This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File:                     cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier:          3jOs2TkcwlA+U/e0dISlhLXwqDNTOdXN2OtdA5YdUX0=
Subject key identifier:   D3:95:99:99:05:05:D6:A3:3C:64:25:D4:B8:35:B5:F9:49:A8:32:51
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer:       /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial:       019C42EB3C50CE1318FBB7DCC5494FF088D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 15:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:38 +0000
Files and hashes:         1: HukEo3cVqcCZCNkQC8Fo0OdcPV8.roa (hash: uaWWBhq83jLIq6e0tcD+B+F+JyjozNUJczctcyW3h1k=)
                          2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: 52oIOpTYVCu6//na1UnMciCIx8jA18BeOwb42S+IbAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:3c:50:ce:13:18:fb:b7:dc:c5:49:4f:f0:88:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
        Validity
            Not Before: Feb  9 15:00:38 2026 GMT
            Not After : Feb 10 15:00:38 2026 GMT
        Subject: CN=d39599990505d6a33c6425d4b835b5f949a83251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:ff:7f:62:cb:77:54:84:15:8f:79:8e:b8:
                    46:79:dc:df:ff:f7:40:4d:2c:31:42:b1:4b:7c:ed:
                    0f:95:53:1c:a8:8b:7e:05:b9:c2:f1:ab:06:19:ba:
                    23:e8:7b:95:9f:0c:81:e5:4c:26:9a:1c:c3:d0:fd:
                    9a:e3:7d:f7:15:dc:4f:11:36:f1:20:d6:23:a9:db:
                    44:35:16:8f:84:cf:e5:d4:c2:91:6f:86:10:b9:33:
                    38:f4:2c:64:6e:1f:af:0d:ba:b1:5a:01:b7:3a:6c:
                    f0:ee:30:7c:ac:40:0d:24:96:a1:67:ce:98:06:05:
                    04:a7:ae:e2:0b:4b:33:31:8d:8a:50:e3:b4:ef:7f:
                    ed:65:8e:7f:31:61:3b:3f:14:ad:6c:38:44:f1:b8:
                    83:c8:9d:97:bb:2d:e9:44:d4:c9:fd:34:e4:a4:e3:
                    ef:b7:1d:a1:32:c7:5d:12:76:53:7a:37:51:89:46:
                    44:6b:95:13:a8:23:54:f8:0b:b3:cd:1e:c2:12:81:
                    6c:15:bc:cd:02:90:cb:99:58:83:c8:bb:79:01:c9:
                    87:cc:9c:2f:11:ef:36:3c:1b:9e:af:f8:8d:2f:6d:
                    3b:06:a7:9e:0d:80:ba:7c:19:57:a5:b6:11:18:78:
                    f6:1a:8a:e9:4b:f8:e6:eb:66:d5:9d:39:55:a8:68:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:99:99:05:05:D6:A3:3C:64:25:D4:B8:35:B5:F9:49:A8:32:51
            X509v3 Authority Key Identifier:
                keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f5:e8:8d:24:c6:ec:21:dc:b4:03:a0:e5:e2:f3:60:b3:2a:
         5f:2e:fe:ab:97:e4:48:94:ea:d2:bf:a3:b3:ca:9d:ec:98:99:
         94:58:81:d9:93:dd:57:a6:d0:fc:88:87:41:21:fd:ff:f4:06:
         e3:5a:63:c0:5a:02:74:fd:0a:e4:ec:34:dc:36:7d:c1:bf:4e:
         4f:ad:32:d6:28:4d:fb:65:1d:02:8d:40:06:fc:47:dd:b8:9b:
         d2:04:3a:00:8d:c4:72:4e:34:38:e6:0c:4d:07:65:a9:5d:6e:
         46:ce:0f:79:bc:2b:5c:d2:f0:cb:8e:70:ef:20:fc:46:c9:1e:
         fd:61:6d:95:4c:6e:3a:9e:5e:55:dc:ec:d8:4f:af:c6:b8:9c:
         d0:e0:c5:2b:7f:75:25:99:7b:53:1f:e1:3c:ae:6a:cd:7e:f8:
         3b:c8:04:06:c2:87:73:e8:22:8f:43:fe:80:fd:e2:76:2d:8a:
         8b:a3:b6:5c:cc:33:19:96:68:b9:ea:1e:94:19:55:bc:18:83:
         17:96:71:b0:54:95:e2:f9:52:27:2d:33:5d:d7:b9:75:38:91:
         9f:4f:50:c4:cf:d6:fb:d0:34:cb:f8:1f:ca:90:1f:50:d3:0e:
         07:74:9a:2b:e6:8c:40:dd:df:45:96:df:4c:f3:29:3e:b5:c0:
         cb:ae:fe:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6zxQzhMY+7fcxUlP8IjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNjc1ZjZhNTc3OTdjNWNhOTZjM2ZiNDVlNTMxYmQzMjc4
MzAxNmMwHhcNMjYwMjA5MTUwMDM4WhcNMjYwMjEwMTUwMDM4WjAzMTEwLwYDVQQD
EyhkMzk1OTk5OTA1MDVkNmEzM2M2NDI1ZDRiODM1YjVmOTQ5YTgzMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWT/f2LLd1SEFY95jrhGedzf//dA
TSwxQrFLfO0PlVMcqIt+BbnC8asGGboj6HuVnwyB5UwmmhzD0P2a4333FdxPETbx
INYjqdtENRaPhM/l1MKRb4YQuTM49Cxkbh+vDbqxWgG3Omzw7jB8rEANJJahZ86Y
BgUEp67iC0szMY2KUOO073/tZY5/MWE7PxStbDhE8biDyJ2Xuy3pRNTJ/TTkpOPv
tx2hMsddEnZTejdRiUZEa5UTqCNU+AuzzR7CEoFsFbzNApDLmViDyLt5AcmHzJwv
Ee82PBuer/iNL207BqeeDYC6fBlXpbYRGHj2GorpS/jm62bVnTlVqGgSJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOVmZkFBdajPGQl1Lg1tflJqDJRMB8GA1UdIwQY
MBaAFHBnX2pXeXxcqWw/tF5TG9MngwFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEt
YzI3N2QzNzE2YmQ5LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hYzk0ODEtNmZjYS00MjQwLTllZDEtYzI3N2QzNzE2YmQ5
LzEvY0dkZmFsZDVmRnlwYkQtMFhsTWIweWVEQVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/XojSTG
7CHctAOg5eLzYLMqXy7+q5fkSJTq0r+js8qd7JiZlFiB2ZPdV6bQ/IiHQSH9//QG
41pjwFoCdP0K5Ow03DZ9wb9OT60y1ihN+2UdAo1ABvxH3bib0gQ6AI3Eck40OOYM
TQdlqV1uRs4PebwrXNLwy45w7yD8Rske/WFtlUxuOp5eVdzs2E+vxric0ODFK391
JZl7Ux/hPK5qzX74O8gEBsKHc+gij0P+gP3idi2Ki6O2XMwzGZZoueoelBlVvBiD
F5ZxsFSV4vlSJy0zXde5dTiRn09QxM/W+9A0y/gfypAfUNMOB3SaK+aMQN3fRZbf
TPMpPrXAy67+Pg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:43:55 2026 by rpki-client