This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File:                     H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier:          5pkfk8Yll8VfUhjrFXFgCtlXltbW4NmsoV2Gh1Tg9QY=
Subject key identifier:   E4:8F:70:7B:75:3D:5E:ED:38:E3:F9:CC:71:D1:49:AC:98:5D:8E:E1
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer:       /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial:       019C427DE34BF9518E045C937058F06D05FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 13:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:12 +0000
Files and hashes:         1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: HaIjdfsAWMwQaDcFAV3Kbi5IzuKdbx3CZ4T9S0CTV5A=)
                          2: RSlKJ47ZOH9GCCr-xIYMK2LLSWc.roa (hash: 3RYq9n5ZhOA7UIzbYRXCSqMy81IkcbK2jzEXaTOoVgs=)
                          3: pMGks9XR2PtjyhKnTy_F3kNa4rY.roa (hash: J9G16mKmMA0mVTOnCa9rAVXWZcc6RGgn7DztPN3+ldk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:e3:4b:f9:51:8e:04:5c:93:70:58:f0:6d:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
        Validity
            Not Before: Feb  9 13:01:12 2026 GMT
            Not After : Feb 10 13:01:12 2026 GMT
        Subject: CN=e48f707b753d5eed38e3f9cc71d149ac985d8ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:fb:01:13:52:5b:41:ad:ce:15:99:ee:65:
                    9f:f5:dd:7f:f8:f8:23:4b:09:dc:69:7b:86:45:62:
                    ed:2b:aa:28:ee:86:db:96:6d:68:13:e7:e7:f3:e3:
                    c6:e4:96:09:4e:de:e8:7a:77:25:81:a0:d7:84:91:
                    df:ef:a8:84:e6:ff:03:37:52:b6:d5:9b:9f:42:45:
                    44:bf:72:86:90:36:8d:63:a4:7c:91:86:19:14:eb:
                    ec:e4:93:78:7e:4c:a8:46:77:80:b8:2e:be:29:c7:
                    df:1c:ee:15:f6:b2:2c:0a:8c:02:d5:f9:4a:c5:a6:
                    19:20:54:e2:c7:4e:01:6b:99:d2:4c:a3:27:ea:ea:
                    3d:ff:bf:81:b8:25:c0:01:10:0d:a8:c6:7f:5a:5c:
                    6b:f1:4b:8a:b3:5e:0c:13:df:cc:cc:da:7b:a9:b8:
                    8b:3c:bd:68:d1:9e:22:f9:fb:d9:b8:de:24:45:92:
                    cf:bb:f2:dc:70:d9:3f:59:8b:5d:ef:dc:38:f7:cc:
                    b1:7d:a5:93:bc:6b:74:43:3c:65:f2:5c:75:d0:e2:
                    a2:ae:35:08:69:55:84:83:d1:1f:71:16:1c:63:1e:
                    b6:08:d1:db:3f:46:60:74:77:d4:c3:37:39:f4:9c:
                    75:1d:c3:a6:03:f3:d1:81:09:e8:bd:9a:42:02:df:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8F:70:7B:75:3D:5E:ED:38:E3:F9:CC:71:D1:49:AC:98:5D:8E:E1
            X509v3 Authority Key Identifier:
                keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:ea:74:57:4b:9b:2c:7f:d8:4f:4c:cf:2e:d0:79:b4:b6:
         85:9f:73:57:8a:f5:06:5d:f2:f9:b2:eb:3f:1b:09:99:d6:9f:
         96:c1:59:31:45:45:b1:8b:e9:e8:58:e7:f3:d4:51:22:f7:11:
         65:7b:9d:2f:b5:b6:d7:4b:29:56:82:09:20:ed:65:c6:c8:f5:
         24:48:de:91:34:46:3f:cb:75:67:c0:a5:13:56:7f:c5:aa:d9:
         6f:11:40:a9:b2:15:5c:07:5f:a9:23:2d:10:ff:88:aa:0b:4c:
         19:c7:aa:b0:ca:68:9a:18:0d:eb:77:6a:5b:52:9f:c2:70:0a:
         06:b3:70:7e:ea:4b:11:6e:d0:a8:ac:b6:03:cb:74:95:c7:55:
         7f:51:e7:c1:a1:66:6c:c5:96:f0:4b:0d:82:ba:90:85:db:12:
         4d:98:d9:e1:50:06:da:93:78:e5:b3:38:38:35:57:44:b1:15:
         e1:eb:42:28:ae:6e:4f:87:6a:50:93:e9:ce:20:8e:a8:72:c1:
         8e:4c:f2:25:3f:5b:63:c2:9a:54:58:37:a9:36:b9:4b:20:f9:
         18:c3:de:1d:c5:94:bc:0a:bd:b4:73:28:a9:d2:2a:e8:03:29:
         14:0f:41:7d:a0:2f:b6:62:15:3c:03:ba:d4:c5:76:c4:24:b4:
         6e:b2:17:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfeNL+VGOBFyTcFjwbQX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNWNmNmQxMjBlMjgxMzhiMGFhMmZjODNjYmE5YjBlOTY3
OTZjMzYwHhcNMjYwMjA5MTMwMTEyWhcNMjYwMjEwMTMwMTEyWjAzMTEwLwYDVQQD
EyhlNDhmNzA3Yjc1M2Q1ZWVkMzhlM2Y5Y2M3MWQxNDlhYzk4NWQ4ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRP7ARNSW0GtzhWZ7mWf9d1/+Pgj
SwncaXuGRWLtK6oo7obblm1oE+fn8+PG5JYJTt7oenclgaDXhJHf76iE5v8DN1K2
1ZufQkVEv3KGkDaNY6R8kYYZFOvs5JN4fkyoRneAuC6+KcffHO4V9rIsCowC1flK
xaYZIFTix04Ba5nSTKMn6uo9/7+BuCXAARANqMZ/Wlxr8UuKs14ME9/MzNp7qbiL
PL1o0Z4i+fvZuN4kRZLPu/LccNk/WYtd79w498yxfaWTvGt0Qzxl8lx10OKirjUI
aVWEg9EfcRYcYx62CNHbP0ZgdHfUwzc59Jx1HcOmA/PRgQnovZpCAt9K1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSPcHt1PV7tOOP5zHHRSayYXY7hMB8GA1UdIwQY
MBaAFB9c9tEg4oE4sKovyDy6mw6WeWw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTIt
NjM4MzFhZTk1MWVmLzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTItNjM4MzFhZTk1MWVm
LzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilvqdFdL
myx/2E9Mzy7QebS2hZ9zV4r1Bl3y+bLrPxsJmdaflsFZMUVFsYvp6Fjn89RRIvcR
ZXudL7W210spVoIJIO1lxsj1JEjekTRGP8t1Z8ClE1Z/xarZbxFAqbIVXAdfqSMt
EP+IqgtMGceqsMpomhgN63dqW1KfwnAKBrNwfupLEW7QqKy2A8t0lcdVf1HnwaFm
bMWW8EsNgrqQhdsSTZjZ4VAG2pN45bM4ODVXRLEV4etCKK5uT4dqUJPpziCOqHLB
jkzyJT9bY8KaVFg3qTa5SyD5GMPeHcWUvAq9tHMoqdIq6AMpFA9BfaAvtmIVPAO6
1MV2xCS0brIXPA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:50 2026 by rpki-client