This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File:                     1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier:          eCnPfYcNt0YeCuoyFrx4dGzqrNquQk4agmacptY2jYQ=
Subject key identifier:   6B:A3:90:4C:4D:06:01:66:68:0A:67:23:89:38:92:01:FF:C5:0E:69
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer:       /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial:       019C43FDFABDEEA96EE05768DC8479B05B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 20:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:44 +0000
Files and hashes:         1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: 6lV+TO+XcrP1E1jqKeuUDy6mjrb0W2rhxZQrNDU26Ns=)
                          2: iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa (hash: M7YGFKI/ySmqCxDcz0c66t0IiUvrgr0f2weY7qCCabo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:fa:bd:ee:a9:6e:e0:57:68:dc:84:79:b0:5b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
        Validity
            Not Before: Feb  9 20:00:44 2026 GMT
            Not After : Feb 10 20:00:44 2026 GMT
        Subject: CN=6ba3904c4d060166680a672389389201ffc50e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:b4:ef:9f:09:0f:1b:13:3d:14:7c:05:55:
                    43:a1:3e:4f:22:98:33:69:c9:a1:f2:09:e7:78:31:
                    e7:0e:01:84:17:65:da:da:0e:cc:c8:e8:00:5b:e2:
                    52:40:78:5b:56:19:d3:e2:15:f6:8c:04:6f:53:18:
                    29:2d:1a:bd:24:6b:f8:9c:c1:1b:51:41:14:39:58:
                    36:ed:37:f1:69:04:e3:3c:f5:c5:fa:4a:d5:bd:fe:
                    9b:c1:34:f1:90:92:a1:a6:cf:d0:b4:28:b6:b2:e8:
                    45:07:c8:8f:d7:9e:5a:20:99:5f:6e:22:33:66:cf:
                    86:76:a7:27:d8:6f:9d:91:3c:16:e0:0f:66:b4:ed:
                    a3:fe:ad:82:c2:0e:34:ed:39:8d:42:aa:66:94:f8:
                    b7:36:4a:23:15:26:71:7f:16:9f:ff:96:3e:21:9d:
                    01:1b:ba:8a:fb:64:e2:24:11:5f:34:ea:f8:7d:31:
                    29:9d:8c:96:0d:0b:b5:9c:7e:29:28:d7:0f:7d:02:
                    fa:54:c1:da:9e:01:a2:b2:8c:6c:25:1b:10:38:87:
                    d9:ae:b1:5e:4f:f0:1c:08:d2:b9:df:c0:2f:67:7f:
                    a7:20:40:f2:ca:80:70:80:a9:6a:10:77:a8:02:15:
                    43:f8:ea:93:36:ca:83:60:82:0d:fe:6a:d5:07:d8:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A3:90:4C:4D:06:01:66:68:0A:67:23:89:38:92:01:FF:C5:0E:69
            X509v3 Authority Key Identifier:
                keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:31:9c:fc:1f:71:b8:05:61:fa:62:57:4d:5a:d7:4f:c3:
         89:d4:82:5b:29:7c:f0:12:69:94:5c:8e:ca:d3:ff:94:67:b2:
         14:ab:25:73:f1:0b:6c:01:4a:80:3e:66:c9:65:c5:36:6f:ab:
         5f:0d:d8:8d:3a:2c:14:51:be:e8:bf:3d:fd:d5:ce:3f:29:b6:
         f0:e3:99:80:7f:d9:5c:d5:31:22:03:57:b1:10:1e:cd:b1:53:
         d3:62:13:8d:c8:7f:7a:d4:d0:4c:f8:62:87:c9:06:47:91:43:
         e4:06:0b:dd:b6:df:8f:56:7e:c0:04:c1:0f:6a:14:f8:44:23:
         f3:3d:38:f5:70:75:30:13:98:1c:9c:cf:75:cc:74:b3:9f:cb:
         f0:b0:98:3c:da:e7:9c:ad:12:bf:c4:c8:14:32:8a:f5:4d:4a:
         08:80:bd:d8:62:88:c3:a6:6b:96:32:dc:ec:32:cd:ed:7d:88:
         23:9f:cf:07:c0:a5:50:62:6e:3f:c9:51:cf:77:d1:22:8d:e3:
         a7:32:10:00:6f:ae:af:50:79:8f:17:bd:32:22:38:f8:af:d7:
         ec:a3:b3:71:7b:0d:2b:72:85:5d:d5:53:4d:65:8a:29:d3:ee:
         b5:46:dd:90:80:4f:bf:64:4e:ec:8b:49:90:1a:e6:5d:76:e7:
         cf:25:42:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/fq97qlu4Fdo3IR5sFtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmRkNTk2MjY3ZDU2ZjdjZTU2ZWJmYWVjODZhMzI3MDhm
ZWRlMDAwHhcNMjYwMjA5MjAwMDQ0WhcNMjYwMjEwMjAwMDQ0WjAzMTEwLwYDVQQD
Eyg2YmEzOTA0YzRkMDYwMTY2NjgwYTY3MjM4OTM4OTIwMWZmYzUwZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkum0758JDxsTPRR8BVVDoT5PIpgz
acmh8gnneDHnDgGEF2Xa2g7MyOgAW+JSQHhbVhnT4hX2jARvUxgpLRq9JGv4nMEb
UUEUOVg27TfxaQTjPPXF+krVvf6bwTTxkJKhps/QtCi2suhFB8iP155aIJlfbiIz
Zs+Gdqcn2G+dkTwW4A9mtO2j/q2Cwg407TmNQqpmlPi3NkojFSZxfxaf/5Y+IZ0B
G7qK+2TiJBFfNOr4fTEpnYyWDQu1nH4pKNcPfQL6VMHangGisoxsJRsQOIfZrrFe
T/AcCNK538AvZ3+nIEDyyoBwgKlqEHeoAhVD+OqTNsqDYIIN/mrVB9juFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGujkExNBgFmaApnI4k4kgH/xQ5pMB8GA1UdIwQY
MBaAFNT91ZYmfVb3zlbr+uyGoycI/t4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAt
NjdhODdkOGEzYjliLzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAtNjdhODdkOGEzYjli
LzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJX4xnPwf
cbgFYfpiV01a10/DidSCWyl88BJplFyOytP/lGeyFKslc/ELbAFKgD5myWXFNm+r
Xw3YjTosFFG+6L89/dXOPym28OOZgH/ZXNUxIgNXsRAezbFT02ITjch/etTQTPhi
h8kGR5FD5AYL3bbfj1Z+wATBD2oU+EQj8z049XB1MBOYHJzPdcx0s5/L8LCYPNrn
nK0Sv8TIFDKK9U1KCIC92GKIw6ZrljLc7DLN7X2II5/PB8ClUGJuP8lRz3fRIo3j
pzIQAG+ur1B5jxe9MiI4+K/X7KOzcXsNK3KFXdVTTWWKKdPutUbdkIBPv2RO7ItJ
kBrmXXbnzyVCDg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:11 2026 by rpki-client