
                    ef:6f:e9:01:f5:a1:36:da:7d:93:d3:18:7e:25:f5:
                    52:8e:fe:05:fe:d6:38:26:34:0d:ba:7d:72:47:13:
                    11:10:11:d5:23:b7:50:8a:e1:f0:0e:2d:5b:76:d5:
                    29:35:2f:af:54:26:5a:04:80:07:6a:37:08:77:6b:
                    f4:5e:5d:4f:81:75:fa:e9:2c:3c:26:53:f5:79:93:
                    fd:85:76:15:1a:8a:00:8d:d9:5a:a9:0c:5d:3d:25:
                    76:8b:f2:30:dd:d8:45:00:0d:90:b7:2a:5d:43:b4:
                    15:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:05:82:52:46:00:7D:D1:88:CC:7C:5F:25:02:B5:46:02:B4:41:98
            X509v3 Authority Key Identifier:
                keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4b:a5:ca:d5:04:af:3f:90:9e:71:fe:69:4c:c0:4a:01:e7:
         c9:0d:2c:58:bb:26:2a:96:5f:8b:0d:2f:32:48:0b:10:c7:60:
         82:a3:2d:2f:3a:c4:b2:08:5d:b5:c8:9a:a4:5a:72:c0:f0:45:
         19:19:db:28:ba:17:10:9b:60:8e:e4:bc:1a:2d:a7:e6:95:04:
         ff:15:85:ab:39:b0:00:d5:21:9c:25:9c:54:b8:25:0e:3d:3a:
         78:4a:0d:fb:e7:cc:fe:d2:0a:72:26:ba:e6:4e:c9:04:f4:9e:
         4e:e4:27:81:2d:36:40:59:8d:2b:21:98:89:95:06:2a:ac:48:
         77:8c:69:91:af:19:82:e4:73:2b:1c:65:da:83:be:7a:fa:ed:
         98:cf:d8:4c:2f:9f:2e:10:0b:fe:14:a5:ed:12:9b:92:cd:d0:
         c4:66:d5:c0:ea:07:d0:ce:6e:c8:43:07:1f:5a:4f:00:72:df:
         fb:59:ef:7e:f7:77:43:9c:28:9b:43:ff:78:28:37:40:44:ed:
         96:3c:1a:a9:9c:87:70:38:69:0d:51:e5:ba:7e:45:e6:78:3e:
         25:43:7d:32:59:dc:8a:5a:72:b8:d7:e0:10:b2:fd:d9:54:cf:
         8a:24:e0:ed:70:37:61:dc:8e:95:6b:43:a9:84:9c:d0:28:1e:
         2a:75:16:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRhgiu/Hri5JkZUQZMI3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWNjZWFhOTc0YjI5MDVhY2IyNjJhZjQ1MmMwMjI4MDMx
NmFhYmIwHhcNMjYwMjA5MTIwMDE1WhcNMjYwMjEwMTIwMDE1WjAzMTEwLwYDVQQD
EygwNjA1ODI1MjQ2MDA3ZGQxODhjYzdjNWYyNTAyYjU0NjAyYjQ0MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFU4XSYdm4unsq1z15OSvh+rIs6H
f932DwUy363NySgykrTVyrZBrTrwHXwX0E7FUnbwOH4e59W70yjRZxCdK5fd0aIe
XzgHxuJIlKhPK6KV3YQ+fSY0YMn4YFguvsMnTPr1CoUnXGLBiv+ezcYkHV7GmgtI
fq6UKcYRaobFFJzeAn0Uun9YbRUXzH2ZWaf5qBY4HE/vb+kB9aE22n2T0xh+JfVS
jv4F/tY4JjQNun1yRxMREBHVI7dQiuHwDi1bdtUpNS+vVCZaBIAHajcId2v0Xl1P
gXX66Sw8JlP1eZP9hXYVGooAjdlaqQxdPSV2i/Iw3dhFAA2QtypdQ7QVSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYFglJGAH3RiMx8XyUCtUYCtEGYMB8GA1UdIwQY
MBaAFGtczqqXSykFrLJir0UsAigDFqq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMt
OGIwN2FjZDA3Yzk0LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMtOGIwN2FjZDA3Yzk0
LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUulytUE
rz+QnnH+aUzASgHnyQ0sWLsmKpZfiw0vMkgLEMdggqMtLzrEsghdtciapFpywPBF
GRnbKLoXEJtgjuS8Gi2n5pUE/xWFqzmwANUhnCWcVLglDj06eEoN++fM/tIKcia6
5k7JBPSeTuQngS02QFmNKyGYiZUGKqxId4xpka8ZguRzKxxl2oO+evrtmM/YTC+f
LhAL/hSl7RKbks3QxGbVwOoH0M5uyEMHH1pPAHLf+1nvfvd3Q5wom0P/eCg3QETt
ljwaqZyHcDhpDVHlun5F5ng+JUN9MlncilpyuNfgELL92VTPiiTg7XA3YdyOlWtD
qYSc0CgeKnUWFw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:42 2026 by rpki-client