This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File:                     A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier:          ofTvUq0HlvABUggCsf2Inqob79LNAVNWib4jbrqzVS0=
Subject key identifier:   D5:97:07:DB:76:9E:BA:63:7C:72:27:7C:76:C3:C8:57:3F:F8:02:74
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer:       /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial:       019C446BB7DD06E41C1F83F023FD7827EAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 22:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:35 +0000
Files and hashes:         1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: fR6Uv4+l6qLgytmn8pnPeX8Apxfd0G1PXcw6s4utA9s=)
                          2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:b7:dd:06:e4:1c:1f:83:f0:23:fd:78:27:ea:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
        Validity
            Not Before: Feb  9 22:00:35 2026 GMT
            Not After : Feb 10 22:00:35 2026 GMT
        Subject: CN=d59707db769eba637c72277c76c3c8573ff80274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:59:7d:0b:bd:0b:eb:88:cd:da:6c:80:b3:
                    03:f6:31:56:e2:df:1d:72:ca:7d:32:58:a3:8b:d3:
                    1c:2b:76:5b:4e:98:28:d0:10:aa:4f:34:c9:d3:c1:
                    06:15:33:7d:63:20:bd:af:e4:ed:c9:d7:26:d3:b4:
                    b3:00:e9:50:d4:78:0c:b4:83:02:0c:72:82:f2:b4:
                    e8:06:5c:91:ac:b6:69:31:bd:db:c9:f5:eb:64:fa:
                    86:a5:af:ea:10:37:9e:43:9f:4f:88:64:54:76:50:
                    3a:e0:f2:9a:8b:d0:2d:a8:a8:9e:a5:8a:04:fe:57:
                    d6:97:cf:28:1c:71:81:35:68:b8:59:f7:34:34:aa:
                    6f:a0:93:3b:5d:8d:e7:1b:a3:c1:4e:e2:31:55:03:
                    28:36:1f:3c:55:98:00:c8:a9:81:b0:9d:85:54:6e:
                    f3:10:28:5d:15:85:7d:ca:ad:78:17:41:ec:1a:c3:
                    81:17:cc:b4:35:7c:b6:38:28:46:95:75:10:ed:b7:
                    1e:67:17:37:e9:77:aa:a3:36:5b:d6:e7:c5:68:39:
                    d9:26:ab:7c:1d:53:59:8e:ee:e9:ec:29:35:27:64:
                    af:7f:f2:d7:67:fa:17:d5:ce:73:76:28:85:7c:4e:
                    2d:9f:4e:3a:25:3f:33:94:fe:f1:bc:e3:47:ce:68:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:97:07:DB:76:9E:BA:63:7C:72:27:7C:76:C3:C8:57:3F:F8:02:74
            X509v3 Authority Key Identifier:
                keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:51:af:0e:5e:ec:ae:ef:66:83:af:d1:26:ef:c0:f4:d3:f5:
         bf:a9:28:5e:2e:02:89:0e:b6:d5:4b:f2:8b:d5:1a:bd:15:2e:
         61:06:f5:92:d0:1e:2d:33:f7:7a:bd:34:6e:06:d5:95:c4:cc:
         52:54:5e:c2:4c:bb:0d:e1:10:e3:60:84:ce:27:81:e9:6f:70:
         2e:95:1d:d1:46:36:54:f2:01:fd:87:35:f4:9e:fa:0f:ed:02:
         7d:a1:de:4f:32:82:57:99:af:fd:68:94:72:58:48:ab:40:e9:
         01:db:6f:f2:81:8c:60:c4:89:de:4e:b9:d1:c8:c3:9e:fc:74:
         5a:a8:3d:36:7d:ac:50:06:93:84:d6:df:5d:7b:dd:3a:9f:0e:
         1b:d6:c4:78:92:52:f0:9f:45:4b:07:74:c0:21:4c:d7:32:26:
         b0:e6:77:21:01:53:0f:be:81:c5:ce:76:8d:ac:cd:4a:30:6c:
         18:aa:63:d7:90:42:07:4a:7f:c6:f4:be:66:c8:0e:97:42:8e:
         04:c3:ba:ec:b4:ee:a8:95:80:da:1f:49:a1:62:6c:c7:6f:b3:
         61:d2:06:4d:a3:32:f1:e0:8f:21:a8:26:66:43:07:3b:f5:4f:
         b6:34:b2:a9:e0:45:ad:5d:d6:64:30:51:c0:e8:4a:d3:5f:40:
         94:f0:b3:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEa7fdBuQcH4PwI/14J+rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjgzODgzNzJkYzMzMmM3Y2M2Zjc3NjZhZDc4ZDU4YTIz
YjI1NDQwHhcNMjYwMjA5MjIwMDM1WhcNMjYwMjEwMjIwMDM1WjAzMTEwLwYDVQQD
EyhkNTk3MDdkYjc2OWViYTYzN2M3MjI3N2M3NmMzYzg1NzNmZjgwMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjpZfQu9C+uIzdpsgLMD9jFW4t8d
csp9Mliji9McK3ZbTpgo0BCqTzTJ08EGFTN9YyC9r+Ttydcm07SzAOlQ1HgMtIMC
DHKC8rToBlyRrLZpMb3byfXrZPqGpa/qEDeeQ59PiGRUdlA64PKai9AtqKiepYoE
/lfWl88oHHGBNWi4Wfc0NKpvoJM7XY3nG6PBTuIxVQMoNh88VZgAyKmBsJ2FVG7z
EChdFYV9yq14F0HsGsOBF8y0NXy2OChGlXUQ7bceZxc36XeqozZb1ufFaDnZJqt8
HVNZju7p7Ck1J2Svf/LXZ/oX1c5zdiiFfE4tn046JT8zlP7xvONHzmhXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWXB9t2nrpjfHInfHbDyFc/+AJ0MB8GA1UdIwQY
MBaAFAP4OINy3DMsfMb3dmrXjViiOyVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQt
OTQ1NTg1OGU5YzA2LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQtOTQ1NTg1OGU5YzA2
LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlGvDl7s
ru9mg6/RJu/A9NP1v6koXi4CiQ621Uvyi9UavRUuYQb1ktAeLTP3er00bgbVlcTM
UlRewky7DeEQ42CEzieB6W9wLpUd0UY2VPIB/Yc19J76D+0CfaHeTzKCV5mv/WiU
clhIq0DpAdtv8oGMYMSJ3k650cjDnvx0Wqg9Nn2sUAaThNbfXXvdOp8OG9bEeJJS
8J9FSwd0wCFM1zImsOZ3IQFTD76Bxc52jazNSjBsGKpj15BCB0p/xvS+ZsgOl0KO
BMO67LTuqJWA2h9JoWJsx2+zYdIGTaMy8eCPIagmZkMHO/VPtjSyqeBFrV3WZDBR
wOhK019AlPCz8g==
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:53:59 2026 by rpki-client