This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File:                     AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier:          H2lPabF+MaQ8zZWjKLWyitz1kmU8qz8O1Bwtu5f6fwY=
Subject key identifier:   BE:37:88:66:14:19:2E:12:9B:24:D4:26:85:77:5F:B1:8D:65:96:26
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer:       /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial:       019C40FD1ACC315B1DD73716E566DCA122B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number:          0D84
Signing time:             Mon 09 Feb 2026 06:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:55 +0000
Files and hashes:         1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: F8mk+n5GBOkkCq8le0Rhq3cpyEvhLWDC8XGCyvfhC88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:1a:cc:31:5b:1d:d7:37:16:e5:66:dc:a1:22:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
        Validity
            Not Before: Feb  9 06:00:55 2026 GMT
            Not After : Feb 10 06:00:55 2026 GMT
        Subject: CN=be37886614192e129b24d42685775fb18d659626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:b1:a4:46:a4:7d:a5:6f:56:34:17:22:44:
                    37:ec:00:ab:46:e9:89:83:38:28:53:1d:21:50:ca:
                    30:b2:43:24:7b:99:74:ed:f2:66:26:c2:28:68:9b:
                    8b:58:af:ed:cf:17:21:40:3b:38:16:7e:ff:0c:b5:
                    f5:74:6e:d5:e7:f7:a9:a0:9a:6e:b7:ca:f3:aa:f1:
                    57:c1:bf:7b:f9:a5:01:9f:fc:3c:4c:c2:1d:34:28:
                    da:16:99:11:a0:f1:d8:d5:94:32:d3:14:a9:b4:72:
                    cb:c4:e6:55:9e:2e:f2:a0:f3:c1:6d:4d:16:43:27:
                    9f:11:3f:04:70:0e:b3:d0:f1:de:13:7b:19:b1:d0:
                    0f:ed:2b:d2:4b:cd:fc:48:92:c4:c6:d1:df:d5:d1:
                    77:5d:ae:2d:40:39:ee:a0:5c:66:14:8f:34:a3:33:
                    23:4d:71:0c:0a:b2:1d:f6:02:db:43:cc:a7:e5:64:
                    6d:4d:0d:21:56:38:0e:f5:4c:5c:36:d2:46:cf:82:
                    d5:bb:24:46:35:06:1a:ed:a4:f1:c9:a7:72:92:ec:
                    cf:e7:6c:09:23:45:f1:23:a1:6f:d8:1e:8a:39:af:
                    f4:31:37:33:b4:8f:81:a7:97:ba:0f:e0:c1:ba:4b:
                    da:d3:a0:8e:68:6b:53:23:d7:11:ce:c5:27:d1:73:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:88:66:14:19:2E:12:9B:24:D4:26:85:77:5F:B1:8D:65:96:26
            X509v3 Authority Key Identifier:
                keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:90:73:ea:c6:34:3f:39:21:92:39:39:40:f2:b4:69:e1:33:
         87:f3:bb:9c:94:64:55:ad:00:6e:47:ac:e4:e0:43:d8:e7:9b:
         3f:27:03:2b:3e:13:cc:c8:2e:92:39:18:54:0a:d1:e0:5d:db:
         03:12:af:8d:17:c9:f2:5c:f2:0e:d6:fc:06:4a:24:0e:cd:78:
         6f:16:05:fe:eb:1a:2c:6e:2f:57:b8:dd:4e:bc:5d:d8:d8:64:
         a2:3c:9a:12:8c:fb:cf:91:9c:3e:64:df:af:42:a9:3d:fa:91:
         c8:88:40:30:4b:ca:45:61:32:fa:80:36:e1:bc:4f:29:9d:b8:
         a5:9d:6c:0a:c8:2f:92:d4:f7:ad:60:c8:41:61:44:48:3a:97:
         39:22:97:ed:5b:de:a5:19:68:6e:a9:c5:3c:53:e7:61:8f:72:
         fd:0f:3e:dc:15:f7:76:67:fe:53:6e:c1:98:e0:09:35:1b:35:
         5c:20:02:a3:58:1b:63:94:b2:bb:3f:1a:d3:3b:d5:cb:10:16:
         8f:3c:03:fe:90:2b:3e:e4:b6:b9:56:44:b8:34:d6:fb:83:6e:
         d9:b4:13:7e:ee:d5:b5:28:a8:9c:87:fa:9f:b0:14:a3:2e:52:
         31:b1:17:47:b9:13:62:ef:2d:ab:bb:00:24:10:c2:23:11:06:
         c8:d9:c8:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/RrMMVsd1zcW5WbcoSKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzk2OTJmYjFhNDA5ZmYzNGQxYWYzYjgyYjhlM2RhNjQ2
NzVjMzIwHhcNMjYwMjA5MDYwMDU1WhcNMjYwMjEwMDYwMDU1WjAzMTEwLwYDVQQD
EyhiZTM3ODg2NjE0MTkyZTEyOWIyNGQ0MjY4NTc3NWZiMThkNjU5NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9KxpEakfaVvVjQXIkQ37ACrRumJ
gzgoUx0hUMowskMke5l07fJmJsIoaJuLWK/tzxchQDs4Fn7/DLX1dG7V5/epoJpu
t8rzqvFXwb97+aUBn/w8TMIdNCjaFpkRoPHY1ZQy0xSptHLLxOZVni7yoPPBbU0W
QyefET8EcA6z0PHeE3sZsdAP7SvSS838SJLExtHf1dF3Xa4tQDnuoFxmFI80ozMj
TXEMCrId9gLbQ8yn5WRtTQ0hVjgO9UxcNtJGz4LVuyRGNQYa7aTxyadykuzP52wJ
I0XxI6Fv2B6KOa/0MTcztI+Bp5e6D+DBukva06COaGtTI9cRzsUn0XM8EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL43iGYUGS4SmyTUJoV3X7GNZZYmMB8GA1UdIwQY
MBaAFAHJaS+xpAn/NNGvO4K449pkZ1wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgt
ZGRiODkwZDc4ZmU5LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgtZGRiODkwZDc4ZmU5
LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5Bz6sY0
Pzkhkjk5QPK0aeEzh/O7nJRkVa0Abkes5OBD2OebPycDKz4TzMgukjkYVArR4F3b
AxKvjRfJ8lzyDtb8BkokDs14bxYF/usaLG4vV7jdTrxd2NhkojyaEoz7z5GcPmTf
r0KpPfqRyIhAMEvKRWEy+oA24bxPKZ24pZ1sCsgvktT3rWDIQWFESDqXOSKX7Vve
pRlobqnFPFPnYY9y/Q8+3BX3dmf+U27BmOAJNRs1XCACo1gbY5Syuz8a0zvVyxAW
jzwD/pArPuS2uVZEuDTW+4Nu2bQTfu7VtSionIf6n7AUoy5SMbEXR7kTYu8tq7sA
JBDCIxEGyNnI0A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:25 2026 by rpki-client