This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          O7guhjElyrgJLBQyj/EDymbR5PmIbbBoqpvcmC8xM3Y=
Subject key identifier:   C3:84:9D:4F:FD:C8:9D:7C:C9:CC:80:8D:FC:E8:31:77:51:B9:07:D3
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       019C41A27C01B36389A076428B6757E7ED9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 09:01:33 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:33 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:33 +0000
Files and hashes:         1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: MHXQ58SjoqDY+GpPWjk8OaZIGbrsxEmEYRx7Z7pN6VQ=)
                          2: Lacc-4_5zErIhaLObDnS5evETUo.roa (hash: E1jD2Nnvra6sUfCdyofjtOGms4KS2srmXM/6u5x0Za4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:7c:01:b3:63:89:a0:76:42:8b:67:57:e7:ed:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: Feb  9 09:01:33 2026 GMT
            Not After : Feb 10 09:01:33 2026 GMT
        Subject: CN=c3849d4ffdc89d7cc9cc808dfce8317751b907d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c5:85:9c:db:d2:ce:86:6f:43:d3:6d:8e:46:
                    ab:fa:90:1a:28:01:8a:53:cc:8b:cc:8f:12:33:33:
                    ab:b3:ca:5f:79:e2:fe:5f:51:4d:75:3d:11:cb:4f:
                    1f:eb:42:e0:95:d5:86:0e:5a:01:18:2a:4c:d2:26:
                    a5:3d:48:9a:df:2b:c1:d6:eb:a8:f3:6b:c7:94:a7:
                    17:9d:d6:da:f8:e8:ac:e6:17:0f:83:0e:fa:27:b6:
                    33:77:a4:57:9d:c6:37:83:56:47:4c:03:63:7a:74:
                    89:f5:ee:26:47:5f:8d:49:6e:b5:28:53:5c:4e:3a:
                    93:43:ac:99:b3:e8:36:55:bc:bd:74:d2:cd:8f:84:
                    51:a1:0e:11:23:32:29:2b:2f:ed:c5:27:bb:37:b4:
                    8c:f5:55:80:d4:de:ca:64:7e:03:df:74:30:5e:c1:
                    8e:f7:b6:c3:8a:2b:66:f9:d4:c0:c5:99:a2:3b:7c:
                    95:b9:36:30:42:14:c4:1b:5b:b5:6d:99:bc:3a:7f:
                    c7:8f:8a:9e:78:52:2a:0d:4a:f1:73:a6:6c:cb:c3:
                    34:6b:4e:64:8a:dd:e6:01:5a:e1:5d:30:92:c3:fc:
                    1d:87:ed:4a:13:70:3f:ba:0f:a5:ec:2a:e5:b0:6d:
                    ca:84:9c:a0:90:4d:04:e0:81:f2:60:ed:fa:64:f7:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:9D:4F:FD:C8:9D:7C:C9:CC:80:8D:FC:E8:31:77:51:B9:07:D3
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e5:7a:4f:87:e4:3f:56:4a:fc:5d:03:53:65:1b:60:df:88:
         43:33:41:53:7e:30:c5:fb:c4:e2:59:f2:19:84:c6:56:16:9c:
         3a:6a:cb:c7:53:ea:18:7a:99:e6:6d:ac:93:66:05:06:18:6f:
         de:fa:c6:59:6d:41:55:24:bd:e0:0f:d5:ec:a8:40:51:3e:da:
         28:a5:ba:0a:42:6a:6c:3a:88:5b:5d:4d:85:df:01:e9:0b:75:
         a9:de:18:de:5e:cc:eb:2c:39:5c:80:d2:7e:19:48:65:5a:2f:
         13:b2:d8:15:e2:53:70:b2:3b:6d:9a:12:7e:71:28:22:ca:a7:
         57:31:fe:96:35:3c:63:53:26:ab:9f:13:d4:67:64:4a:ee:10:
         72:26:72:36:8e:bc:1b:ac:2b:02:8b:cc:25:d5:41:7d:a7:ae:
         24:11:8f:05:b7:f4:8d:23:2b:e1:23:db:07:40:4c:67:b0:fb:
         c0:59:bd:0f:5b:2a:d8:92:73:b5:13:e4:d8:20:bf:55:85:f1:
         96:c7:fc:de:e4:17:2f:5a:3b:44:63:69:d4:a1:af:67:c7:69:
         5e:7b:c5:44:88:c8:cf:6f:76:0b:65:62:19:fb:9d:e7:52:2e:
         79:80:ec:ea:09:02:8c:3e:37:47:32:9a:1e:47:e7:01:74:04:
         86:04:d6:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBonwBs2OJoHZCi2dX5+2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1
YTE3N2QwHhcNMjYwMjA5MDkwMTMzWhcNMjYwMjEwMDkwMTMzWjAzMTEwLwYDVQQD
EyhjMzg0OWQ0ZmZkYzg5ZDdjYzljYzgwOGRmY2U4MzE3NzUxYjkwN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sWFnNvSzoZvQ9Ntjkar+pAaKAGK
U8yLzI8SMzOrs8pfeeL+X1FNdT0Ry08f60LgldWGDloBGCpM0ialPUia3yvB1uuo
82vHlKcXndba+Ois5hcPgw76J7Yzd6RXncY3g1ZHTANjenSJ9e4mR1+NSW61KFNc
TjqTQ6yZs+g2Vby9dNLNj4RRoQ4RIzIpKy/txSe7N7SM9VWA1N7KZH4D33QwXsGO
97bDiitm+dTAxZmiO3yVuTYwQhTEG1u1bZm8On/Hj4qeeFIqDUrxc6Zsy8M0a05k
it3mAVrhXTCSw/wdh+1KE3A/ug+l7CrlsG3KhJygkE0E4IHyYO36ZPeBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOEnU/9yJ18ycyAjfzoMXdRuQfTMB8GA1UdIwQY
MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt
ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi
LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+V6T4fk
P1ZK/F0DU2UbYN+IQzNBU34wxfvE4lnyGYTGVhacOmrLx1PqGHqZ5m2sk2YFBhhv
3vrGWW1BVSS94A/V7KhAUT7aKKW6CkJqbDqIW11Nhd8B6Qt1qd4Y3l7M6yw5XIDS
fhlIZVovE7LYFeJTcLI7bZoSfnEoIsqnVzH+ljU8Y1Mmq58T1GdkSu4QciZyNo68
G6wrAovMJdVBfaeuJBGPBbf0jSMr4SPbB0BMZ7D7wFm9D1sq2JJztRPk2CC/VYXx
lsf83uQXL1o7RGNp1KGvZ8dpXnvFRIjIz292C2ViGfud51IueYDs6gkCjD43RzKa
HkfnAXQEhgTW6Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:22 2026 by rpki-client