This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File:                     MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier:          WVgXnKbIlecVTST4DXzW4KEJHV3INQtucI6jBr3PCts=
Subject key identifier:   60:35:E6:B7:E9:76:C6:31:7A:6F:F8:C3:08:1F:41:56:37:7D:5E:E5
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer:       /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial:       019C420F2A43BE04C80E7920BA4A1F814571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:15 +0000
Files and hashes:         1: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: Sn1bVVY4ajeGU5OFBkKz/yAhtnx/4XAl+O1vQje0gug=)
                          2: obgVf-JtsYpCUbCziUNUZUCJX0s.roa (hash: elZk4GLccy9BtoLZB3Moi/HhDxse12ofYTVsYp+AUXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:2a:43:be:04:c8:0e:79:20:ba:4a:1f:81:45:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
        Validity
            Not Before: Feb  9 11:00:15 2026 GMT
            Not After : Feb 10 11:00:15 2026 GMT
        Subject: CN=6035e6b7e976c6317a6ff8c3081f4156377d5ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:55:d4:98:d3:e5:d0:54:b4:c4:bb:41:49:
                    ca:93:ef:fe:97:e0:9a:a8:ef:02:32:92:3d:c1:65:
                    c0:a8:de:37:20:e2:e6:da:51:17:df:47:e3:fc:93:
                    1e:3e:fd:f4:93:e7:a9:6a:79:fd:a8:42:c9:aa:22:
                    01:34:ba:4b:0f:35:67:22:66:dc:37:68:88:ed:71:
                    1a:96:d8:1d:c8:12:56:b6:b5:4b:08:fc:05:40:09:
                    34:02:f6:09:1f:d0:55:b1:05:e1:4f:db:d5:8d:69:
                    b4:dd:46:b8:bd:be:89:37:df:fe:30:af:26:76:55:
                    c8:51:73:bb:97:00:87:13:fe:9b:3c:32:ff:e3:86:
                    9e:ab:92:99:87:06:1e:41:c4:76:a6:bb:8b:d0:c9:
                    63:33:27:ed:5c:10:2e:dc:06:ba:2f:65:96:a8:ff:
                    32:39:6f:0e:75:32:4a:3f:d7:92:c5:51:da:64:2f:
                    55:db:f7:b7:53:20:21:2b:1f:70:b7:b6:4e:74:5c:
                    8b:06:ba:a1:9b:a6:27:18:5e:1b:92:3d:bf:f3:e1:
                    d8:5d:81:d0:2b:20:49:da:f6:22:25:25:dd:01:f2:
                    f3:51:6f:d5:63:9d:3f:05:e1:1d:43:b2:4c:39:b6:
                    f7:de:9c:a4:94:1e:11:70:cd:7d:a9:f6:af:e8:fd:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:35:E6:B7:E9:76:C6:31:7A:6F:F8:C3:08:1F:41:56:37:7D:5E:E5
            X509v3 Authority Key Identifier:
                keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f8:64:48:e7:59:5e:25:6b:d6:fe:f6:1c:d8:d9:84:28:b2:
         9d:01:96:51:10:5c:0d:1f:d4:95:44:b6:e3:a9:a2:ba:27:84:
         f8:48:ba:1d:c8:b1:04:45:64:04:06:58:6c:a2:55:2a:c1:b6:
         43:cb:a4:57:ea:35:c6:39:0f:ec:ff:6a:0d:c0:90:5a:d4:af:
         c7:8e:a4:1f:cb:92:1e:f9:d6:3f:59:c7:f6:14:2e:01:25:4b:
         5d:ef:a6:14:c6:96:a6:ae:aa:54:99:a1:00:df:5a:cd:08:fc:
         9a:31:5c:0b:1e:3b:1b:e7:cd:a6:2b:ff:9c:03:27:6d:32:c1:
         b8:2c:0e:60:51:cf:25:30:d2:e0:55:a2:58:37:12:66:a1:cf:
         ef:86:fe:7c:cc:df:79:eb:4c:82:38:c0:00:3d:9e:4b:3e:e1:
         40:9e:ae:8d:fa:8a:e2:23:72:89:8e:a5:4e:7b:fa:06:6e:77:
         81:95:00:cc:a2:ce:5a:ea:1b:7e:12:51:cd:75:d4:d1:91:ec:
         2d:2b:15:3d:31:6d:e7:31:04:26:88:11:3a:a0:a2:07:fe:35:
         b2:6f:0e:c2:15:c2:59:00:39:4b:35:09:f7:fe:7c:f3:9a:af:
         f2:7b:1e:95:62:dc:ec:72:0c:4c:4f:07:2e:ba:aa:7b:c3:3b:
         f6:3c:8d:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDypDvgTIDnkgukofgUVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjkwZDI1MjBhZDYxOWFjMzA2MGIzOWZiZDJjMjA0ZTI5
YTJhMTQwHhcNMjYwMjA5MTEwMDE1WhcNMjYwMjEwMTEwMDE1WjAzMTEwLwYDVQQD
Eyg2MDM1ZTZiN2U5NzZjNjMxN2E2ZmY4YzMwODFmNDE1NjM3N2Q1ZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHJV1JjT5dBUtMS7QUnKk+/+l+Ca
qO8CMpI9wWXAqN43IOLm2lEX30fj/JMePv30k+epann9qELJqiIBNLpLDzVnImbc
N2iI7XEaltgdyBJWtrVLCPwFQAk0AvYJH9BVsQXhT9vVjWm03Ua4vb6JN9/+MK8m
dlXIUXO7lwCHE/6bPDL/44aeq5KZhwYeQcR2pruL0MljMyftXBAu3Aa6L2WWqP8y
OW8OdTJKP9eSxVHaZC9V2/e3UyAhKx9wt7ZOdFyLBrqhm6YnGF4bkj2/8+HYXYHQ
KyBJ2vYiJSXdAfLzUW/VY50/BeEdQ7JMObb33pyklB4RcM19qfav6P38wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA15rfpdsYxem/4wwgfQVY3fV7lMB8GA1UdIwQY
MBaAFDD5DSUgrWGawwYLOfvSwgTimioUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWIt
NjU3YjNhN2Q5Njc2LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWItNjU3YjNhN2Q5Njc2
LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPhkSOdZ
XiVr1v72HNjZhCiynQGWURBcDR/UlUS246miuieE+Ei6HcixBEVkBAZYbKJVKsG2
Q8ukV+o1xjkP7P9qDcCQWtSvx46kH8uSHvnWP1nH9hQuASVLXe+mFMaWpq6qVJmh
AN9azQj8mjFcCx47G+fNpiv/nAMnbTLBuCwOYFHPJTDS4FWiWDcSZqHP74b+fMzf
eetMgjjAAD2eSz7hQJ6ujfqK4iNyiY6lTnv6Bm53gZUAzKLOWuobfhJRzXXU0ZHs
LSsVPTFt5zEEJogROqCiB/41sm8OwhXCWQA5SzUJ9/5885qv8nselWLc7HIMTE8H
Lrqqe8M79jyNlA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:47 2026 by rpki-client