This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
File:                     1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json)
Hash identifier:          WILJadpydJmboJo4ZXXc2ZV5rERsedkQ3xU3pBT8wZw=
Subject key identifier:   8C:8E:8B:EF:70:78:83:7D:6D:A8:9C:B5:D3:40:96:34:01:29:A5:D0
Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7
Certificate issuer:       /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
Certificate serial:       019C43FD8E3F7516486351286C6FDEDFC1C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
Manifest number:          0CDB
Signing time:             Mon 09 Feb 2026 20:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:16 +0000
Files and hashes:         1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: LSYRHxM89OUxUXlaSFnkOepj9FSIUQiIYtDJhOmxh8Q=)
                          2: 28NIcQsoO9aYUkqz8eNuokXmz7k.roa (hash: Maz19xfHOeRc2yxXkK1eH+j110RWG6meSjGWmHuiuf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:8e:3f:75:16:48:63:51:28:6c:6f:de:df:c1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
        Validity
            Not Before: Feb  9 20:00:16 2026 GMT
            Not After : Feb 10 20:00:16 2026 GMT
        Subject: CN=8c8e8bef7078837d6da89cb5d34096340129a5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:f8:87:30:b9:23:23:b3:3f:b2:8e:d0:f7:
                    fe:5b:1d:07:86:44:eb:66:5f:ed:d6:a9:26:18:b7:
                    15:65:6f:eb:6b:8e:a8:e8:ec:83:f6:96:b4:5c:af:
                    28:7d:12:51:f4:90:20:63:60:7a:0f:7d:0c:5a:84:
                    82:a8:23:4b:d1:90:b1:a2:a9:bd:cd:68:6e:49:f7:
                    35:3c:1d:e4:f8:bd:1a:2e:ce:c2:ac:56:5a:87:49:
                    d5:56:ef:45:6f:bd:88:22:d2:5a:5a:74:2f:dc:bf:
                    ab:91:1f:f2:9f:9c:08:54:7c:fc:c9:e1:29:1e:78:
                    8f:43:6e:b8:62:ff:ef:f8:6d:87:7e:22:42:1c:0f:
                    08:a5:d3:07:4a:57:e7:05:22:4b:9f:b0:b4:7e:50:
                    d7:ee:4c:94:86:54:b2:cd:8d:ae:71:57:94:7f:a0:
                    20:fe:a8:5a:f4:91:09:b1:f7:0d:a7:49:71:ba:9c:
                    4e:b8:a5:a4:1c:c5:3a:d3:89:94:45:08:2a:5d:96:
                    2e:eb:11:75:c5:4e:17:be:5d:2b:0a:3a:d5:bd:7b:
                    65:80:03:4f:14:0b:eb:ba:98:c9:27:f2:a1:6a:f7:
                    fc:2a:36:0f:e0:c2:d4:6d:af:5d:f0:c9:ab:ba:b2:
                    1c:34:ce:1d:15:6c:b2:f6:b5:40:6d:4e:76:17:36:
                    fc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8E:8B:EF:70:78:83:7D:6D:A8:9C:B5:D3:40:96:34:01:29:A5:D0
            X509v3 Authority Key Identifier:
                keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:81:d8:0f:1f:ce:74:ad:fc:6b:7b:aa:54:bc:17:8a:a1:bb:
         2a:47:30:28:f9:03:41:99:f7:d5:14:b6:f1:03:9b:be:68:c0:
         cb:da:22:82:64:5b:fd:15:a1:ba:4d:13:00:23:6b:06:7d:34:
         6c:87:1f:d3:3c:86:e1:42:19:8d:b8:16:60:c3:90:63:79:a6:
         cb:51:fd:f3:1b:ec:46:8b:a3:e3:90:6c:64:78:e1:7c:21:0d:
         ef:51:26:70:31:5f:1b:ab:f3:58:da:fa:c1:24:63:8b:8e:0a:
         c5:d8:b2:e8:1e:6a:4f:4e:b8:f3:d7:dd:94:34:8c:69:eb:41:
         d0:17:98:73:56:8f:f0:d0:cd:e5:28:0d:d6:cd:cb:10:7b:d5:
         fa:ea:af:2d:cc:45:7b:8d:e2:65:cb:cb:73:32:f1:a3:04:a8:
         52:b4:a9:e4:65:4a:cf:af:8d:98:9c:cb:35:0a:1e:09:75:c3:
         81:1c:63:89:05:37:56:1c:37:e3:8f:29:82:c7:2b:2b:64:c3:
         cc:c0:3b:5d:22:cf:77:3a:26:a6:4b:45:48:0f:c9:52:d0:1a:
         a6:27:1e:26:f0:21:49:2f:6c:e1:c2:17:b1:c1:2d:20:64:ef:
         d1:20:d4:1d:a2:6d:45:d2:26:71:38:50:41:f1:aa:1f:b2:a8:
         b0:51:a9:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/Y4/dRZIY1EobG/e38HEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NGJjMGU4M2U4MWY1N2ZiNDg5NDA0MWRjYTc2Yzc3ZDMz
ZjAyZTcwHhcNMjYwMjA5MjAwMDE2WhcNMjYwMjEwMjAwMDE2WjAzMTEwLwYDVQQD
Eyg4YzhlOGJlZjcwNzg4MzdkNmRhODljYjVkMzQwOTYzNDAxMjlhNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LX4hzC5IyOzP7KO0Pf+Wx0HhkTr
Zl/t1qkmGLcVZW/ra46o6OyD9pa0XK8ofRJR9JAgY2B6D30MWoSCqCNL0ZCxoqm9
zWhuSfc1PB3k+L0aLs7CrFZah0nVVu9Fb72IItJaWnQv3L+rkR/yn5wIVHz8yeEp
HniPQ264Yv/v+G2HfiJCHA8IpdMHSlfnBSJLn7C0flDX7kyUhlSyzY2ucVeUf6Ag
/qha9JEJsfcNp0lxupxOuKWkHMU604mURQgqXZYu6xF1xU4Xvl0rCjrVvXtlgANP
FAvrupjJJ/Khavf8KjYP4MLUba9d8MmrurIcNM4dFWyy9rVAbU52Fzb8KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyOi+9weIN9baictdNAljQBKaXQMB8GA1UdIwQY
MBaAFNRLwOg+gfV/tIlAQdynbHfTPwLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgt
ZjJhZjgwMDFhYzc4LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgtZjJhZjgwMDFhYzc4
LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz4HYDx/O
dK38a3uqVLwXiqG7KkcwKPkDQZn31RS28QObvmjAy9oigmRb/RWhuk0TACNrBn00
bIcf0zyG4UIZjbgWYMOQY3mmy1H98xvsRouj45BsZHjhfCEN71EmcDFfG6vzWNr6
wSRji44Kxdiy6B5qT06489fdlDSMaetB0BeYc1aP8NDN5SgN1s3LEHvV+uqvLcxF
e43iZcvLczLxowSoUrSp5GVKz6+NmJzLNQoeCXXDgRxjiQU3Vhw3448pgscrK2TD
zMA7XSLPdzompktFSA/JUtAapiceJvAhSS9s4cIXscEtIGTv0SDUHaJtRdImcThQ
QfGqH7KosFGpjQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:41 2026 by rpki-client