This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File:                     SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier:          22oRJU1ZHY4T6WzuiXfkjObqy6NTCqIZfYrEKrnINVk=
Subject key identifier:   92:C5:1D:CE:D6:5B:68:CC:25:63:D1:DB:5F:53:F1:25:68:BC:D0:5C
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer:       /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial:       019C42B426B793F313CA361000760F4B668D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number:          0DEC
Signing time:             Mon 09 Feb 2026 14:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:28 +0000
Files and hashes:         1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: M1+cUI6fZI3OQ46XDtFRaQUfto+ME5oLCbbte9e51N8=)
                          2: Wvn-6bOtVas0qXKxXybSRbQtZBc.roa (hash: 1X1eFGWJ8hZe2T0rJSVL9R4hPe90VqVV+Y7boPOk/og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:26:b7:93:f3:13:ca:36:10:00:76:0f:4b:66:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
        Validity
            Not Before: Feb  9 14:00:28 2026 GMT
            Not After : Feb 10 14:00:28 2026 GMT
        Subject: CN=92c51dced65b68cc2563d1db5f53f12568bcd05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:a3:2e:bb:a6:47:f0:d7:10:37:1d:ec:73:
                    68:68:1f:08:6b:8c:2a:d5:c2:4d:32:3a:0e:a6:23:
                    f7:ae:9b:df:a9:f5:86:d6:ab:92:79:ff:ef:0b:65:
                    b6:11:82:08:37:02:3c:b2:72:6b:62:33:7a:67:ae:
                    14:6c:51:c3:18:82:93:06:73:13:10:7b:ee:42:ca:
                    27:25:bb:cd:0f:2d:ea:cf:f4:78:2c:34:9f:74:c3:
                    48:c0:f5:fd:20:13:5b:70:16:03:6a:b8:59:81:28:
                    1a:f8:c3:51:75:a5:81:57:b0:6b:59:1d:35:03:6a:
                    fb:7c:b1:eb:50:ef:af:21:4a:d7:46:5f:4d:5a:a8:
                    bb:09:46:eb:63:e4:42:b8:f4:c1:b1:da:8c:17:86:
                    a2:8a:44:61:28:3b:57:c9:7a:bb:e9:ee:4c:f1:19:
                    6b:37:83:60:63:4a:7d:5e:7b:57:de:4e:17:81:5f:
                    db:34:3b:8f:6d:a6:76:1f:b3:6b:1a:9c:06:f8:9e:
                    1b:2b:97:6a:b7:d2:ea:16:40:57:81:ea:c4:bf:13:
                    54:90:f8:3e:31:7c:c1:8e:98:74:91:13:f6:a7:ef:
                    83:e9:44:4c:60:c2:94:30:91:16:64:19:52:af:fc:
                    42:b9:e7:4c:99:0b:91:86:f7:5d:6e:b5:55:59:01:
                    e3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C5:1D:CE:D6:5B:68:CC:25:63:D1:DB:5F:53:F1:25:68:BC:D0:5C
            X509v3 Authority Key Identifier:
                keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:42:60:37:f8:2b:e2:9a:50:d4:1d:d6:9c:14:b2:a4:c6:2b:
         ec:10:5f:e7:8f:12:9e:c2:6d:15:2f:bb:90:a4:aa:a0:24:e4:
         34:3c:a1:fa:85:12:b3:32:50:e5:a0:20:52:46:72:86:34:b5:
         15:d1:68:30:73:cd:95:2a:9a:ce:cb:04:c8:0e:51:92:aa:e1:
         24:1e:d2:85:e3:48:7f:fc:be:ae:bc:62:d2:3e:2f:50:87:77:
         c1:aa:ab:33:a4:8e:86:52:23:70:92:25:5e:90:fc:73:04:4b:
         86:58:a4:b4:bf:1a:1e:8b:80:a5:c6:05:6f:ea:b6:84:83:f0:
         c4:07:3c:f7:d3:c0:e3:cd:49:99:9d:fc:dc:26:a4:e6:e8:e8:
         f4:b7:75:1d:42:39:2d:74:f6:e8:3d:e3:e7:54:0b:c1:ce:23:
         d8:a4:b6:ae:ca:44:65:9f:51:a1:26:61:f1:47:af:97:dd:20:
         00:f1:b8:67:af:6c:e8:98:d7:64:a3:5a:5b:1d:05:88:4c:ce:
         0a:d2:9d:8d:5b:5c:e4:3a:5a:46:34:b4:5a:db:cb:d2:3a:b3:
         01:27:07:24:52:67:b3:81:e1:dc:37:90:1e:3c:9a:87:41:25:
         2f:0a:22:bd:a3:5e:39:4a:3b:ae:96:4a:d2:00:b8:92:58:7b:
         0d:1c:20:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtCa3k/MTyjYQAHYPS2aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDE1YTEwZTc0NzEwOTM2Y2I4YzM3YjdjNmY1ZjFmYjM4
YzEyMWYwHhcNMjYwMjA5MTQwMDI4WhcNMjYwMjEwMTQwMDI4WjAzMTEwLwYDVQQD
Eyg5MmM1MWRjZWQ2NWI2OGNjMjU2M2QxZGI1ZjUzZjEyNTY4YmNkMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgujLrumR/DXEDcd7HNoaB8Ia4wq
1cJNMjoOpiP3rpvfqfWG1quSef/vC2W2EYIINwI8snJrYjN6Z64UbFHDGIKTBnMT
EHvuQsonJbvNDy3qz/R4LDSfdMNIwPX9IBNbcBYDarhZgSga+MNRdaWBV7BrWR01
A2r7fLHrUO+vIUrXRl9NWqi7CUbrY+RCuPTBsdqMF4aiikRhKDtXyXq76e5M8Rlr
N4NgY0p9XntX3k4XgV/bNDuPbaZ2H7NrGpwG+J4bK5dqt9LqFkBXgerEvxNUkPg+
MXzBjph0kRP2p++D6URMYMKUMJEWZBlSr/xCuedMmQuRhvddbrVVWQHjzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLFHc7WW2jMJWPR219T8SVovNBcMB8GA1UdIwQY
MBaAFEnRWhDnRxCTbLjDe3xvXx+zjBIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTQzMjUtMjE5MS00MWM2LWIyZWQt
ZTIyOWE0MmM0MDg1LzEvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MTQzMjUtMjE5MS00MWM2LWIyZWQtZTIyOWE0MmM0MDg1
LzEvU2RGYUVPZEhFSk5zdU1ON2ZHOWZIN09NRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEJgN/gr
4ppQ1B3WnBSypMYr7BBf548SnsJtFS+7kKSqoCTkNDyh+oUSszJQ5aAgUkZyhjS1
FdFoMHPNlSqazssEyA5RkqrhJB7SheNIf/y+rrxi0j4vUId3waqrM6SOhlIjcJIl
XpD8cwRLhliktL8aHouApcYFb+q2hIPwxAc899PA481JmZ383Cak5ujo9Ld1HUI5
LXT26D3j51QLwc4j2KS2rspEZZ9RoSZh8Uevl90gAPG4Z69s6JjXZKNaWx0FiEzO
CtKdjVtc5DpaRjS0WtvL0jqzAScHJFJns4Hh3DeQHjyah0ElLwoivaNeOUo7rpZK
0gC4klh7DRwgJg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:50 2026 by rpki-client