This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File:                     ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier:          eKBh/qNY2kpHJrauArVS/YMOFu5iLvPaxbwgIB2mPSQ=
Subject key identifier:   F9:21:AF:7A:45:99:DA:B5:68:39:2B:3F:A5:A8:B9:50:18:B3:E9:9F
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer:       /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial:       019C40FCF84112B16ED1832E0AF01DA743BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number:          17F4
Signing time:             Mon 09 Feb 2026 06:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:46 +0000
Files and hashes:         1: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (hash: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw=)
                          2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: 64WKGoF5n//GAY3/m5OGJMtUtpLlvV9fZ1zcNClTPTk=)
                          3: jCfveam_XFqY1WaoDM8mc53l0-A.roa (hash: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:f8:41:12:b1:6e:d1:83:2e:0a:f0:1d:a7:43:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
        Validity
            Not Before: Feb  9 06:00:46 2026 GMT
            Not After : Feb 10 06:00:46 2026 GMT
        Subject: CN=f921af7a4599dab568392b3fa5a8b95018b3e99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:40:70:a7:de:68:4f:a6:29:ae:f7:b8:dd:
                    d2:a7:ba:cd:ad:41:cd:4a:14:63:99:99:01:52:35:
                    34:bd:e6:b5:aa:3f:80:1e:d4:7d:bd:5c:36:0e:47:
                    8e:ee:ab:b0:55:c9:8c:40:fc:19:ec:13:f3:f7:f6:
                    4e:4c:87:eb:e2:48:e8:b9:c8:f0:4c:29:9e:f5:fd:
                    84:72:61:f1:2c:b2:57:fe:e6:cf:af:ca:b8:00:94:
                    77:93:86:79:ed:38:8b:fc:c4:53:68:40:7a:80:8b:
                    d9:74:18:6f:4a:a9:bd:06:a3:b8:f5:c4:6e:a8:33:
                    07:ff:fd:28:44:37:8b:34:a7:b2:0c:cb:35:cb:c1:
                    2e:3e:ce:06:c4:81:a2:b2:9c:79:d8:59:f9:db:84:
                    48:ad:0d:60:61:03:a0:b8:8d:05:4b:a0:ab:62:63:
                    59:8d:58:37:64:e0:d7:34:ef:6d:e6:0b:d6:3d:49:
                    04:fc:f6:9c:42:20:50:3d:c2:8b:77:97:21:fa:9c:
                    2b:cd:5a:eb:e9:03:8c:6e:5b:70:ac:f6:4c:17:6c:
                    02:f9:f0:11:be:63:95:24:24:65:18:10:a5:f3:a9:
                    2c:b1:68:cc:7d:41:d9:6f:da:04:ac:b7:c3:d0:ea:
                    ac:f0:63:2d:6f:64:12:35:83:b8:9f:77:7d:4d:ae:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:AF:7A:45:99:DA:B5:68:39:2B:3F:A5:A8:B9:50:18:B3:E9:9F
            X509v3 Authority Key Identifier:
                keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0b:08:83:d0:0f:8c:77:b5:17:35:82:b1:bd:de:61:29:93:
         95:dd:9a:70:ce:3b:08:9f:59:38:5d:24:be:d9:d0:ab:ec:b6:
         51:04:e5:3b:22:bc:f3:5a:0c:05:97:79:34:ec:e3:86:00:62:
         a1:c1:42:37:55:fa:39:9e:74:73:2e:83:68:d1:01:06:15:42:
         d0:1b:be:3d:31:e6:6a:13:d3:97:7c:e9:6c:3e:2e:37:f6:27:
         b0:c4:dc:e1:bc:b7:f3:51:e1:f7:d8:5b:12:ad:76:5f:5d:7b:
         e3:40:c1:20:5a:1f:4c:3d:1f:1a:0f:42:89:fd:8b:e4:dc:30:
         d2:02:a0:46:46:0d:39:f1:c1:5e:bb:07:64:46:4f:38:61:ea:
         71:78:a1:e7:7d:bc:90:2d:c3:17:28:99:d5:b2:4b:c9:17:87:
         8c:2a:8a:18:e4:06:41:8f:0f:72:4e:c2:a6:29:de:7d:4e:96:
         e7:e3:20:ec:44:2a:a8:8b:bc:ae:4d:41:8c:9b:e6:83:ff:ac:
         f5:0b:82:ea:58:1c:4a:be:f5:34:4b:f5:fc:58:eb:10:ca:bc:
         a6:2b:55:9a:60:b5:56:3c:6c:26:a2:f0:da:fc:25:5e:3c:d1:
         ef:f2:32:b7:05:be:03:9d:a0:2c:34:97:b6:50:dd:1d:df:6d:
         08:a5:dc:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/PhBErFu0YMuCvAdp0O8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1
ZjhjMzMwHhcNMjYwMjA5MDYwMDQ2WhcNMjYwMjEwMDYwMDQ2WjAzMTEwLwYDVQQD
EyhmOTIxYWY3YTQ1OTlkYWI1NjgzOTJiM2ZhNWE4Yjk1MDE4YjNlOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM1AcKfeaE+mKa73uN3Sp7rNrUHN
ShRjmZkBUjU0vea1qj+AHtR9vVw2DkeO7quwVcmMQPwZ7BPz9/ZOTIfr4kjoucjw
TCme9f2EcmHxLLJX/ubPr8q4AJR3k4Z57TiL/MRTaEB6gIvZdBhvSqm9BqO49cRu
qDMH//0oRDeLNKeyDMs1y8EuPs4GxIGispx52Fn524RIrQ1gYQOguI0FS6CrYmNZ
jVg3ZODXNO9t5gvWPUkE/PacQiBQPcKLd5ch+pwrzVrr6QOMbltwrPZMF2wC+fAR
vmOVJCRlGBCl86kssWjMfUHZb9oErLfD0Oqs8GMtb2QSNYO4n3d9Ta4BbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkhr3pFmdq1aDkrP6WouVAYs+mfMB8GA1UdIwQY
MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt
YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0
LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagsIg9AP
jHe1FzWCsb3eYSmTld2acM47CJ9ZOF0kvtnQq+y2UQTlOyK881oMBZd5NOzjhgBi
ocFCN1X6OZ50cy6DaNEBBhVC0Bu+PTHmahPTl3zpbD4uN/YnsMTc4by381Hh99hb
Eq12X11740DBIFofTD0fGg9Cif2L5Nww0gKgRkYNOfHBXrsHZEZPOGHqcXih5328
kC3DFyiZ1bJLyReHjCqKGOQGQY8Pck7CpinefU6W5+Mg7EQqqIu8rk1BjJvmg/+s
9QuC6lgcSr71NEv1/FjrEMq8pitVmmC1VjxsJqLw2vwlXjzR7/IytwW+A52gLDSX
tlDdHd9tCKXc/w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:16 2026 by rpki-client