This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File:                     1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier:          rqAxojplKhlnoriZKOtpdIEHKKwntnT0ecrvf6mZPXY=
Subject key identifier:   6B:53:11:26:20:C6:95:FC:C7:02:6B:51:8D:B5:24:F5:80:73:88:36
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer:       /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial:       019C42EB1B891946C763B692F0B99E5EB2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number:          15B2
Signing time:             Mon 09 Feb 2026 15:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:29 +0000
Files and hashes:         1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: GDSADnm7oomo8brWnXXQACulLfbVr8TlueHmJq+C6NA=)
                          2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:1b:89:19:46:c7:63:b6:92:f0:b9:9e:5e:b2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
        Validity
            Not Before: Feb  9 15:00:29 2026 GMT
            Not After : Feb 10 15:00:29 2026 GMT
        Subject: CN=6b53112620c695fcc7026b518db524f580738836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:47:9f:a8:ea:52:9c:b4:3a:8f:49:8d:60:
                    ce:f7:18:29:b0:2b:5f:4a:ce:e2:a1:4e:69:e3:b5:
                    d8:95:66:89:63:54:e9:22:58:28:98:97:90:d7:35:
                    cb:49:6b:95:ae:8e:3c:46:d4:bd:6a:36:96:be:38:
                    ea:78:95:f4:91:21:f0:bf:81:47:d2:3d:d7:04:34:
                    57:09:84:67:44:56:cd:af:80:56:a8:26:e9:79:e2:
                    a5:7e:11:35:15:2d:1a:a2:49:af:f7:b8:e4:57:fc:
                    cf:c9:5f:88:51:10:b7:0d:f0:cf:1b:33:d9:10:6f:
                    21:e3:63:27:6e:2d:ff:ff:9a:dd:d1:06:4b:54:af:
                    dc:20:bb:38:d2:6d:97:7c:3a:b5:ac:e0:06:57:e7:
                    38:0f:db:15:08:c2:2d:16:5b:48:08:23:ac:e9:0d:
                    cd:e2:05:66:43:63:5b:ec:cc:0c:d5:42:fa:59:b3:
                    32:4a:0c:32:fa:cc:25:de:55:fc:ef:b2:d4:62:27:
                    17:fa:4c:33:9b:98:b3:a8:ce:d2:a3:c6:c1:50:97:
                    b1:db:ca:15:c7:8e:d7:ff:2c:b4:46:72:20:0f:d1:
                    fb:ce:59:04:4d:d9:47:ec:04:29:52:7a:30:16:b4:
                    8d:4a:a2:e5:40:cd:79:f8:fe:5c:41:d3:3d:07:7d:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:53:11:26:20:C6:95:FC:C7:02:6B:51:8D:B5:24:F5:80:73:88:36
            X509v3 Authority Key Identifier:
                keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:b4:da:8e:f9:c0:8a:f8:21:c4:a0:ed:37:94:ca:5a:09:
         a5:8e:38:3f:47:5b:4b:2b:66:a9:ff:ef:31:aa:c5:66:ae:22:
         47:5a:70:b9:50:ce:16:00:27:16:69:ed:30:de:3a:0c:13:c3:
         9f:d3:85:ca:2f:ce:ee:d0:17:38:f6:31:ac:c9:b4:8c:9b:25:
         54:31:cc:f6:53:9b:e9:c4:5d:3a:f4:b5:45:6b:bd:f2:3a:74:
         8c:68:a7:8e:1c:4c:63:f3:cf:5f:fb:56:f4:e8:d1:82:a9:0d:
         77:49:bb:57:a4:51:8d:3a:cd:94:19:ca:ef:02:dd:71:50:3d:
         70:9e:9f:56:e5:a7:7b:16:69:8e:b3:20:38:d0:9d:62:8e:b3:
         cb:9d:0a:a6:30:2e:7d:f4:6c:45:a3:c1:c4:3e:6b:7d:d6:da:
         fe:80:e9:43:cb:08:fe:d0:20:08:1c:af:df:63:7a:8a:a6:8f:
         37:de:e0:39:99:94:31:ee:72:c2:91:2b:ae:4e:8a:cd:fe:3c:
         c0:0e:90:45:6a:cd:ed:e9:b2:e9:43:fb:8e:af:b4:46:24:d8:
         8e:1b:5a:b2:bb:c8:82:57:23:e0:fe:ec:a8:40:3d:90:a2:ea:
         58:87:18:1e:9b:3e:eb:92:13:86:25:37:9b:26:91:34:79:6d:
         4a:a2:b5:de
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxC6xuJGUbHY7aS8LmeXrKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWZjZTlhYTcyYzgzODQ5NmY0YmRlZjljMWYwYjhlODk0
ZmM5OGUwHhcNMjYwMjA5MTUwMDI5WhcNMjYwMjEwMTUwMDI5WjAzMTEwLwYDVQQD
Eyg2YjUzMTEyNjIwYzY5NWZjYzcwMjZiNTE4ZGI1MjRmNTgwNzM4ODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspxHn6jqUpy0Oo9JjWDO9xgpsCtf
Ss7ioU5p47XYlWaJY1TpIlgomJeQ1zXLSWuVro48RtS9ajaWvjjqeJX0kSHwv4FH
0j3XBDRXCYRnRFbNr4BWqCbpeeKlfhE1FS0aokmv97jkV/zPyV+IURC3DfDPGzPZ
EG8h42Mnbi3//5rd0QZLVK/cILs40m2XfDq1rOAGV+c4D9sVCMItFltICCOs6Q3N
4gVmQ2Nb7MwM1UL6WbMySgwy+swl3lX877LUYicX+kwzm5izqM7So8bBUJex28oV
x47X/yy0RnIgD9H7zlkETdlH7AQpUnowFrSNSqLlQM15+P5cQdM9B30DaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGtTESYgxpX8xwJrUY21JPWAc4g2MB8GA1UdIwQY
MBaAFPsfzpqnLIOElvS975wfC46JT8mOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14X09tcWNzZzRTVzlMM3ZuQjhMam9sUHlZNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNTY1NWY1LTAxNDEtNGYzZC1hNTBj
LWI1OTk4NjgwZDkxNC8xLzEteF9PbXFjc2c0U1c5TDN2bkI4TGpvbFB5WTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzU2NTVmNS0wMTQxLTRmM2QtYTUwYy1iNTk5ODY4MGQ5
MTQvMS8xLXhfT21xY3NnNFNXOUwzdm5COExqb2xQeVk0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQ20
2o75wIr4IcSg7TeUyloJpY44P0dbSytmqf/vMarFZq4iR1pwuVDOFgAnFmntMN46
DBPDn9OFyi/O7tAXOPYxrMm0jJslVDHM9lOb6cRdOvS1RWu98jp0jGinjhxMY/PP
X/tW9OjRgqkNd0m7V6RRjTrNlBnK7wLdcVA9cJ6fVuWnexZpjrMgONCdYo6zy50K
pjAuffRsRaPBxD5rfdba/oDpQ8sI/tAgCByv32N6iqaPN97gOZmUMe5ywpErrk6K
zf48wA6QRWrN7emy6UP7jq+0RiTYjhtasrvIglcj4P7sqEA9kKLqWIcYHps+65IT
hiU3myaRNHltSqK13g==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:12:31 2026 by rpki-client