This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          mL8fM2sX8PU+OIdqdNT6ex+HSH9xPpahxvfRRi5QZyc=
Subject key identifier:   46:F7:1B:05:3C:CF:EE:37:1E:16:78:CC:4C:D8:8B:C7:FC:F2:0F:62
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       019C1FBB44770F0CB8EAB57F478CC7C77549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          1809
Signing time:             Mon 02 Feb 2026 19:01:32 +0000
Manifest this update:     Mon 02 Feb 2026 19:01:32 +0000
Manifest next update:     Tue 03 Feb 2026 19:01:32 +0000
Files and hashes:         1: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: /w+gffveKj3lZqKHbZIwDcuR1IR9a0osGq4mr+w0PS0=)
                          2: a2aTLssL5qA9WYwMt2iC0oh1USM.roa (hash: uWZUHJBuw3O6jwt6r5Een1zDl218rmROk6eyZ4UCJ5I=)
                          3: m1qKS2jQ7UL2R3RFiSA5OXb4h9Q.roa (hash: 1mnniW/CxCxJOYCoB+NPL6R9QHnpJ4z7lNlV4aB3q8k=)
                          4: neB2Y9gp3XTC5JuZMv0RhcEp4YM.roa (hash: oZJRQJs6IunxvYypeE6MWM+B2E4FaBfcRZfxUmVoiZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:bb:44:77:0f:0c:b8:ea:b5:7f:47:8c:c7:c7:75:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: Feb  2 19:01:32 2026 GMT
            Not After : Feb  3 19:01:32 2026 GMT
        Subject: CN=46f71b053ccfee371e1678cc4cd88bc7fcf20f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:d1:10:20:56:e9:03:e8:4b:db:99:ac:2f:
                    60:4d:66:5c:5f:67:9c:49:db:1d:28:b8:a4:d1:8e:
                    7b:f6:c8:70:4f:09:46:8b:23:42:b6:b7:2c:64:fa:
                    4f:87:69:d3:28:70:c3:10:c0:83:2b:92:67:21:9c:
                    7b:53:f1:29:25:da:32:d7:3c:f2:fc:f9:12:77:e8:
                    55:57:ab:c6:a7:a7:1c:81:71:a5:f9:2f:ab:b0:52:
                    05:6e:7d:ed:91:4f:b1:26:d0:b6:c5:9f:52:a8:25:
                    e0:3a:7f:28:f1:62:60:dd:2d:0a:6f:34:7c:6f:67:
                    45:25:2e:2c:77:40:9b:ff:7e:5f:1f:46:3d:97:0f:
                    59:15:6e:21:cd:70:b3:10:db:29:64:45:df:99:a0:
                    a2:70:d0:c1:d8:31:fc:56:c8:a6:ca:ef:7a:e0:cf:
                    75:fe:56:1d:b4:53:d9:d6:1f:29:dd:c7:e7:bb:8a:
                    93:a4:c3:e7:ec:a4:ec:68:79:73:c6:ca:62:70:e8:
                    51:e9:5c:b7:10:d9:4b:a9:f3:b6:06:48:99:62:26:
                    69:83:03:15:4f:e8:42:34:fd:68:a7:73:ff:b6:22:
                    4b:74:3e:91:82:e8:e4:7b:ee:10:c3:62:9a:76:7e:
                    6d:a9:30:82:c5:90:b0:8e:ca:64:0a:de:f3:5f:3b:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F7:1B:05:3C:CF:EE:37:1E:16:78:CC:4C:D8:8B:C7:FC:F2:0F:62
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a3:49:f9:14:94:d6:a6:e4:30:e9:6e:c5:8b:bf:a7:fb:1c:
         dc:d5:4e:12:8b:59:cc:c8:f3:b3:f1:5c:cc:b9:7e:da:00:33:
         8d:12:09:f8:f8:94:14:78:2b:61:6b:d6:e1:84:2b:70:54:1f:
         bf:55:78:8d:e1:ab:33:cb:18:2b:d7:41:fe:78:fd:ed:36:bd:
         01:06:dd:55:62:5a:2e:c8:32:a5:48:15:70:01:00:30:4d:13:
         a4:d6:e6:e7:27:0a:33:e5:f0:5f:55:99:a5:1a:a5:57:bd:50:
         56:15:5e:59:1d:1d:5e:51:c0:cc:a6:32:cd:9a:fe:72:62:27:
         7c:8e:38:6e:8d:c0:b4:10:e7:a3:47:b6:9b:72:db:d9:63:7e:
         2c:c0:f9:18:9a:fb:08:f1:61:6f:e6:46:ac:1b:61:6b:a9:24:
         d6:dd:f0:99:9e:18:0e:fb:11:41:5b:ac:c0:28:8d:55:4a:0f:
         37:d6:42:0e:fb:a7:bf:58:a7:71:e3:23:b0:a8:93:62:7c:99:
         65:6a:10:cd:2e:86:9d:8c:6c:ed:36:3a:83:a8:29:84:27:db:
         5c:91:97:75:5b:8d:cf:d7:d0:88:93:b8:5f:ff:d1:c1:fb:ef:
         b5:81:a6:b3:56:5d:1a:5a:61:6e:0f:cc:be:dc:fb:fc:96:06:
         ea:06:83:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwfu0R3Dwy46rV/R4zHx3VJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz
OGY5YTkwHhcNMjYwMjAyMTkwMTMyWhcNMjYwMjAzMTkwMTMyWjAzMTEwLwYDVQQD
Eyg0NmY3MWIwNTNjY2ZlZTM3MWUxNjc4Y2M0Y2Q4OGJjN2ZjZjIwZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjzRECBW6QPoS9uZrC9gTWZcX2ec
SdsdKLik0Y579shwTwlGiyNCtrcsZPpPh2nTKHDDEMCDK5JnIZx7U/EpJdoy1zzy
/PkSd+hVV6vGp6ccgXGl+S+rsFIFbn3tkU+xJtC2xZ9SqCXgOn8o8WJg3S0KbzR8
b2dFJS4sd0Cb/35fH0Y9lw9ZFW4hzXCzENspZEXfmaCicNDB2DH8Vsimyu964M91
/lYdtFPZ1h8p3cfnu4qTpMPn7KTsaHlzxspicOhR6Vy3ENlLqfO2BkiZYiZpgwMV
T+hCNP1op3P/tiJLdD6Rgujke+4Qw2Kadn5tqTCCxZCwjspkCt7zXztE+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb3GwU8z+43HhZ4zEzYi8f88g9iMB8GA1UdIwQY
MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt
MGY5ZDU3YTVkNGZhLzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh
LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaNJ+RSU
1qbkMOluxYu/p/sc3NVOEotZzMjzs/FczLl+2gAzjRIJ+PiUFHgrYWvW4YQrcFQf
v1V4jeGrM8sYK9dB/nj97Ta9AQbdVWJaLsgypUgVcAEAME0TpNbm5ycKM+XwX1WZ
pRqlV71QVhVeWR0dXlHAzKYyzZr+cmInfI44bo3AtBDno0e2m3Lb2WN+LMD5GJr7
CPFhb+ZGrBtha6kk1t3wmZ4YDvsRQVuswCiNVUoPN9ZCDvunv1inceMjsKiTYnyZ
ZWoQzS6GnYxs7TY6g6gphCfbXJGXdVuNz9fQiJO4X//RwfvvtYGms1ZdGlphbg/M
vtz7/JYG6gaDeg==
-----END CERTIFICATE-----
Generated at Tue Feb 3 01:54:02 2026 by rpki-client