This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
File:                     _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json)
Hash identifier:          14d4Wrec/7/Wy4TnXHnSUQ7PqVvALvKlTkP5STbQNoM=
Subject key identifier:   DE:1B:BB:07:90:4C:6B:59:E9:BE:81:84:DD:E3:EC:B6:BE:2E:CE:91
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Certificate issuer:       /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial:       019C41D873CDA21F4079D73F09F02799C30F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 10:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:30 +0000
Files and hashes:         1: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: Pv5xoqf8sQkXtsRfTHmM3sipwKXnguNwFkqqq1qUrnI=)
                          2: ybXPtjtytnp4awj6RoDLh-SgWqk.roa (hash: yT3G41aEzQUb5MKxunseT7S7bGL9k6nsWABzcpJ77H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:73:cd:a2:1f:40:79:d7:3f:09:f0:27:99:c3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
        Validity
            Not Before: Feb  9 10:00:30 2026 GMT
            Not After : Feb 10 10:00:30 2026 GMT
        Subject: CN=de1bbb07904c6b59e9be8184dde3ecb6be2ece91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:20:66:83:c4:a2:ce:45:a8:12:ae:0a:76:
                    48:dd:0b:49:dc:26:2a:0c:82:30:7a:c6:08:b9:7c:
                    51:cb:2f:5e:03:09:cc:4c:e5:28:92:50:23:da:47:
                    c7:31:05:12:b6:8c:ab:a8:8f:aa:6f:b9:66:9b:fc:
                    34:66:de:70:57:c8:f2:ad:b7:7e:de:90:46:49:8a:
                    89:c2:90:b3:73:c2:50:4d:ca:5b:d8:f8:ba:46:cb:
                    a2:c0:c1:79:c3:0d:98:32:be:70:34:98:51:8d:e8:
                    4f:61:77:a7:1c:17:96:f8:95:8e:5d:12:40:bf:2c:
                    75:d1:0a:66:da:1d:db:c9:c4:c6:ad:34:74:f3:78:
                    a6:b8:a9:d8:55:0a:a9:46:43:b3:52:7a:71:b4:d9:
                    0e:6f:9a:aa:da:ee:bd:b7:29:c7:e0:19:f9:22:5b:
                    8a:3f:4a:00:3c:d4:93:f7:33:2c:38:cf:0e:cb:4f:
                    1e:01:fe:75:a2:e9:e1:63:df:61:d8:06:3e:b6:e8:
                    13:ff:1b:d0:83:22:f8:88:14:04:e2:19:97:7e:fa:
                    5f:a2:4b:f5:6b:67:7b:63:e2:56:54:66:0e:de:c6:
                    57:1d:9b:59:57:63:8a:4d:55:ca:7a:b8:87:51:3a:
                    b5:bc:07:56:85:f1:61:90:c4:d5:3d:bf:09:2e:36:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1B:BB:07:90:4C:6B:59:E9:BE:81:84:DD:E3:EC:B6:BE:2E:CE:91
            X509v3 Authority Key Identifier:
                keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f3:c1:08:69:59:84:62:fa:bf:5d:f7:e4:19:49:38:0c:b0:
         ab:93:fd:39:3a:57:b2:a3:af:7a:5b:49:76:2e:b5:b1:84:fc:
         8d:50:76:0c:0e:ee:24:0d:8e:77:2e:aa:6d:5e:a1:ad:f3:07:
         d6:a5:8c:31:2a:ed:da:23:57:73:1a:1a:20:dd:f1:24:87:a8:
         8e:79:1b:b6:72:d0:ee:82:20:31:fd:bd:eb:99:49:a5:64:64:
         bb:48:fb:40:60:b0:49:01:51:eb:1e:61:61:b6:09:21:e9:3c:
         21:13:33:1b:e9:c7:71:c7:92:ab:62:c3:56:a3:bc:ba:0d:ad:
         da:cc:9b:3b:1c:96:a5:ce:42:ed:4d:3d:7b:93:ca:fd:b3:4d:
         a7:60:e2:27:5e:28:91:be:ca:fd:dc:7a:2f:c4:7d:7b:8c:46:
         33:09:52:89:f2:27:e2:e0:2c:f2:80:bf:f2:35:6c:0c:5a:93:
         39:7f:62:d4:de:8e:e5:23:e5:5c:6e:d6:7b:45:05:dc:1b:8d:
         e6:f0:be:a1:bf:bf:14:e4:ce:43:b4:1f:11:c3:11:2d:26:0f:
         a3:30:ce:52:b4:8b:77:a8:c1:91:c6:a8:c7:24:a7:fd:ed:a2:
         1f:d9:89:1f:01:98:fa:21:d2:24:d8:36:af:fb:04:d4:1a:c4:
         fe:dc:f7:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2HPNoh9Aedc/CfAnmcMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMmE2MzQ3YjUzMWUzMGY1NTU1MWQwYjZlZGY2MGRjOGI4
MDhiOTEwHhcNMjYwMjA5MTAwMDMwWhcNMjYwMjEwMTAwMDMwWjAzMTEwLwYDVQQD
EyhkZTFiYmIwNzkwNGM2YjU5ZTliZTgxODRkZGUzZWNiNmJlMmVjZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHsgZoPEos5FqBKuCnZI3QtJ3CYq
DIIwesYIuXxRyy9eAwnMTOUoklAj2kfHMQUStoyrqI+qb7lmm/w0Zt5wV8jyrbd+
3pBGSYqJwpCzc8JQTcpb2Pi6RsuiwMF5ww2YMr5wNJhRjehPYXenHBeW+JWOXRJA
vyx10Qpm2h3bycTGrTR083imuKnYVQqpRkOzUnpxtNkOb5qq2u69tynH4Bn5IluK
P0oAPNST9zMsOM8Oy08eAf51ounhY99h2AY+tugT/xvQgyL4iBQE4hmXfvpfokv1
a2d7Y+JWVGYO3sZXHZtZV2OKTVXKeriHUTq1vAdWhfFhkMTVPb8JLjZW8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4buweQTGtZ6b6BhN3j7La+Ls6RMB8GA1UdIwQY
MBaAFPwqY0e1MeMPVVUdC27fYNyLgIuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zNTQ1ZTYtOGNkZS00NTMzLTk2MDUt
ZmFmMmI5ZjA0ZGVmLzEvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zNTQ1ZTYtOGNkZS00NTMzLTk2MDUtZmFmMmI5ZjA0ZGVm
LzEvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/PBCGlZ
hGL6v1335BlJOAywq5P9OTpXsqOveltJdi61sYT8jVB2DA7uJA2Ody6qbV6hrfMH
1qWMMSrt2iNXcxoaIN3xJIeojnkbtnLQ7oIgMf2965lJpWRku0j7QGCwSQFR6x5h
YbYJIek8IRMzG+nHcceSq2LDVqO8ug2t2sybOxyWpc5C7U09e5PK/bNNp2DiJ14o
kb7K/dx6L8R9e4xGMwlSifIn4uAs8oC/8jVsDFqTOX9i1N6O5SPlXG7We0UF3BuN
5vC+ob+/FOTOQ7QfEcMRLSYPozDOUrSLd6jBkcaoxySn/e2iH9mJHwGY+iHSJNg2
r/sE1BrE/tz3KQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:59 2026 by rpki-client