This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File:                     Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier:          jhAFzKNYRRYqBaCYpqb07IzZD+s3y+YpnSmE7JtHHQ0=
Subject key identifier:   4E:20:93:FE:98:E5:F2:AB:93:B7:57:47:BD:BD:01:E5:E7:EC:C6:5F
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer:       /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial:       019C41D8BC7BCE0CF6C5D0596247A3C3F378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 10:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:48 +0000
Files and hashes:         1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 3t7BFlz+tJR4gdH9NPsTgbzCCKNpCbME7x84EqkZGSI=)
                          2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
                          3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:bc:7b:ce:0c:f6:c5:d0:59:62:47:a3:c3:f3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
        Validity
            Not Before: Feb  9 10:00:48 2026 GMT
            Not After : Feb 10 10:00:48 2026 GMT
        Subject: CN=4e2093fe98e5f2ab93b75747bdbd01e5e7ecc65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:2b:05:55:c5:06:a3:7d:f0:76:fb:35:41:
                    c8:69:4a:2c:d4:72:f9:0c:95:2a:17:17:3b:5f:8b:
                    2e:3a:82:8f:09:e7:80:a6:01:f7:02:a6:fa:7e:26:
                    66:c0:05:52:14:0f:44:01:8d:65:a8:25:c1:6f:05:
                    e1:7f:82:33:31:41:f4:9b:03:6e:da:ab:d3:ae:92:
                    6d:c8:48:89:1e:54:06:12:b6:e6:e6:77:b7:1a:2a:
                    16:fe:7b:86:29:f3:d3:ba:8b:65:6b:0a:ac:11:e5:
                    82:75:aa:6e:5c:1c:ce:56:fc:98:35:c4:38:2b:ac:
                    95:94:06:e2:a9:03:3d:1b:d0:44:3d:55:6d:56:a5:
                    f7:11:e8:41:fe:12:e9:da:41:e5:91:39:c9:94:8c:
                    98:d4:0e:83:2f:eb:c1:13:38:f7:99:58:f9:44:aa:
                    72:39:eb:cf:e8:a4:81:76:aa:17:3d:a0:44:07:5d:
                    ff:9f:1c:bf:9f:32:19:03:fc:44:4e:3b:e3:15:66:
                    7b:e4:ef:84:bd:5e:73:61:e9:3a:87:fe:66:bf:c7:
                    3f:ba:19:a2:f6:99:b4:23:71:74:9d:ca:1a:78:d2:
                    62:b3:b4:3c:50:13:f6:bf:47:9c:de:4c:44:82:f8:
                    9a:94:f7:73:e5:4a:1f:9c:ab:66:0a:04:ee:f1:68:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:20:93:FE:98:E5:F2:AB:93:B7:57:47:BD:BD:01:E5:E7:EC:C6:5F
            X509v3 Authority Key Identifier:
                keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:54:37:6f:c4:24:b6:9b:96:f9:05:7d:ca:1a:e4:05:d0:a2:
         ad:56:0c:93:74:d0:3d:8f:fc:ab:13:83:7f:3a:93:f2:a9:87:
         50:63:a3:8c:ad:60:b8:41:07:fa:38:8a:ac:aa:0d:7f:9b:f3:
         84:c5:b8:71:38:6b:e9:d7:b4:f2:35:f7:b3:14:f0:0e:62:53:
         52:ba:ed:2f:df:d0:6d:94:0e:c6:db:1c:26:29:1e:89:bb:6c:
         9a:c9:c8:ed:e2:49:b5:45:53:85:36:48:f4:46:90:d7:24:f6:
         8a:d3:69:33:fa:bb:21:85:04:01:74:da:ae:4e:fc:0f:4a:25:
         6b:80:38:98:b2:fc:31:21:e0:13:96:40:ab:d9:45:ae:ef:a5:
         d2:7e:4e:48:a7:21:2c:c4:9a:40:e9:b2:4f:1a:c0:fe:27:d0:
         c0:23:ed:9a:8e:9b:99:71:6f:a7:7f:f3:6a:64:80:4b:f7:6e:
         36:b5:d8:5c:53:50:20:b8:aa:59:57:2d:44:b4:f6:a4:02:72:
         59:7d:03:ab:df:20:56:a3:50:88:3e:0b:e7:66:e2:71:b7:2e:
         76:1c:b2:9d:7e:00:b6:06:91:78:ab:a0:6a:e9:e2:d0:99:33:
         90:60:90:d7:47:89:ae:fe:09:66:e2:ae:a6:c2:af:dc:56:5c:
         eb:47:b4:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2Lx7zgz2xdBZYkejw/N4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZhNzdiM2NkNzgyOTMzZTVmMjU1NDQ1ZDQyOGFkZmJk
Y2EwZTEwHhcNMjYwMjA5MTAwMDQ4WhcNMjYwMjEwMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZTIwOTNmZTk4ZTVmMmFiOTNiNzU3NDdiZGJkMDFlNWU3ZWNjNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9orBVXFBqN98Hb7NUHIaUos1HL5
DJUqFxc7X4suOoKPCeeApgH3Aqb6fiZmwAVSFA9EAY1lqCXBbwXhf4IzMUH0mwNu
2qvTrpJtyEiJHlQGErbm5ne3GioW/nuGKfPTuotlawqsEeWCdapuXBzOVvyYNcQ4
K6yVlAbiqQM9G9BEPVVtVqX3EehB/hLp2kHlkTnJlIyY1A6DL+vBEzj3mVj5RKpy
OevP6KSBdqoXPaBEB13/nxy/nzIZA/xETjvjFWZ75O+EvV5zYek6h/5mv8c/uhmi
9pm0I3F0ncoaeNJis7Q8UBP2v0ec3kxEgvialPdz5UofnKtmCgTu8WgY1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4gk/6Y5fKrk7dXR729AeXn7MZfMB8GA1UdIwQY
MBaAFCG/p3s814KTPl8lVEXUKK373KDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYt
NTQ4NGMzOWIyZDRlLzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYtNTQ4NGMzOWIyZDRl
LzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVQ3b8Qk
tpuW+QV9yhrkBdCirVYMk3TQPY/8qxODfzqT8qmHUGOjjK1guEEH+jiKrKoNf5vz
hMW4cThr6de08jX3sxTwDmJTUrrtL9/QbZQOxtscJikeibtsmsnI7eJJtUVThTZI
9EaQ1yT2itNpM/q7IYUEAXTark78D0ola4A4mLL8MSHgE5ZAq9lFru+l0n5OSKch
LMSaQOmyTxrA/ifQwCPtmo6bmXFvp3/zamSAS/duNrXYXFNQILiqWVctRLT2pAJy
WX0Dq98gVqNQiD4L52bicbcudhyynX4AtgaReKugauni0JkzkGCQ10eJrv4JZuKu
psKv3FZc60e0xg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:33 2026 by rpki-client