This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File:                     18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier:          mvtq4jS7NaCkDxOm1VZQa8Z9hM4mgcn3JGgwDwXQibY=
Subject key identifier:   94:1D:39:2D:21:9A:EB:C3:90:3B:46:D0:2C:12:C3:C2:75:8F:56:E2
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer:       /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial:       019C427D343DBBB02EEBA51CD759AEEF30BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 13:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:27 +0000
Files and hashes:         1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: q+gteX4QaYsTT2jeS5hQ/g824Ulzkp/HJU3SCoFdgpE=)
                          2: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (hash: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:34:3d:bb:b0:2e:eb:a5:1c:d7:59:ae:ef:30:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
        Validity
            Not Before: Feb  9 13:00:27 2026 GMT
            Not After : Feb 10 13:00:27 2026 GMT
        Subject: CN=941d392d219aebc3903b46d02c12c3c2758f56e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:5b:12:79:97:5b:f2:db:e3:53:03:0d:7b:
                    9c:7d:88:ca:fb:65:b2:15:e4:36:28:6b:bc:5a:ec:
                    10:2b:ab:6f:8b:6d:0d:37:9b:73:3b:96:35:11:c7:
                    55:e2:3e:bc:99:39:06:21:79:28:eb:07:05:6b:c3:
                    ae:5e:0e:88:1e:b6:55:79:e4:b1:07:ea:5b:9c:23:
                    0f:cc:f2:2f:b9:c9:c4:3b:ac:9f:8c:88:82:41:5c:
                    a0:d0:bd:fe:6d:93:65:8f:90:7f:8e:65:7e:e0:54:
                    b9:1e:f9:6d:1e:9a:2d:0f:1d:47:e9:df:e1:d9:62:
                    65:08:a1:7b:98:6d:2e:ff:d9:0b:c4:9c:10:ee:0a:
                    c0:78:3f:88:e1:4b:07:60:bf:e9:ae:38:8f:5e:ef:
                    e6:e9:c6:bf:a6:06:ed:90:47:ce:ce:f9:51:70:7c:
                    a8:63:89:f3:0f:40:5e:c6:80:ac:dd:90:ef:42:61:
                    8d:ed:ef:ce:49:72:02:d0:ab:ce:42:28:d8:5b:52:
                    f8:dd:0a:d0:72:19:72:7a:e0:ca:16:65:66:a7:56:
                    14:05:fb:57:bd:9a:e1:1f:e0:db:7d:a4:71:2f:3c:
                    44:eb:f0:be:0f:8c:64:60:61:45:10:08:67:59:ab:
                    b8:2c:bf:0a:70:f8:a0:8d:2b:18:d4:e7:fb:fa:74:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1D:39:2D:21:9A:EB:C3:90:3B:46:D0:2C:12:C3:C2:75:8F:56:E2
            X509v3 Authority Key Identifier:
                keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:f7:f7:24:d2:c3:9a:f2:e1:05:ab:c1:45:49:3e:93:2c:
         54:5d:a2:ec:e5:93:3c:e2:54:a8:df:d6:a7:59:f3:22:23:1b:
         eb:27:86:56:09:44:cc:9b:5f:cf:e7:70:de:eb:20:15:5d:22:
         1d:76:de:9d:1b:d3:8a:ec:63:63:77:0d:d5:24:5e:46:b2:d9:
         f6:c7:13:76:51:6d:32:91:9d:9f:4c:fc:30:dd:f2:e5:52:01:
         79:d3:7a:ac:17:ba:80:7b:c1:59:ee:20:ff:58:7f:6c:fa:fb:
         12:87:d9:4c:e4:37:e9:55:ca:fd:30:46:cb:4d:34:4f:62:ac:
         20:96:ef:16:8f:7c:09:39:ad:10:f4:36:b2:9a:9e:c3:12:04:
         01:a0:6e:13:1c:71:1f:f7:63:a8:01:7d:5a:9a:5e:ab:1e:89:
         18:62:4a:47:73:e1:24:4f:13:81:55:b4:9a:21:82:46:9d:12:
         63:d7:4e:81:c1:23:17:50:6c:7b:d5:85:20:60:eb:1c:83:46:
         44:06:4e:8d:ee:43:4b:20:63:f8:bf:4c:a2:5b:df:46:37:60:
         7a:c5:8a:22:2c:7c:55:7a:ab:10:57:25:e5:40:45:e8:02:be:
         68:e7:da:9a:93:1c:37:eb:ee:2f:57:09:8f:f0:c8:35:d6:4e:
         f2:c2:10:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfTQ9u7Au66Uc11mu7zC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzE0ODc2MWI2NzAwNTMyOWFhODkxMzVkMzVhZDIzNTE3
M2JjNDgwHhcNMjYwMjA5MTMwMDI3WhcNMjYwMjEwMTMwMDI3WjAzMTEwLwYDVQQD
Eyg5NDFkMzkyZDIxOWFlYmMzOTAzYjQ2ZDAyYzEyYzNjMjc1OGY1NmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBVbEnmXW/Lb41MDDXucfYjK+2Wy
FeQ2KGu8WuwQK6tvi20NN5tzO5Y1EcdV4j68mTkGIXko6wcFa8OuXg6IHrZVeeSx
B+pbnCMPzPIvucnEO6yfjIiCQVyg0L3+bZNlj5B/jmV+4FS5HvltHpotDx1H6d/h
2WJlCKF7mG0u/9kLxJwQ7grAeD+I4UsHYL/prjiPXu/m6ca/pgbtkEfOzvlRcHyo
Y4nzD0BexoCs3ZDvQmGN7e/OSXIC0KvOQijYW1L43QrQchlyeuDKFmVmp1YUBftX
vZrhH+DbfaRxLzxE6/C+D4xkYGFFEAhnWau4LL8KcPigjSsY1Of7+nTJ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQdOS0hmuvDkDtG0CwSw8J1j1biMB8GA1UdIwQY
MBaAFNfBSHYbZwBTKaqJE101rSNRc7xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmIt
MDExNjUwZmJkNGM0LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmItMDExNjUwZmJkNGM0
LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4D39yTS
w5ry4QWrwUVJPpMsVF2i7OWTPOJUqN/Wp1nzIiMb6yeGVglEzJtfz+dw3usgFV0i
HXbenRvTiuxjY3cN1SReRrLZ9scTdlFtMpGdn0z8MN3y5VIBedN6rBe6gHvBWe4g
/1h/bPr7EofZTOQ36VXK/TBGy000T2KsIJbvFo98CTmtEPQ2spqewxIEAaBuExxx
H/djqAF9Wppeqx6JGGJKR3PhJE8TgVW0miGCRp0SY9dOgcEjF1Bse9WFIGDrHING
RAZOje5DSyBj+L9MolvfRjdgesWKIix8VXqrEFcl5UBF6AK+aOfampMcN+vuL1cJ
j/DINdZO8sIQ0Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:14 2026 by rpki-client