This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File:                     ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier:          8gOeKmYxWol7WspOvYxV292jQTlXneE03n3GaVBDstw=
Subject key identifier:   F6:24:2E:BC:3D:EC:A5:9E:68:14:88:5F:92:6C:7C:FB:A0:2B:65:18
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer:       /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial:       019C40FD2B01B9ADF29CAE7128022E641926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number:          1753
Signing time:             Mon 09 Feb 2026 06:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:59 +0000
Files and hashes:         1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
                          2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: S5iSWACY9WeG2DIILL7z4QyKDtywZDCtCTOrSKJhYE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:2b:01:b9:ad:f2:9c:ae:71:28:02:2e:64:19:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
        Validity
            Not Before: Feb  9 06:00:59 2026 GMT
            Not After : Feb 10 06:00:59 2026 GMT
        Subject: CN=f6242ebc3deca59e6814885f926c7cfba02b6518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:bb:14:75:c1:8f:31:16:01:51:24:e2:39:
                    87:1e:6b:b5:83:a0:76:43:ee:08:56:dd:0f:ff:a9:
                    53:99:e2:67:76:b9:1c:f8:41:0a:72:10:3c:36:ae:
                    87:76:0d:eb:b4:2a:ab:6f:53:e3:d5:e1:8b:c4:13:
                    b3:8f:eb:6f:5e:3c:60:79:22:ec:72:51:5b:6d:61:
                    91:92:ee:5b:10:8e:54:d3:84:d3:71:fc:a0:19:1f:
                    77:1f:dd:27:c1:27:d4:e1:aa:a3:dc:7f:eb:88:e7:
                    b2:fe:87:46:bb:7b:d4:8d:f1:b6:19:78:5a:c0:c2:
                    6a:3e:02:80:4a:78:21:2a:34:5a:c3:1b:8e:ec:b0:
                    79:cf:10:30:85:89:e2:5e:fd:a4:d9:36:5c:cf:7f:
                    14:f5:31:11:7b:d1:c6:da:2f:90:cd:7b:15:4f:f6:
                    f9:04:0f:e2:0c:eb:c3:f3:4a:11:35:49:1f:6a:b3:
                    78:f9:37:b0:29:d3:be:3b:bc:02:12:fb:94:79:dd:
                    b0:18:20:77:c2:8c:c4:ff:51:eb:72:96:ad:9f:a6:
                    42:49:ae:4a:b5:c8:10:ed:e3:54:d8:56:b6:3e:03:
                    17:94:64:cd:b8:d0:b5:bd:cd:89:16:81:e2:6b:4f:
                    93:84:57:17:fe:fd:b3:1b:80:b8:69:6c:39:d7:10:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:2E:BC:3D:EC:A5:9E:68:14:88:5F:92:6C:7C:FB:A0:2B:65:18
            X509v3 Authority Key Identifier:
                keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:db:42:6f:04:e0:29:ca:b6:1e:3b:41:47:1e:1a:b1:ce:
         e2:75:9d:f4:31:ba:e5:94:68:7e:1c:85:e1:64:47:4f:e0:9b:
         93:e0:46:b9:b6:fb:20:a2:b0:71:f0:f0:f7:10:29:7f:0d:f9:
         12:af:d1:d7:c0:e2:13:4b:4d:a7:18:a4:5d:1e:52:7d:06:1b:
         ad:30:2d:66:5d:e8:05:16:2d:b0:83:56:ed:db:24:a6:34:43:
         71:9d:ae:d0:09:69:5d:a6:e6:e7:35:76:5b:ed:e4:30:3c:c7:
         45:b1:6e:07:85:33:7c:10:a5:ed:65:98:c0:f4:6b:0f:0f:4d:
         ed:94:7d:11:9e:5f:b7:7d:99:d7:95:43:4f:9e:a7:69:73:c8:
         16:1f:d4:59:90:74:9d:1b:4d:5f:02:74:16:c0:19:0c:a8:a1:
         c7:f2:40:7f:b0:95:7c:a1:f3:f6:ee:a0:c9:fb:2d:59:12:76:
         c6:95:fd:02:5a:71:58:fe:a9:e0:35:05:2f:c0:27:e7:f6:45:
         01:40:d4:11:db:eb:ba:7e:b6:50:be:07:fe:d1:8c:a1:4c:c9:
         c0:1a:90:e9:0f:6f:a7:b5:8a:0f:41:77:57:07:dd:de:d3:da:
         d8:6d:af:6f:d4:08:f1:a4:2b:f8:66:29:89:d2:7d:2f:77:e1:
         c2:77:cf:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/SsBua3ynK5xKAIuZBkmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj
OWE1YjUwHhcNMjYwMjA5MDYwMDU5WhcNMjYwMjEwMDYwMDU5WjAzMTEwLwYDVQQD
EyhmNjI0MmViYzNkZWNhNTllNjgxNDg4NWY5MjZjN2NmYmEwMmI2NTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Yu7FHXBjzEWAVEk4jmHHmu1g6B2
Q+4IVt0P/6lTmeJndrkc+EEKchA8Nq6Hdg3rtCqrb1Pj1eGLxBOzj+tvXjxgeSLs
clFbbWGRku5bEI5U04TTcfygGR93H90nwSfU4aqj3H/riOey/odGu3vUjfG2GXha
wMJqPgKASnghKjRawxuO7LB5zxAwhYniXv2k2TZcz38U9TERe9HG2i+QzXsVT/b5
BA/iDOvD80oRNUkfarN4+TewKdO+O7wCEvuUed2wGCB3wozE/1Hrcpatn6ZCSa5K
tcgQ7eNU2Fa2PgMXlGTNuNC1vc2JFoHia0+ThFcX/v2zG4C4aWw51xAPfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYkLrw97KWeaBSIX5JsfPugK2UYMB8GA1UdIwQY
MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt
ZjE5OTBiMGM3MDVhLzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh
LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQbbQm8E
4CnKth47QUceGrHO4nWd9DG65ZRofhyF4WRHT+Cbk+BGubb7IKKwcfDw9xApfw35
Eq/R18DiE0tNpxikXR5SfQYbrTAtZl3oBRYtsINW7dskpjRDcZ2u0AlpXabm5zV2
W+3kMDzHRbFuB4UzfBCl7WWYwPRrDw9N7ZR9EZ5ft32Z15VDT56naXPIFh/UWZB0
nRtNXwJ0FsAZDKihx/JAf7CVfKHz9u6gyfstWRJ2xpX9AlpxWP6p4DUFL8An5/ZF
AUDUEdvrun62UL4H/tGMoUzJwBqQ6Q9vp7WKD0F3Vwfd3tPa2G2vb9QI8aQr+GYp
idJ9L3fhwnfPHg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:47 2026 by rpki-client