This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File:                     0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier:          zIWiJfyy4d5c9+ml5aJgDcCTc/lJXZDiOq7Rln4twXo=
Subject key identifier:   3E:87:F0:F0:95:30:70:FE:43:FC:60:15:68:FC:BF:7A:0D:1F:41:69
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer:       /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial:       019C43C6E359780171F9B3DDDEB1C9B953DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 19:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:33 +0000
Files and hashes:         1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: Oh7OjyDyqtClf+2Yj2v6bBB56Wvn2PYd062sl13RiFw=)
                          2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
                          3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:e3:59:78:01:71:f9:b3:dd:de:b1:c9:b9:53:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
        Validity
            Not Before: Feb  9 19:00:33 2026 GMT
            Not After : Feb 10 19:00:33 2026 GMT
        Subject: CN=3e87f0f0953070fe43fc601568fcbf7a0d1f4169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:e8:ca:70:d1:b0:bd:37:25:27:f4:4e:31:
                    5b:12:f8:98:dc:4e:56:3a:3f:b5:2f:07:19:93:26:
                    72:39:e7:70:26:4f:dd:73:28:bf:76:70:a9:10:54:
                    e6:ab:61:e7:c0:b5:78:9f:ae:8a:f2:01:36:c8:04:
                    03:89:8a:71:b6:48:36:9f:23:0f:91:09:6f:e4:3d:
                    04:96:c4:68:b7:ea:17:6e:a4:32:b7:1e:45:b6:55:
                    07:9c:a6:7c:57:71:88:93:03:0c:ad:16:83:fa:15:
                    9f:3e:a7:6c:3d:74:c9:3d:ea:bf:dd:d7:50:87:6d:
                    6b:51:88:6f:9d:d6:99:d5:d2:61:be:75:07:d4:4a:
                    4f:9f:8a:9b:b8:e8:e6:57:64:ee:78:96:c6:94:7c:
                    13:ec:33:c4:bb:48:40:e2:b3:9b:67:93:dc:b4:c0:
                    93:c8:8f:ac:f4:9a:f5:2b:bc:4a:b0:c5:8e:bd:20:
                    13:69:eb:9d:d0:3b:37:53:c4:5d:fa:a4:0a:09:0c:
                    5b:02:9d:c8:5d:fd:7d:12:6c:09:14:87:95:68:d3:
                    66:b0:ce:49:7c:43:77:22:21:41:7e:1b:bf:2f:c6:
                    d4:38:3b:9b:49:e1:c1:07:9a:e6:3c:37:7b:1c:d5:
                    e9:51:3e:57:fb:0a:9c:6a:ad:93:a7:f5:f5:46:60:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:87:F0:F0:95:30:70:FE:43:FC:60:15:68:FC:BF:7A:0D:1F:41:69
            X509v3 Authority Key Identifier:
                keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:79:f7:75:46:53:08:b1:06:1f:7e:22:11:c2:6d:ce:1d:e9:
         2d:75:69:47:71:5d:5c:49:a1:03:72:c0:52:54:26:81:c6:1a:
         e7:22:05:40:d3:7d:9e:57:f6:37:32:6f:b0:e7:91:b7:bb:9e:
         be:13:2e:04:05:85:80:74:bb:7f:1f:e9:ec:4b:4b:27:5c:54:
         ff:9f:53:50:f6:8c:25:db:47:36:2c:13:0f:6a:9f:79:27:10:
         1d:d5:2b:34:cb:e9:3f:95:20:06:52:f0:73:6f:8b:59:85:d7:
         d2:ff:f5:6e:31:eb:cb:49:08:46:bc:fb:60:57:84:bc:ee:70:
         bc:c7:09:d5:b5:23:a2:d4:f8:03:23:e0:06:ba:c8:ea:6a:4a:
         88:9c:ca:66:a7:da:98:dc:a5:2b:ca:53:a6:c3:4f:01:df:c7:
         39:fc:b3:54:01:d7:4d:a1:e4:ff:22:68:d7:3d:20:39:a8:13:
         94:9c:18:45:12:f5:13:f5:20:9a:7d:5a:2c:21:7c:07:75:c7:
         31:7e:7f:07:e3:11:24:7c:44:76:3c:07:3d:cd:b2:5b:53:66:
         0c:3c:aa:59:51:3d:84:a5:4b:4a:21:e2:ec:64:08:43:30:68:
         c1:88:24:c6:a5:83:9a:22:5d:34:15:82:f6:aa:09:78:98:ba:
         26:30:06:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxuNZeAFx+bPd3rHJuVPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjFjODg0MmU3Y2Y4OTFiMjM0ZDNhMWUwZTJlMGVmNzNl
ODQyYWEwHhcNMjYwMjA5MTkwMDMzWhcNMjYwMjEwMTkwMDMzWjAzMTEwLwYDVQQD
EygzZTg3ZjBmMDk1MzA3MGZlNDNmYzYwMTU2OGZjYmY3YTBkMWY0MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwPoynDRsL03JSf0TjFbEviY3E5W
Oj+1LwcZkyZyOedwJk/dcyi/dnCpEFTmq2HnwLV4n66K8gE2yAQDiYpxtkg2nyMP
kQlv5D0ElsRot+oXbqQytx5FtlUHnKZ8V3GIkwMMrRaD+hWfPqdsPXTJPeq/3ddQ
h21rUYhvndaZ1dJhvnUH1EpPn4qbuOjmV2TueJbGlHwT7DPEu0hA4rObZ5PctMCT
yI+s9Jr1K7xKsMWOvSATaeud0Ds3U8Rd+qQKCQxbAp3IXf19EmwJFIeVaNNmsM5J
fEN3IiFBfhu/L8bUODubSeHBB5rmPDd7HNXpUT5X+wqcaq2Tp/X1RmBULQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6H8PCVMHD+Q/xgFWj8v3oNH0FpMB8GA1UdIwQY
MBaAFNLxyIQufPiRsjTToeDi4O9z6EKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOTlhZTctYjY3MS00MGI5LWJiMWUt
YTE5NDQ0ZjdhMzM3LzEvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOTlhZTctYjY3MS00MGI5LWJiMWUtYTE5NDQ0ZjdhMzM3
LzEvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnn3dUZT
CLEGH34iEcJtzh3pLXVpR3FdXEmhA3LAUlQmgcYa5yIFQNN9nlf2NzJvsOeRt7ue
vhMuBAWFgHS7fx/p7EtLJ1xU/59TUPaMJdtHNiwTD2qfeScQHdUrNMvpP5UgBlLw
c2+LWYXX0v/1bjHry0kIRrz7YFeEvO5wvMcJ1bUjotT4AyPgBrrI6mpKiJzKZqfa
mNylK8pTpsNPAd/HOfyzVAHXTaHk/yJo1z0gOagTlJwYRRL1E/Ugmn1aLCF8B3XH
MX5/B+MRJHxEdjwHPc2yW1NmDDyqWVE9hKVLSiHi7GQIQzBowYgkxqWDmiJdNBWC
9qoJeJi6JjAGBQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:51 2026 by rpki-client