This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File:                     1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier:          2GpBsz9z6XhqrvOd4HtvQ/e8V9wUqAOWzso117zvRco=
Subject key identifier:   27:4C:CB:49:0D:C9:61:67:A2:E2:90:1E:3A:BC:A7:12:22:4B:A1:76
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer:       /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial:       019C43FDED0A2531F407FFB48F06F3A7F234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:40 +0000
Files and hashes:         1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: lAUIM3jv+OYxALimrHm1MNjaCD3ST9p2PdhWIVAwxyc=)
                          2: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (hash: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:ed:0a:25:31:f4:07:ff:b4:8f:06:f3:a7:f2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
        Validity
            Not Before: Feb  9 20:00:40 2026 GMT
            Not After : Feb 10 20:00:40 2026 GMT
        Subject: CN=274ccb490dc96167a2e2901e3abca712224ba176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:3a:ff:a7:4c:78:19:0d:d7:ad:f8:a6:61:
                    1c:f8:c1:93:7b:79:3d:b3:9f:5d:3e:05:30:05:5b:
                    d9:50:0f:15:60:d6:88:07:9a:82:0a:58:b4:8f:c7:
                    a6:68:78:16:b1:0e:6e:dc:52:08:96:90:d1:db:2c:
                    d5:bb:32:3b:fc:0e:31:6c:c3:f3:92:bc:d9:5f:2c:
                    ff:37:4a:a1:79:a2:2d:a4:33:d2:a7:81:13:1e:4d:
                    3d:05:dc:3a:30:3f:b7:8a:a0:73:bd:3f:b8:3a:0d:
                    73:5e:73:7c:ab:95:b1:a7:e3:75:d0:ce:cf:56:94:
                    62:7b:3b:8d:9c:38:f7:95:13:48:56:80:72:1d:6a:
                    a3:ca:18:99:c5:4d:4f:94:34:b2:65:fd:d1:e4:db:
                    b2:53:4a:46:c6:a4:4d:d1:79:2c:b6:ba:8a:4e:d9:
                    5c:af:ee:7f:18:d6:6b:98:86:c1:16:77:32:6c:7e:
                    16:34:61:ab:5d:42:2d:31:8b:82:d6:6d:01:4d:16:
                    d0:5e:a1:6b:5d:69:26:23:80:88:8b:42:96:3a:6b:
                    cc:b4:e1:b3:ab:8c:c4:55:96:17:97:39:dd:0a:83:
                    8e:7b:e4:9e:52:ec:0f:de:78:46:03:f4:61:9b:e5:
                    08:3b:44:3f:02:63:44:ac:ef:b1:9e:51:ee:d5:39:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4C:CB:49:0D:C9:61:67:A2:E2:90:1E:3A:BC:A7:12:22:4B:A1:76
            X509v3 Authority Key Identifier:
                keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:6f:d5:a6:24:9f:cd:b8:3e:b8:5f:21:2b:85:0c:81:43:72:
         05:5e:d5:5c:11:6b:00:1d:49:a2:25:6f:b5:60:69:dd:0e:b7:
         87:78:48:97:00:fd:3f:f7:ce:f8:43:da:62:89:e4:9f:cc:ba:
         23:1b:9a:f8:d6:44:6d:58:33:b9:65:9d:45:dc:e4:18:87:f7:
         cf:66:3f:de:e2:e3:d1:b5:4c:fb:8c:88:e1:ce:99:14:30:7b:
         db:26:24:a0:5f:07:ec:af:ef:2c:34:7e:a4:00:b5:81:c1:4c:
         d0:a0:0b:ec:af:bb:7f:5c:cb:39:5d:1b:72:6c:d7:1e:f6:f7:
         0c:ba:d3:61:c0:6b:85:4f:e0:f5:42:a8:d2:1d:4e:72:59:9d:
         e8:2a:52:73:2c:a3:4d:bb:85:05:0b:8d:5e:19:dd:f3:78:17:
         be:62:bd:58:45:10:7b:d7:5e:3f:b6:75:97:1a:d5:23:cb:3f:
         28:4d:81:75:a7:c9:60:da:17:95:c9:d8:ce:d4:66:c7:99:53:
         28:61:58:fb:a3:0a:ae:b7:00:75:c2:0d:39:06:e0:06:b3:a1:
         0a:36:c8:99:54:43:09:c4:7d:30:43:82:a5:60:c9:56:ca:e9:
         3c:0d:aa:f0:a8:e6:84:df:b9:a2:f5:20:40:af:8d:96:6c:9b:
         42:1f:fb:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/e0KJTH0B/+0jwbzp/I0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjIzMmFhMjQzMWNhNGRlNWQ4MjUyYTNjOWNjNmJiNjMw
ZDFkNDkwHhcNMjYwMjA5MjAwMDQwWhcNMjYwMjEwMjAwMDQwWjAzMTEwLwYDVQQD
EygyNzRjY2I0OTBkYzk2MTY3YTJlMjkwMWUzYWJjYTcxMjIyNGJhMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8c6/6dMeBkN1634pmEc+MGTe3k9
s59dPgUwBVvZUA8VYNaIB5qCCli0j8emaHgWsQ5u3FIIlpDR2yzVuzI7/A4xbMPz
krzZXyz/N0qheaItpDPSp4ETHk09Bdw6MD+3iqBzvT+4Og1zXnN8q5Wxp+N10M7P
VpRiezuNnDj3lRNIVoByHWqjyhiZxU1PlDSyZf3R5NuyU0pGxqRN0XkstrqKTtlc
r+5/GNZrmIbBFncybH4WNGGrXUItMYuC1m0BTRbQXqFrXWkmI4CIi0KWOmvMtOGz
q4zEVZYXlzndCoOOe+SeUuwP3nhGA/Rhm+UIO0Q/AmNErO+xnlHu1TnlcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdMy0kNyWFnouKQHjq8pxIiS6F2MB8GA1UdIwQY
MBaAFNWyMqokMcpN5dglKjycxrtjDR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmY4Y2MtMzMxNS00M2VlLWI4OTgt
N2VhNTkyZjliMjllLzEvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZmY4Y2MtMzMxNS00M2VlLWI4OTgtN2VhNTkyZjliMjll
LzEvMWJJeXFpUXh5azNsMkNVcVBKekd1Mk1OSFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwW/VpiSf
zbg+uF8hK4UMgUNyBV7VXBFrAB1JoiVvtWBp3Q63h3hIlwD9P/fO+EPaYonkn8y6
Ixua+NZEbVgzuWWdRdzkGIf3z2Y/3uLj0bVM+4yI4c6ZFDB72yYkoF8H7K/vLDR+
pAC1gcFM0KAL7K+7f1zLOV0bcmzXHvb3DLrTYcBrhU/g9UKo0h1Oclmd6CpScyyj
TbuFBQuNXhnd83gXvmK9WEUQe9deP7Z1lxrVI8s/KE2BdafJYNoXlcnYztRmx5lT
KGFY+6MKrrcAdcINOQbgBrOhCjbImVRDCcR9MEOCpWDJVsrpPA2q8KjmhN+5ovUg
QK+NlmybQh/7RA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:03 2026 by rpki-client