This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File:                     oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier:          aOb8S725QKorG3A1ngkvG9UB/aJ8GL7pfaLXcT3oKR8=
Subject key identifier:   1E:FF:63:DA:40:51:97:87:9E:77:9D:B6:EE:77:BD:13:51:05:93:EB
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer:       /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial:       019C43C6D13AA131B932C009F79784A395CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 19:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:29 +0000
Files and hashes:         1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
                          2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: KzkhNCFWazDkoX2iYC1fEVzTzcMr6MUWMdewJkSJS1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:d1:3a:a1:31:b9:32:c0:09:f7:97:84:a3:95:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
        Validity
            Not Before: Feb  9 19:00:29 2026 GMT
            Not After : Feb 10 19:00:29 2026 GMT
        Subject: CN=1eff63da405197879e779db6ee77bd13510593eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:96:64:ed:92:2e:4e:94:1b:9a:d9:34:8d:
                    ff:8c:35:a3:74:ac:29:af:62:e7:44:05:31:c1:c1:
                    4d:b6:29:a7:a4:6b:0e:04:c2:bd:4c:e3:4f:b9:b0:
                    cf:93:5e:2f:97:08:99:10:64:5a:3c:da:82:43:a6:
                    14:d2:9d:3f:ec:82:74:7d:e5:49:34:7a:26:65:6d:
                    b4:1a:d9:a1:5e:d4:0c:48:df:9d:a7:43:fe:4f:31:
                    d0:94:b7:d1:c5:4d:97:95:fd:24:9c:e9:16:2b:19:
                    3f:6f:78:25:86:4c:de:36:6a:3b:32:6d:0b:ec:af:
                    07:3d:d3:2d:a5:15:9a:f2:16:a2:74:28:fa:91:c6:
                    89:47:3a:e2:9a:87:e0:04:5f:e6:28:e5:93:a6:b2:
                    db:d4:3b:39:90:f3:be:17:bc:6b:f8:05:df:50:cc:
                    de:fd:92:8b:54:a0:6f:5d:78:46:2d:b4:5e:f4:2e:
                    fa:e3:c2:bf:59:e1:9b:ed:d9:06:a6:2f:69:97:e3:
                    8f:4f:5f:48:31:c9:84:52:ed:6c:42:ff:9b:3d:6e:
                    bb:2b:a2:76:83:6d:82:28:2c:12:48:46:9b:53:31:
                    bb:05:7f:96:46:bb:8f:06:7e:82:e3:05:1d:b5:3a:
                    67:e7:88:55:fe:f3:32:23:40:d6:d9:6b:28:89:36:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FF:63:DA:40:51:97:87:9E:77:9D:B6:EE:77:BD:13:51:05:93:EB
            X509v3 Authority Key Identifier:
                keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:27:60:14:31:13:77:17:9e:2b:1d:80:a2:4e:3c:2c:d9:28:
         e7:36:3b:c9:c0:bc:7c:51:e2:c9:6f:25:0f:47:e5:98:ad:65:
         40:83:b7:b4:7d:3f:69:9b:5c:43:3c:48:f9:09:a7:10:a3:a2:
         98:10:21:cb:25:8a:de:8d:f5:43:59:63:c3:9c:28:41:fb:33:
         c5:87:6d:d6:00:48:39:64:5c:4d:af:a7:46:86:51:96:cb:09:
         7a:0d:5f:04:64:05:69:68:1d:72:f2:e7:95:cc:95:69:bb:d0:
         19:ce:8c:d6:f4:5e:bf:2f:3b:7f:c3:6f:bb:d7:bf:8b:f7:7b:
         d4:2e:e7:21:5a:f4:17:3e:f4:41:15:fb:f2:e7:a5:06:43:04:
         db:0d:16:c6:31:35:69:fb:ae:ab:f1:25:c7:da:ce:9c:ba:9b:
         e8:49:15:89:83:5c:20:ea:5a:c8:b9:35:de:05:01:ba:a8:d4:
         33:c9:10:d4:97:a0:0b:73:1d:99:fd:51:23:64:21:aa:46:f1:
         82:90:bb:49:56:23:4d:4c:7c:70:cd:75:00:84:a0:2c:d1:2f:
         38:15:b0:e2:7c:a2:3c:bb:d3:91:86:26:c7:fe:c9:aa:0f:99:
         7e:aa:19:3d:d6:cb:7d:91:03:2f:99:06:12:b7:41:0a:79:87:
         e9:57:27:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxtE6oTG5MsAJ95eEo5XLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOWQ2NWI5MjZmZGQ3NDNkYTViNDczZDM0MTg1ZmUxMDFi
MDVhMjgwHhcNMjYwMjA5MTkwMDI5WhcNMjYwMjEwMTkwMDI5WjAzMTEwLwYDVQQD
EygxZWZmNjNkYTQwNTE5Nzg3OWU3NzlkYjZlZTc3YmQxMzUxMDU5M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6KWZO2SLk6UG5rZNI3/jDWjdKwp
r2LnRAUxwcFNtimnpGsOBMK9TONPubDPk14vlwiZEGRaPNqCQ6YU0p0/7IJ0feVJ
NHomZW20GtmhXtQMSN+dp0P+TzHQlLfRxU2Xlf0knOkWKxk/b3glhkzeNmo7Mm0L
7K8HPdMtpRWa8haidCj6kcaJRzrimofgBF/mKOWTprLb1Ds5kPO+F7xr+AXfUMze
/ZKLVKBvXXhGLbRe9C7648K/WeGb7dkGpi9pl+OPT19IMcmEUu1sQv+bPW67K6J2
g22CKCwSSEabUzG7BX+WRruPBn6C4wUdtTpn54hV/vMyI0DW2WsoiTZ4lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7/Y9pAUZeHnnedtu53vRNRBZPrMB8GA1UdIwQY
MBaAFKCdZbkm/ddD2ltHPTQYX+EBsFooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYt
NzlhN2VhYTdhZTU4LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYtNzlhN2VhYTdhZTU4
LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCdgFDET
dxeeKx2Aok48LNko5zY7ycC8fFHiyW8lD0flmK1lQIO3tH0/aZtcQzxI+QmnEKOi
mBAhyyWK3o31Q1ljw5woQfszxYdt1gBIOWRcTa+nRoZRlssJeg1fBGQFaWgdcvLn
lcyVabvQGc6M1vRevy87f8Nvu9e/i/d71C7nIVr0Fz70QRX78uelBkME2w0WxjE1
afuuq/Elx9rOnLqb6EkViYNcIOpayLk13gUBuqjUM8kQ1JegC3Mdmf1RI2Qhqkbx
gpC7SVYjTUx8cM11AISgLNEvOBWw4nyiPLvTkYYmx/7Jqg+ZfqoZPdbLfZEDL5kG
ErdBCnmH6VcnGA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:33 2026 by rpki-client