This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File:                     08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier:          KgD/ag82uPMoFrS+on55S/wULGM3sO1fxxdidBuKrWA=
Subject key identifier:   65:39:0A:6D:06:FB:F7:88:58:39:B8:B3:98:69:AB:33:8E:D7:21:0A
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer:       /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial:       019C42B42D87A3825E94D4F2579824F71FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:30 +0000
Files and hashes:         1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: GyJ3VScx9NOHQeY5SKv6sBr3GJKJv/OEixAowXbS37o=)
                          2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:2d:87:a3:82:5e:94:d4:f2:57:98:24:f7:1f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
        Validity
            Not Before: Feb  9 14:00:30 2026 GMT
            Not After : Feb 10 14:00:30 2026 GMT
        Subject: CN=65390a6d06fbf7885839b8b39869ab338ed7210a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:70:3f:70:42:cf:86:da:82:08:1c:fd:98:
                    ff:dc:ce:fc:09:ad:20:8f:5e:7d:1a:33:56:97:5e:
                    68:2a:65:b9:84:fb:6b:ce:16:cc:78:38:60:3c:eb:
                    ef:ae:2e:9b:05:9f:d3:eb:44:4b:de:27:8d:ae:1a:
                    6c:32:f3:20:bd:5a:fb:00:25:c2:ab:f9:a3:de:ac:
                    74:3b:37:c7:53:2f:e0:6a:e2:47:c3:14:f8:7c:37:
                    cc:ba:7d:79:43:eb:4f:7d:ab:c1:5d:64:2f:b5:ea:
                    68:94:8f:5d:b0:72:d5:f0:5a:ed:e1:f6:9a:2c:3b:
                    c2:e8:74:1d:b5:76:53:12:c2:6b:5e:4a:8b:cd:3e:
                    ce:a2:06:9c:44:bf:96:89:99:fd:0e:6a:49:2a:65:
                    e3:be:94:1b:6e:25:de:50:1c:50:fc:1e:17:d3:28:
                    16:22:cd:45:91:72:9a:f9:0d:86:4d:ad:9d:13:1c:
                    19:d4:19:ae:22:30:a2:82:22:bd:5d:45:dc:c8:8e:
                    d7:4d:12:d3:2e:d1:ed:41:92:74:07:4e:59:61:85:
                    3d:94:8e:a6:03:d5:70:bd:ab:a4:b5:0e:d3:24:83:
                    d8:21:ba:96:d0:1f:bc:4c:9a:da:ab:f8:f6:d4:2f:
                    38:4e:59:65:06:bb:37:a0:e5:1f:4c:03:e6:26:52:
                    29:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:0A:6D:06:FB:F7:88:58:39:B8:B3:98:69:AB:33:8E:D7:21:0A
            X509v3 Authority Key Identifier:
                keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fa:29:a1:1f:eb:eb:d1:31:9b:8f:a1:68:9e:10:df:16:f8:
         ce:4f:de:2e:0e:5b:72:59:57:8d:62:81:a7:63:26:2b:f3:a1:
         6d:d8:a6:90:da:68:28:6d:3a:8b:55:20:39:b6:e9:07:47:29:
         2b:d3:3a:7d:78:6b:67:73:de:16:ac:5a:8a:b5:96:21:f8:f4:
         66:12:97:b7:41:5a:90:bf:58:cc:08:9a:43:6f:2c:49:54:06:
         9a:20:57:df:52:b2:97:69:eb:cd:ec:79:be:90:31:60:5f:67:
         57:f2:7c:c7:83:69:5f:cd:a1:5a:98:ce:16:f4:95:2c:fa:3d:
         fa:a4:3a:83:7f:dd:b2:7c:34:20:91:cd:e3:6f:cd:a9:ec:f3:
         f7:e0:9a:fa:01:fe:9a:7a:cd:e8:13:b6:6c:1d:80:86:85:d8:
         ec:f8:ff:61:33:13:26:b5:04:b9:71:db:d8:ea:f9:8e:79:e3:
         cc:60:8a:ea:88:52:1f:47:21:d3:c8:60:47:97:e0:5c:a1:8a:
         9a:cc:7d:b0:03:5e:9d:42:7b:d1:99:59:93:2b:2d:bf:6c:c2:
         b2:0f:99:97:95:f4:11:47:3c:43:87:58:49:4f:f2:cf:1d:a8:
         c2:e0:49:f2:62:0b:f3:51:c7:f3:ca:4f:97:0c:a6:b9:45:20:
         4e:09:71:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtC2Ho4JelNTyV5gk9x+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzBkNWIxMDZiODFhOTI5MjRlYTJiYzUxMzlmYmI1ZWUx
MTg2ZGQwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD
Eyg2NTM5MGE2ZDA2ZmJmNzg4NTgzOWI4YjM5ODY5YWIzMzhlZDcyMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJwP3BCz4bagggc/Zj/3M78Ca0g
j159GjNWl15oKmW5hPtrzhbMeDhgPOvvri6bBZ/T60RL3ieNrhpsMvMgvVr7ACXC
q/mj3qx0OzfHUy/gauJHwxT4fDfMun15Q+tPfavBXWQvtepolI9dsHLV8Frt4faa
LDvC6HQdtXZTEsJrXkqLzT7OogacRL+WiZn9DmpJKmXjvpQbbiXeUBxQ/B4X0ygW
Is1FkXKa+Q2GTa2dExwZ1BmuIjCigiK9XUXcyI7XTRLTLtHtQZJ0B05ZYYU9lI6m
A9VwvauktQ7TJIPYIbqW0B+8TJraq/j21C84TlllBrs3oOUfTAPmJlIp/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU5Cm0G+/eIWDm4s5hpqzOO1yEKMB8GA1UdIwQY
MBaAFNPA1bEGuBqSkk6ivFE5+7XuEYbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYt
YmM1MTA0YTM4NWUyLzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYtYmM1MTA0YTM4NWUy
LzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfopoR/r
69Exm4+haJ4Q3xb4zk/eLg5bcllXjWKBp2MmK/OhbdimkNpoKG06i1UgObbpB0cp
K9M6fXhrZ3PeFqxairWWIfj0ZhKXt0FakL9YzAiaQ28sSVQGmiBX31Kyl2nrzex5
vpAxYF9nV/J8x4NpX82hWpjOFvSVLPo9+qQ6g3/dsnw0IJHN42/Nqezz9+Ca+gH+
mnrN6BO2bB2AhoXY7Pj/YTMTJrUEuXHb2Or5jnnjzGCK6ohSH0ch08hgR5fgXKGK
msx9sANenUJ70ZlZkystv2zCsg+Zl5X0EUc8Q4dYSU/yzx2owuBJ8mIL81HH88pP
lwymuUUgTglxgw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:59 2026 by rpki-client