This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File:                     1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier:          eEBpoBxMnoPMR5K+qLhSSjCpoqhWk7qQhZprUmayFio=
Subject key identifier:   58:9B:79:76:19:D1:94:4F:60:AD:17:6E:B6:51:2F:58:11:E6:AD:C2
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer:       /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial:       019C438FAE5C7DA27E2183826487881B4BA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number:          181B
Signing time:             Mon 09 Feb 2026 18:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:15 +0000
Files and hashes:         1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: qej8G7U4P/YUkzwqOLsHiPmsEmJYUgi2GKC4DPeCckY=)
                          2: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (hash: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas=)
                          3: 6-xQbUlUaR82Mjs6L91ilC6T9zk.roa (hash: 3yF/4C6JYKybBw99BMZ6GkxatUw24XNyWwCB72QH0u0=)
                          4: INUpirlxyhCbq85VbAW6ztdQs4k.roa (hash: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0=)
                          5: OroJQKCq7I4yVcFTm6lWNUxxqrw.roa (hash: nDA5smDMOF4n6Nj5rxqPI/iYhWZmpnNfYaYuSp7sOUs=)
                          6: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (hash: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg=)
                          7: tkpEoHGZpIghQKYcH3ib7a_UYzc.roa (hash: zwqWB09HKwVn6JH+X6zRRmI8bgDkYNFkHNiX4G55ZOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:ae:5c:7d:a2:7e:21:83:82:64:87:88:1b:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
        Validity
            Not Before: Feb  9 18:00:15 2026 GMT
            Not After : Feb 10 18:00:15 2026 GMT
        Subject: CN=589b797619d1944f60ad176eb6512f5811e6adc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:b7:ff:e6:ec:d4:ce:77:48:77:6f:f4:6f:
                    3a:a2:ce:a3:2b:66:0f:0c:13:36:82:f7:fe:b7:e8:
                    c7:4c:af:ea:2b:9a:01:cf:c3:fb:1f:e2:2e:cb:30:
                    73:d9:3c:df:ff:01:eb:ab:10:1c:5c:a3:e5:ad:e6:
                    38:27:e6:65:c0:69:aa:49:18:f9:d0:52:8d:e7:fb:
                    f3:a0:a4:fd:19:8a:c0:1c:ae:b0:dd:bd:c9:bf:48:
                    f2:21:e7:19:2d:2c:24:93:63:7e:16:74:a8:d0:5c:
                    21:c8:dd:23:39:9a:4f:d8:57:50:6a:a2:f1:91:35:
                    97:7d:46:ba:d8:2a:67:60:14:cb:d2:13:00:f0:ce:
                    37:04:6a:57:6f:4a:06:90:57:e3:56:77:fe:50:83:
                    3e:a7:6b:dd:d2:db:99:5e:77:9e:ba:21:4a:42:4d:
                    e7:c1:b1:99:91:88:2d:03:3d:f7:42:28:6f:98:33:
                    28:49:9b:70:05:75:11:34:22:b5:f2:06:23:4f:25:
                    25:e9:ee:bb:22:b7:1d:43:46:90:04:0b:73:24:bc:
                    52:cf:3e:98:89:1b:d6:b6:98:35:d4:76:16:77:2a:
                    ad:3a:e2:cd:19:b3:1f:99:32:92:fe:9e:ec:02:85:
                    72:2f:60:ae:18:ea:94:ff:a4:cb:d8:36:5f:4f:45:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:79:76:19:D1:94:4F:60:AD:17:6E:B6:51:2F:58:11:E6:AD:C2
            X509v3 Authority Key Identifier:
                keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c5:d6:3c:ff:09:b1:ba:49:9b:c9:1c:83:6c:6a:9d:42:b0:
         cf:86:23:8c:07:af:3b:7e:a3:d3:88:17:c8:29:87:dd:29:9c:
         07:b6:56:0e:f1:96:02:44:9e:9d:00:98:80:c8:d1:e7:c8:7e:
         fc:db:05:93:61:55:00:e1:c4:b5:c6:0b:91:5b:a7:38:35:c6:
         88:ac:4c:3e:16:51:45:31:5b:da:24:8d:71:00:3f:bc:01:e4:
         6f:2d:4d:9d:a0:b8:47:12:69:d3:94:1c:13:8e:8e:4f:5f:3f:
         02:89:d4:87:85:97:74:5f:97:46:31:75:33:ba:0b:c9:a3:28:
         47:65:e2:f3:ae:50:f7:4e:95:5d:25:8b:77:18:bb:c1:1f:ec:
         0a:dc:9b:3d:f7:0d:8a:3e:63:2d:0b:1f:f9:fa:5b:4f:a7:72:
         c2:b8:b4:7b:30:7e:f8:42:91:b0:0c:23:6a:e7:c5:88:0e:a3:
         6e:57:a3:01:ec:89:4d:7f:54:d2:68:30:bc:3a:a7:54:19:9c:
         a0:9e:6b:8d:e9:35:71:a3:e2:b8:ce:b0:42:fb:d0:58:8b:91:
         35:db:b6:18:8f:64:a1:e9:db:b3:9e:1f:f2:62:32:49:e5:1d:
         e7:b1:41:c4:7b:8d:a9:46:c3:55:4c:99:71:20:61:95:38:6e:
         47:14:ef:d3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxDj65cfaJ+IYOCZIeIG0ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1
MGQ4MTMwHhcNMjYwMjA5MTgwMDE1WhcNMjYwMjEwMTgwMDE1WjAzMTEwLwYDVQQD
Eyg1ODliNzk3NjE5ZDE5NDRmNjBhZDE3NmViNjUxMmY1ODExZTZhZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3de3/+bs1M53SHdv9G86os6jK2YP
DBM2gvf+t+jHTK/qK5oBz8P7H+IuyzBz2Tzf/wHrqxAcXKPlreY4J+ZlwGmqSRj5
0FKN5/vzoKT9GYrAHK6w3b3Jv0jyIecZLSwkk2N+FnSo0FwhyN0jOZpP2FdQaqLx
kTWXfUa62CpnYBTL0hMA8M43BGpXb0oGkFfjVnf+UIM+p2vd0tuZXneeuiFKQk3n
wbGZkYgtAz33QihvmDMoSZtwBXURNCK18gYjTyUl6e67IrcdQ0aQBAtzJLxSzz6Y
iRvWtpg11HYWdyqtOuLNGbMfmTKS/p7sAoVyL2CuGOqU/6TL2DZfT0WBlwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFibeXYZ0ZRPYK0XbrZRL1gR5q3CMB8GA1UdIwQY
MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0
LTJmYmIyMDhhZDE4Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM3LzM2MTkwZC0xYzZjLTQ4YzYtYTQxNC0yZmJiMjA4YWQx
ODIvMS8xLWNuZ01Gei0xWGxFU0hNcWl3dllRblJRMkJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsXW
PP8JsbpJm8kcg2xqnUKwz4YjjAevO36j04gXyCmH3SmcB7ZWDvGWAkSenQCYgMjR
58h+/NsFk2FVAOHEtcYLkVunODXGiKxMPhZRRTFb2iSNcQA/vAHkby1NnaC4RxJp
05QcE46OT18/AonUh4WXdF+XRjF1M7oLyaMoR2Xi865Q906VXSWLdxi7wR/sCtyb
PfcNij5jLQsf+fpbT6dywri0ezB++EKRsAwjaufFiA6jblejAeyJTX9U0mgwvDqn
VBmcoJ5rjek1caPiuM6wQvvQWIuRNdu2GI9koenbs54f8mIySeUd57FBxHuNqUbD
VUyZcSBhlThuRxTv0w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:01:49 2026 by rpki-client