This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          0JZf89B9nYeWoBDB/apWMC2+PM8B4Oie+TL8LUa6mCE=
Subject key identifier:   5A:3A:3D:57:8F:65:A4:41:14:DC:9C:5D:E1:C1:CC:43:25:60:CF:F3
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       019C432280059FAC318E2E25ED1CF8981C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          1208
Signing time:             Mon 09 Feb 2026 16:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:00 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: Vw1KkYi6yz6Pm/KzK/cE8yBPwByOsZ0GiL72dzGZi1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:80:05:9f:ac:31:8e:2e:25:ed:1c:f8:98:1c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: Feb  9 16:01:00 2026 GMT
            Not After : Feb 10 16:01:00 2026 GMT
        Subject: CN=5a3a3d578f65a44114dc9c5de1c1cc432560cff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:aa:ee:88:f2:f3:29:78:18:88:0a:98:67:
                    9d:fe:04:23:09:2c:05:1d:c5:39:bf:db:86:1f:4b:
                    6b:80:57:90:da:df:ce:2d:9f:b7:79:d1:01:45:6c:
                    a1:e4:2d:78:e1:f4:30:dd:e3:20:77:5a:98:ba:3e:
                    03:fd:8c:04:e0:f5:c2:19:8e:8d:fc:fe:e0:af:b9:
                    54:49:e8:e7:f1:2a:43:07:f8:2d:cc:44:88:2a:34:
                    a4:95:64:c2:85:c0:c9:11:25:03:2b:75:dd:2f:97:
                    fd:6e:09:18:90:bd:01:18:4e:83:ec:7b:48:3e:1e:
                    25:ee:ce:d2:10:59:3c:0f:9d:f3:15:16:51:de:20:
                    81:f3:fd:a4:e3:bc:a6:06:02:3e:56:a8:7c:69:95:
                    3a:df:bf:83:3b:77:b8:80:f7:ee:78:10:36:e8:b8:
                    1a:a5:75:37:96:fc:79:93:6b:22:05:c9:54:24:14:
                    c0:bf:7c:a2:fd:8c:8d:93:b9:eb:63:45:4c:de:5a:
                    96:53:40:ee:eb:b4:84:0a:08:6a:80:bc:fc:86:9a:
                    e5:8b:fa:f5:a5:1b:1b:c1:20:14:f7:f7:15:2d:09:
                    b3:76:5c:de:da:50:db:00:f4:63:82:6d:61:a7:55:
                    24:bd:55:3a:b6:89:65:3e:af:c1:44:a7:7b:df:a7:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:3D:57:8F:65:A4:41:14:DC:9C:5D:E1:C1:CC:43:25:60:CF:F3
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fe:99:f9:90:a6:84:d4:8b:d2:6a:70:08:ac:97:be:7b:1f:
         a6:04:4b:04:ed:64:77:09:cb:84:a3:ea:02:72:b2:e5:c9:99:
         33:de:5c:c6:d0:fd:29:86:c7:7d:90:3d:80:f2:cb:65:a3:af:
         d0:84:25:8f:54:de:3c:a9:a0:b3:a7:5e:97:ec:f0:6c:85:43:
         b4:96:07:c0:23:ff:77:0c:ec:20:bf:1b:a1:12:b0:df:13:9b:
         86:1a:30:09:2f:a1:18:11:7f:b6:96:94:5a:bb:4e:3e:1e:9e:
         d6:bc:2a:f6:7e:b3:e3:67:4f:23:f7:81:e8:19:23:f4:9c:ba:
         e8:a9:46:19:90:58:e0:c9:bc:78:98:32:c2:d6:4b:7e:e5:b2:
         ec:10:66:0a:d2:57:58:cd:53:22:08:15:96:b7:48:3d:db:07:
         6d:c2:bb:5e:16:74:00:05:df:45:62:b9:69:1b:cb:ea:59:51:
         d4:f7:52:d9:27:80:21:33:48:99:e8:dd:a1:7a:b6:4a:e0:44:
         c0:5b:61:ad:ea:db:16:4c:a8:f1:77:c6:6e:95:bc:94:ba:51:
         b0:d1:13:72:79:1e:65:f0:33:9b:86:e2:ed:bb:6c:67:6e:19:
         8f:3a:ba:16:33:79:41:cd:fd:c7:af:27:79:2a:4d:99:fb:53:
         17:3c:b3:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIoAFn6wxji4l7Rz4mBxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMGJlOTEzMjEwNzQ0MzRjOWU4MjBkYjY2MWM5MWNhNjJj
Y2IwZmQwHhcNMjYwMjA5MTYwMTAwWhcNMjYwMjEwMTYwMTAwWjAzMTEwLwYDVQQD
Eyg1YTNhM2Q1NzhmNjVhNDQxMTRkYzljNWRlMWMxY2M0MzI1NjBjZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP2q7ojy8yl4GIgKmGed/gQjCSwF
HcU5v9uGH0trgFeQ2t/OLZ+3edEBRWyh5C144fQw3eMgd1qYuj4D/YwE4PXCGY6N
/P7gr7lUSejn8SpDB/gtzESIKjSklWTChcDJESUDK3XdL5f9bgkYkL0BGE6D7HtI
Ph4l7s7SEFk8D53zFRZR3iCB8/2k47ymBgI+Vqh8aZU637+DO3e4gPfueBA26Lga
pXU3lvx5k2siBclUJBTAv3yi/YyNk7nrY0VM3lqWU0Du67SECghqgLz8hprli/r1
pRsbwSAU9/cVLQmzdlze2lDbAPRjgm1hp1UkvVU6tollPq/BRKd736cyTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo6PVePZaRBFNycXeHBzEMlYM/zMB8GA1UdIwQY
MBaAFAML6RMhB0Q0yegg22YckcpizLD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUt
MmM0MGQ4MTFmZDRlLzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUtMmM0MGQ4MTFmZDRl
LzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtv6Z+ZCm
hNSL0mpwCKyXvnsfpgRLBO1kdwnLhKPqAnKy5cmZM95cxtD9KYbHfZA9gPLLZaOv
0IQlj1TePKmgs6del+zwbIVDtJYHwCP/dwzsIL8boRKw3xObhhowCS+hGBF/tpaU
WrtOPh6e1rwq9n6z42dPI/eB6Bkj9Jy66KlGGZBY4Mm8eJgywtZLfuWy7BBmCtJX
WM1TIggVlrdIPdsHbcK7XhZ0AAXfRWK5aRvL6llR1PdS2SeAITNImejdoXq2SuBE
wFthrerbFkyo8XfGbpW8lLpRsNETcnkeZfAzm4bi7btsZ24Zjzq6FjN5Qc39x68n
eSpNmftTFzyzYQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:20 2026 by rpki-client