This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File:                     d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier:          lbG7qFA9WaIz5gO3RPLYG/gLWa1oJDjPMSpP/c4Ynos=
Subject key identifier:   86:F4:3A:AD:10:85:23:73:CB:22:43:37:FD:B1:26:7F:59:22:BF:EB
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer:       /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial:       019C427D4DF39955F5956C5B11DC0975AF8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number:          0FB2
Signing time:             Mon 09 Feb 2026 13:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:33 +0000
Files and hashes:         1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: +7402vLpVQ1h8Xsy9+e9FRPPIiYnP996E+jUvwil8v4=)
                          2: utBF4pjjAxN8gnwEZw-ZaW9VBYk.roa (hash: Rb/8giga2DKHr0xu9FiYkuTdiT2IO1AvhtunEnimjeM=)
                          3: zp6AvUoMe9iCoAq9x5r0S8AYxec.roa (hash: X3bBF0Ic6iTw88nHub1cmld7xWKzFn1W8243XqYcOlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4d:f3:99:55:f5:95:6c:5b:11:dc:09:75:af:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
        Validity
            Not Before: Feb  9 13:00:33 2026 GMT
            Not After : Feb 10 13:00:33 2026 GMT
        Subject: CN=86f43aad10852373cb224337fdb1267f5922bfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:3f:55:41:9e:a7:f0:fa:69:fb:29:07:33:
                    91:1f:60:f8:32:d5:8e:c4:55:50:16:c4:89:2d:f9:
                    01:fb:df:7a:39:43:12:68:1b:55:38:90:43:2b:54:
                    44:3c:09:3c:29:04:74:01:1a:42:aa:9c:70:75:a4:
                    e7:4b:70:74:17:08:d7:eb:15:1b:fa:83:49:4e:e0:
                    1e:9e:75:52:85:10:d3:3e:bc:8e:cc:da:dc:cf:0d:
                    f2:ef:cc:62:58:4e:ed:20:02:47:a2:03:66:59:b4:
                    da:f3:dd:c4:ab:45:c5:7b:20:c2:d0:04:b2:a4:92:
                    57:06:2b:04:67:30:e2:41:b0:2c:81:a5:63:0a:f8:
                    75:bd:9c:b3:27:67:e2:43:ef:0c:46:22:1f:65:03:
                    7e:1c:4f:9b:23:81:77:5c:93:e5:a1:9d:43:c8:2e:
                    ce:ce:db:87:64:95:40:7a:5f:ad:75:7d:68:2c:3c:
                    c2:d3:48:cc:3e:dd:20:82:83:b5:68:04:e6:a2:4f:
                    6f:ee:03:d6:7e:4f:42:6f:01:5d:e8:a4:e0:e5:55:
                    94:0e:8c:55:ad:ab:63:6a:50:9c:45:34:3a:bb:fb:
                    18:f5:7c:cc:b2:d7:ba:e6:c8:7b:d4:21:21:30:72:
                    f5:b1:0a:bb:5f:bf:b9:d6:0e:5e:1a:a3:e9:c7:8c:
                    51:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F4:3A:AD:10:85:23:73:CB:22:43:37:FD:B1:26:7F:59:22:BF:EB
            X509v3 Authority Key Identifier:
                keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:6e:68:8d:e5:bb:34:38:bc:d5:84:47:d3:6e:08:f2:d4:7f:
         83:1b:69:b4:a8:9e:a2:ca:61:8a:d7:76:92:2d:e8:d6:63:3d:
         7f:b2:83:52:f1:6c:9b:fc:76:1f:df:ef:21:1d:f8:9d:3f:71:
         e9:3a:44:00:af:80:6c:65:69:f3:d9:48:fe:3a:05:16:d3:7d:
         5a:84:f1:e1:de:d0:b0:33:d2:a3:70:aa:f6:de:b9:84:31:08:
         fd:a6:90:6f:07:a4:8e:1e:e0:11:f4:0d:0e:7e:05:0b:09:d5:
         4f:0e:17:72:20:da:a8:98:96:0b:de:fe:6f:43:5f:db:41:2b:
         09:05:2c:26:bb:9e:33:f9:fc:07:8b:52:f1:5e:c3:b9:f3:4a:
         93:a8:a1:fd:7c:a8:14:60:a0:d9:19:ec:0b:1f:01:02:ef:dc:
         71:0b:a9:5c:5a:cb:47:fa:eb:5e:bc:e0:80:3b:1b:51:62:69:
         b3:f8:46:98:e4:c6:ea:b2:fa:de:1e:64:be:e2:e2:72:a4:1d:
         39:e9:50:a7:b2:d0:1d:bd:ba:91:0c:60:4f:3c:8b:03:1b:2c:
         00:61:49:40:79:d5:71:14:b9:3e:d9:fb:16:e1:63:5e:3f:c7:
         bf:bb:9c:3a:86:9c:c7:c1:ed:24:5a:78:13:9e:f8:fb:16:e6:
         19:a2:55:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfU3zmVX1lWxbEdwJda+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzdkZDI1Y2E1ZmIxZGM5MTNjMmZmYjkxNmZhMjJmYjg2
MTBiNzgwHhcNMjYwMjA5MTMwMDMzWhcNMjYwMjEwMTMwMDMzWjAzMTEwLwYDVQQD
Eyg4NmY0M2FhZDEwODUyMzczY2IyMjQzMzdmZGIxMjY3ZjU5MjJiZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGE/VUGep/D6afspBzORH2D4MtWO
xFVQFsSJLfkB+996OUMSaBtVOJBDK1REPAk8KQR0ARpCqpxwdaTnS3B0FwjX6xUb
+oNJTuAennVShRDTPryOzNrczw3y78xiWE7tIAJHogNmWbTa893Eq0XFeyDC0ASy
pJJXBisEZzDiQbAsgaVjCvh1vZyzJ2fiQ+8MRiIfZQN+HE+bI4F3XJPloZ1DyC7O
ztuHZJVAel+tdX1oLDzC00jMPt0ggoO1aATmok9v7gPWfk9CbwFd6KTg5VWUDoxV
ratjalCcRTQ6u/sY9XzMste65sh71CEhMHL1sQq7X7+51g5eGqPpx4xRawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb0Oq0QhSNzyyJDN/2xJn9ZIr/rMB8GA1UdIwQY
MBaAFHfH3SXKX7HckTwv+5Fvoi+4YQt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYt
ZGRiMzViMWFiYWQ1LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYtZGRiMzViMWFiYWQ1
LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsG5ojeW7
NDi81YRH024I8tR/gxtptKieosphitd2ki3o1mM9f7KDUvFsm/x2H9/vIR34nT9x
6TpEAK+AbGVp89lI/joFFtN9WoTx4d7QsDPSo3Cq9t65hDEI/aaQbwekjh7gEfQN
Dn4FCwnVTw4XciDaqJiWC97+b0Nf20ErCQUsJrueM/n8B4tS8V7DufNKk6ih/Xyo
FGCg2RnsCx8BAu/ccQupXFrLR/rrXrzggDsbUWJps/hGmOTG6rL63h5kvuLicqQd
OelQp7LQHb26kQxgTzyLAxssAGFJQHnVcRS5Ptn7FuFjXj/Hv7ucOoacx8HtJFp4
E574+xbmGaJVUg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:10 2026 by rpki-client