This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File:                     u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier:          NrnTks5IcZPmOs/F0b70rY20ct707w6iHLEhU5P0RSU=
Subject key identifier:   E9:5C:F1:92:B4:D4:19:82:4C:7B:80:3C:95:DE:33:CD:DD:0A:4E:53
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer:       /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial:       019C4434AB2DD236F59DF7BF50907FD306EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number:          02B4
Signing time:             Mon 09 Feb 2026 21:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:28 +0000
Files and hashes:         1: nClTwpToiFqAscBy4IrBVIyla1o.roa (hash: wolg6ruFPU1FSLrTeE1keQYcUJk2DOWAN3fu7gn3ZgE=)
                          2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: 1yDGnoS/0b7H6fxtAfH1mlmjs9CeFjBVkI48KUEyHHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:ab:2d:d2:36:f5:9d:f7:bf:50:90:7f:d3:06:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
        Validity
            Not Before: Feb  9 21:00:28 2026 GMT
            Not After : Feb 10 21:00:28 2026 GMT
        Subject: CN=e95cf192b4d419824c7b803c95de33cddd0a4e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:69:d7:fa:9d:1e:4e:2e:93:e6:e3:83:ad:
                    61:25:20:c5:45:56:c2:27:ad:b6:60:c6:38:f1:6c:
                    6c:6f:00:72:56:46:d1:8b:a4:ab:25:5d:22:cb:c5:
                    37:53:6c:c8:24:35:e1:4e:82:fd:ab:ba:85:9d:5d:
                    60:23:1d:f5:67:d5:02:81:1f:45:bc:f4:ba:60:43:
                    14:ad:c6:84:e4:59:e3:6c:ba:57:23:e0:3c:7b:6c:
                    d0:ef:5c:c1:73:46:61:8a:b2:7d:fb:87:43:00:1b:
                    9a:97:69:dc:49:9f:0a:a3:ac:19:b4:cc:fc:39:5d:
                    aa:27:28:26:fb:b8:11:da:78:7f:86:2e:69:42:f2:
                    9b:01:19:1c:65:37:68:12:e4:67:7b:bd:c4:a2:fa:
                    c9:65:ec:b5:ef:8b:3e:31:ad:21:ee:5e:65:21:f1:
                    e4:52:12:a2:d6:cb:70:12:02:b2:4b:60:1c:22:a0:
                    a4:13:ea:04:d7:c8:b7:fa:45:ea:92:c2:fc:0e:16:
                    4c:8a:7f:be:6d:b5:fa:06:39:68:11:38:42:b4:1a:
                    72:f3:5a:50:c4:a1:c6:17:f6:6a:27:d7:a4:89:25:
                    ff:e5:8a:99:41:1a:94:73:d1:78:d6:55:0e:c8:b7:
                    ec:06:61:e5:99:e1:74:6a:87:d3:52:39:9c:85:ff:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5C:F1:92:B4:D4:19:82:4C:7B:80:3C:95:DE:33:CD:DD:0A:4E:53
            X509v3 Authority Key Identifier:
                keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:28:55:c3:8a:d7:f2:bc:ea:37:98:c7:04:7c:bc:50:0d:e3:
         41:16:6e:1c:f6:56:31:35:f9:23:18:d2:29:ed:c9:63:bc:31:
         50:c6:4f:51:b2:12:46:a6:db:80:5e:b4:6c:5b:23:bf:3b:fe:
         c9:4c:a5:54:4b:5c:8f:d0:c1:87:66:e5:25:40:b8:fc:52:77:
         33:e9:51:8d:2d:6f:67:c2:54:b3:60:21:d8:6b:93:83:8e:30:
         52:85:0d:81:5f:d4:a4:b4:de:fb:dc:b4:39:7e:31:89:5a:f3:
         f5:73:c6:33:31:c3:e0:a7:8f:36:57:ef:b2:44:66:a3:da:a3:
         d8:de:1b:f6:68:19:d0:ad:cf:b4:30:0f:21:2f:7c:d8:d4:d3:
         b7:66:b8:d8:a9:9c:41:99:20:57:c5:0f:64:92:ae:d2:ce:be:
         c1:3b:a4:1b:88:2c:2a:79:6a:24:e7:80:bf:e6:6f:6a:44:6b:
         32:7f:33:e2:24:1a:6b:9f:26:54:af:cf:4b:fc:9a:24:07:69:
         6f:5a:39:63:1d:e1:29:97:81:6c:20:d3:50:d8:3e:d3:c5:77:
         a4:56:93:1f:d8:26:5e:26:fd:54:f4:21:99:17:02:9a:c4:d4:
         40:83:66:7b:2a:b8:85:97:a8:c8:c4:c0:19:91:60:f4:f3:2c:
         b2:96:de:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENKst0jb1nfe/UJB/0wbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjhiMDY3NzlhODMwNjVkYmRjNTgwOGUxZTdmZmFmOWM3
ZDhkYTgwHhcNMjYwMjA5MjEwMDI4WhcNMjYwMjEwMjEwMDI4WjAzMTEwLwYDVQQD
EyhlOTVjZjE5MmI0ZDQxOTgyNGM3YjgwM2M5NWRlMzNjZGRkMGE0ZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42Np1/qdHk4uk+bjg61hJSDFRVbC
J622YMY48WxsbwByVkbRi6SrJV0iy8U3U2zIJDXhToL9q7qFnV1gIx31Z9UCgR9F
vPS6YEMUrcaE5FnjbLpXI+A8e2zQ71zBc0ZhirJ9+4dDABual2ncSZ8Ko6wZtMz8
OV2qJygm+7gR2nh/hi5pQvKbARkcZTdoEuRne73EovrJZey174s+Ma0h7l5lIfHk
UhKi1stwEgKyS2AcIqCkE+oE18i3+kXqksL8DhZMin++bbX6BjloEThCtBpy81pQ
xKHGF/ZqJ9ekiSX/5YqZQRqUc9F41lUOyLfsBmHlmeF0aofTUjmchf8RiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlc8ZK01BmCTHuAPJXeM83dCk5TMB8GA1UdIwQY
MBaAFLv4sGd5qDBl29xYCOHn/6+cfY2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9pd1ozbW9NR1hiM0ZnSTRlZl9yNXg5amFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82OWUxMDktMGUwMi00ZjNjLTk4MWYt
NTQ4ZDQ3YTQ2YWQ0LzEvdV9pd1ozbW9NR1hiM0ZnSTRlZl9yNXg5amFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82OWUxMDktMGUwMi00ZjNjLTk4MWYtNTQ4ZDQ3YTQ2YWQ0
LzEvdV9pd1ozbW9NR1hiM0ZnSTRlZl9yNXg5amFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYihVw4rX
8rzqN5jHBHy8UA3jQRZuHPZWMTX5IxjSKe3JY7wxUMZPUbISRqbbgF60bFsjvzv+
yUylVEtcj9DBh2blJUC4/FJ3M+lRjS1vZ8JUs2Ah2GuTg44wUoUNgV/UpLTe+9y0
OX4xiVrz9XPGMzHD4KePNlfvskRmo9qj2N4b9mgZ0K3PtDAPIS982NTTt2a42Kmc
QZkgV8UPZJKu0s6+wTukG4gsKnlqJOeAv+ZvakRrMn8z4iQaa58mVK/PS/yaJAdp
b1o5Yx3hKZeBbCDTUNg+08V3pFaTH9gmXib9VPQhmRcCmsTUQINmeyq4hZeoyMTA
GZFg9PMsspbeZg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:22:20 2026 by rpki-client