This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File:                     4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier:          CuhiU1IhY/RXk3UPHGuZmMKhhXLkwcdU6vyLP904bCo=
Subject key identifier:   70:CC:97:4B:B3:E2:C5:4F:58:72:19:2C:69:01:2C:28:D6:7E:20:E6
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer:       /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial:       019C41D846E49DD4E0827DF41CCD1410222D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number:          181F
Signing time:             Mon 09 Feb 2026 10:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:18 +0000
Files and hashes:         1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: EHb9zf6d5O6bNeAcozXyc7eqO14On7CZGKgB4Ha6s4I=)
                          2: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=)
                          3: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=)
                          4: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=)
                          5: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=)
                          6: Z7EF1vEpMJoxk3gDOGnBciFfSNQ.roa (hash: w5vWOIVuV6xNWFTRCHG5fzGxl2lvYUDewTjO/+mBqVU=)
                          7: bJ-s2NJ5eywWHFMovcD-LOMTmjU.roa (hash: xgxhhwvW3lfo02BHcwDD9zbM9SrnrImkop0rHRy8xrc=)
                          8: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=)
                          9: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:46:e4:9d:d4:e0:82:7d:f4:1c:cd:14:10:22:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
        Validity
            Not Before: Feb  9 10:00:18 2026 GMT
            Not After : Feb 10 10:00:18 2026 GMT
        Subject: CN=70cc974bb3e2c54f5872192c69012c28d67e20e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:f2:c2:4b:fc:67:71:38:4b:c5:f4:53:b2:
                    40:d6:52:24:2a:ac:ae:7a:01:fd:25:32:83:13:25:
                    32:df:d7:56:d1:7d:39:ae:6b:ed:98:2c:19:27:36:
                    d7:62:93:de:73:60:30:a6:44:05:4a:a0:a2:e7:39:
                    c1:44:97:f3:af:c7:1a:a4:d3:ff:b7:da:6b:93:6e:
                    34:2f:18:54:2a:d5:75:96:e5:02:8b:48:20:f7:01:
                    23:49:e1:b6:e2:30:80:95:bb:53:9c:36:5c:f1:4d:
                    ed:48:e0:3f:73:38:19:3e:ce:ba:4c:4f:af:63:9c:
                    3c:b8:5a:87:6d:3b:2b:54:05:a8:6b:62:e9:d1:80:
                    7c:36:27:32:f1:f2:d4:e9:ba:07:a0:ea:50:bb:ba:
                    54:ab:af:eb:be:45:56:d5:2c:8f:fa:ce:b5:12:92:
                    46:27:63:c6:79:a4:c0:70:d3:75:80:12:af:99:1f:
                    26:f0:c3:f6:1e:82:24:ce:e2:4d:99:71:c7:91:fb:
                    71:d1:80:69:1d:38:3e:dd:3f:5b:28:ca:16:a2:03:
                    55:65:70:12:48:81:06:b3:99:43:27:c2:e3:44:84:
                    cf:76:f0:1f:e5:08:5c:08:6c:b6:7a:69:5d:9f:26:
                    f2:10:6f:43:99:14:5b:6b:55:57:1d:e9:f4:fb:e2:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:97:4B:B3:E2:C5:4F:58:72:19:2C:69:01:2C:28:D6:7E:20:E6
            X509v3 Authority Key Identifier:
                keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:9e:62:f2:59:3f:69:80:69:1c:6e:de:de:e9:ac:2f:5c:
         3a:b1:48:92:a0:b5:e0:f7:07:b1:29:80:b4:cb:d5:07:9e:36:
         4c:36:f3:c4:6e:bd:5e:b7:67:eb:f1:8f:86:f6:46:22:84:60:
         38:ea:2b:35:a6:1f:54:e9:f2:91:f3:fa:94:44:e2:cc:86:72:
         4e:e6:59:e1:e1:a6:8b:ac:34:4f:e1:47:79:f7:61:e7:8a:c4:
         80:b8:ad:1d:da:0f:ae:b0:6e:3f:32:76:11:24:68:28:22:0e:
         32:9d:53:a0:c9:4c:ff:e5:94:f7:bb:3f:7e:ea:4a:5c:76:f9:
         59:d4:e3:78:73:7b:da:53:96:1a:ad:73:45:af:b1:00:7c:8e:
         db:35:32:f6:61:fc:f7:7f:1f:f4:a9:af:66:10:7a:16:39:a8:
         83:09:b4:6b:3a:8b:85:76:6a:6e:0d:e4:41:ce:ae:e0:b4:90:
         d0:c4:88:41:ae:98:66:2a:35:b4:4c:1d:43:01:d0:28:c0:2c:
         50:dd:12:15:7f:5e:06:20:c7:38:bb:7b:95:ca:84:06:81:6b:
         b3:ad:4c:85:d7:a1:3b:e9:44:a0:19:c5:dd:ba:e0:22:d0:e8:
         e8:c2:ec:df:c1:40:2e:08:e9:7c:7a:b0:03:c2:11:a5:27:cf:
         25:02:4c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2EbkndTggn30HM0UECItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjYwMjA5MTAwMDE4WhcNMjYwMjEwMTAwMDE4WjAzMTEwLwYDVQQD
Eyg3MGNjOTc0YmIzZTJjNTRmNTg3MjE5MmM2OTAxMmMyOGQ2N2UyMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIHywkv8Z3E4S8X0U7JA1lIkKqyu
egH9JTKDEyUy39dW0X05rmvtmCwZJzbXYpPec2AwpkQFSqCi5znBRJfzr8capNP/
t9prk240LxhUKtV1luUCi0gg9wEjSeG24jCAlbtTnDZc8U3tSOA/czgZPs66TE+v
Y5w8uFqHbTsrVAWoa2Lp0YB8Nicy8fLU6boHoOpQu7pUq6/rvkVW1SyP+s61EpJG
J2PGeaTAcNN1gBKvmR8m8MP2HoIkzuJNmXHHkftx0YBpHTg+3T9bKMoWogNVZXAS
SIEGs5lDJ8LjRITPdvAf5QhcCGy2emldnybyEG9DmRRba1VXHen0++LvjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDMl0uz4sVPWHIZLGkBLCjWfiDmMB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsOeYvJZ
P2mAaRxu3t7prC9cOrFIkqC14PcHsSmAtMvVB542TDbzxG69Xrdn6/GPhvZGIoRg
OOorNaYfVOnykfP6lETizIZyTuZZ4eGmi6w0T+FHefdh54rEgLitHdoPrrBuPzJ2
ESRoKCIOMp1ToMlM/+WU97s/fupKXHb5WdTjeHN72lOWGq1zRa+xAHyO2zUy9mH8
938f9KmvZhB6Fjmogwm0azqLhXZqbg3kQc6u4LSQ0MSIQa6YZio1tEwdQwHQKMAs
UN0SFX9eBiDHOLt7lcqEBoFrs61MhdehO+lEoBnF3brgItDo6MLs38FALgjpfHqw
A8IRpSfPJQJM1w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:27 2026 by rpki-client