This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File:                     1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier:          MgjtmnijQKj/56LmJ9GxZVIi8X1ubKg9WfW2A01y2GA=
Subject key identifier:   FF:9E:D6:6B:87:02:46:BD:65:E6:10:F9:90:54:D6:A7:9D:67:AC:5F
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer:       /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial:       019C427D1AC477264DED266B0219A69C514C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number:          17A1
Signing time:             Mon 09 Feb 2026 13:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:20 +0000
Files and hashes:         1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: bazv8cP1eWr06L8/+Q70wwPCrzDtvNCpsBRzGlTMfTI=)
                          2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:1a:c4:77:26:4d:ed:26:6b:02:19:a6:9c:51:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
        Validity
            Not Before: Feb  9 13:00:20 2026 GMT
            Not After : Feb 10 13:00:20 2026 GMT
        Subject: CN=ff9ed66b870246bd65e610f99054d6a79d67ac5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:9c:d5:1e:2b:80:45:e3:cd:6c:bd:fb:c7:
                    52:30:1e:ec:34:00:af:7c:56:f7:32:6d:cf:15:99:
                    00:c0:1d:2c:25:ee:d8:da:6f:b3:40:c3:04:15:13:
                    8b:86:90:14:4c:19:ad:1d:31:03:df:03:19:9a:f7:
                    b3:28:3b:8b:97:dd:ae:a4:fe:46:0e:60:7d:b3:d0:
                    00:d6:67:36:7a:d8:c7:4b:b5:cb:36:c0:3d:61:01:
                    5f:62:94:ba:49:eb:99:29:7d:0d:7a:c1:25:dc:f2:
                    cd:6c:66:88:15:e8:e5:6e:2a:ce:36:0f:3b:4c:36:
                    36:5a:7f:5e:f9:54:b0:e8:5f:35:d9:73:5e:67:9d:
                    45:ae:5e:1b:50:da:42:94:34:b4:13:e5:84:92:51:
                    f4:de:fa:72:ac:5a:1f:c0:7f:83:ca:c4:58:17:72:
                    d9:28:92:55:59:cd:4d:89:2c:84:ed:7b:d3:7f:64:
                    02:f4:e9:89:df:dd:2e:e1:3e:b4:f2:f7:95:31:1f:
                    db:fb:4d:65:05:e8:41:ef:93:50:cd:fb:ba:29:a3:
                    75:3f:4b:5d:d6:4b:bf:70:56:83:d5:af:8c:86:af:
                    cc:b7:8e:32:40:0d:18:62:f1:14:86:a3:f5:3b:c1:
                    ce:47:a7:08:46:ba:3a:77:5e:09:9f:e5:e2:d2:fa:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:D6:6B:87:02:46:BD:65:E6:10:F9:90:54:D6:A7:9D:67:AC:5F
            X509v3 Authority Key Identifier:
                keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a9:fe:93:00:63:c8:6e:58:f9:cd:c6:22:d8:3a:92:c1:47:
         3d:37:fd:9b:4a:85:32:02:dc:66:c7:75:33:11:c0:90:ef:bd:
         60:04:4a:a4:74:f2:dc:fc:3a:6b:cd:79:ac:9f:83:f6:4a:2c:
         8e:18:ee:fa:71:48:76:51:e7:00:32:3c:c2:0f:de:65:a4:3a:
         3a:85:c2:48:3e:c0:a0:45:7e:51:fc:35:f0:7a:2a:f9:3e:c7:
         80:64:a2:da:e5:d0:53:4c:fc:1f:9b:ba:5b:e5:36:e4:2b:13:
         1f:ff:e1:42:15:1b:05:23:68:f7:8f:30:96:6e:26:13:6d:cb:
         cc:e8:d1:3b:68:45:f7:1b:2e:63:fc:92:e8:ce:e9:65:fa:d4:
         d9:f0:c7:58:d0:9f:cb:fd:78:a3:23:19:1f:b8:2d:2e:64:4d:
         b2:74:1d:73:1a:27:fe:aa:ce:1f:d0:7d:41:4c:91:d3:9c:fa:
         9a:18:59:65:ae:38:94:61:04:69:07:67:2a:52:53:8b:06:5d:
         19:92:64:fc:9a:3c:07:e6:1f:92:2d:3c:e9:dc:4a:5d:1d:bf:
         7e:a8:fa:d2:c3:f4:f4:45:2a:bc:f2:97:0c:5e:f6:eb:d3:51:
         b3:30:57:a4:dd:6d:4b:89:09:0c:62:42:c8:d6:dc:65:9c:90:
         e1:e5:c8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfRrEdyZN7SZrAhmmnFFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWE4ZDkxZmU0NGYxYTk2MzlhZWQ1NjFjMWJjYWZjYmYx
MGIyNWQwHhcNMjYwMjA5MTMwMDIwWhcNMjYwMjEwMTMwMDIwWjAzMTEwLwYDVQQD
EyhmZjllZDY2Yjg3MDI0NmJkNjVlNjEwZjk5MDU0ZDZhNzlkNjdhYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S6c1R4rgEXjzWy9+8dSMB7sNACv
fFb3Mm3PFZkAwB0sJe7Y2m+zQMMEFROLhpAUTBmtHTED3wMZmvezKDuLl92upP5G
DmB9s9AA1mc2etjHS7XLNsA9YQFfYpS6SeuZKX0NesEl3PLNbGaIFejlbirONg87
TDY2Wn9e+VSw6F812XNeZ51Frl4bUNpClDS0E+WEklH03vpyrFofwH+DysRYF3LZ
KJJVWc1NiSyE7XvTf2QC9OmJ390u4T608veVMR/b+01lBehB75NQzfu6KaN1P0td
1ku/cFaD1a+Mhq/Mt44yQA0YYvEUhqP1O8HOR6cIRro6d14Jn+Xi0vq7LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+e1muHAka9ZeYQ+ZBU1qedZ6xfMB8GA1UdIwQY
MBaAFNRajZH+RPGpY5rtVhwbyvy/ELJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWIt
NTg4NjVkMWUxNGUwLzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWItNTg4NjVkMWUxNGUw
LzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqn+kwBj
yG5Y+c3GItg6ksFHPTf9m0qFMgLcZsd1MxHAkO+9YARKpHTy3Pw6a815rJ+D9kos
jhju+nFIdlHnADI8wg/eZaQ6OoXCSD7AoEV+Ufw18Hoq+T7HgGSi2uXQU0z8H5u6
W+U25CsTH//hQhUbBSNo948wlm4mE23LzOjRO2hF9xsuY/yS6M7pZfrU2fDHWNCf
y/14oyMZH7gtLmRNsnQdcxon/qrOH9B9QUyR05z6mhhZZa44lGEEaQdnKlJTiwZd
GZJk/Jo8B+Yfki086dxKXR2/fqj60sP09EUqvPKXDF7269NRszBXpN1tS4kJDGJC
yNbcZZyQ4eXIQg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:59 2026 by rpki-client