This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          lmUoIsMajzNQpNmMTwvJHXASu63PzTRLCCo1Nr+O5C0=
Subject key identifier:   CD:4D:B8:AC:7F:1F:C9:91:9C:51:1F:29:59:94:2A:46:7E:09:1C:A0
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       019C40FCFE1125610E984A4229147CAC0C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 06:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:47 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: IAvG+/7W5ZOYpHeoqMy6LQepBGFrY8vNAlEeoYg4W5k=)
                          2: RBLs6_JEMpJ2-E4f-zbgq3OA94g.roa (hash: YtzTgnRD0gPLAxf3Gvly0Fh3NIAfS3kf5OMJ5xYDEXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:fe:11:25:61:0e:98:4a:42:29:14:7c:ac:0c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: Feb  9 06:00:47 2026 GMT
            Not After : Feb 10 06:00:47 2026 GMT
        Subject: CN=cd4db8ac7f1fc9919c511f2959942a467e091ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:e8:f5:6e:29:54:de:7c:35:94:29:ab:3e:
                    79:7d:36:77:2b:93:eb:4a:3d:47:4a:32:ed:45:d3:
                    8b:bc:92:de:12:89:b4:7d:ae:14:7d:d2:31:e7:cb:
                    37:e1:90:b4:2d:82:9c:68:47:87:5d:85:d7:58:66:
                    63:92:e0:b1:2b:c1:00:72:99:91:ff:b6:6c:b4:e9:
                    d1:3f:fb:5f:23:cf:29:64:fc:e1:83:a3:fa:b2:d7:
                    47:d9:69:c1:92:81:a7:c0:cc:8c:4c:4e:24:38:a7:
                    e0:16:4c:bb:f9:f6:38:c0:81:16:e2:d3:a8:ca:71:
                    6a:34:9e:51:a7:3f:a5:af:13:51:26:03:29:ee:b8:
                    cc:84:73:ef:ff:ea:3e:2e:81:8b:53:50:67:34:36:
                    87:83:3e:c1:1b:c8:13:99:29:e2:85:0f:a1:17:71:
                    2e:57:b2:a8:3f:1e:5f:ac:49:2d:c5:76:89:7e:a8:
                    4c:2c:f3:e0:ed:a5:fe:fa:20:3c:6a:10:45:90:d1:
                    7f:bb:2a:ad:64:71:ee:ff:e1:1e:fe:ee:c4:75:e8:
                    0b:5f:29:ff:23:95:0e:b5:4e:b2:3d:d1:98:03:c4:
                    e6:42:25:32:55:2a:b4:21:35:32:fe:57:fd:6d:23:
                    59:11:f5:20:ea:cc:57:e5:18:77:78:0e:63:1b:60:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4D:B8:AC:7F:1F:C9:91:9C:51:1F:29:59:94:2A:46:7E:09:1C:A0
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:10:cf:c8:3d:c8:e1:94:be:77:5f:a7:9c:25:b2:ff:21:
         33:6e:87:a2:42:00:1e:1e:0f:1b:34:0d:11:10:af:6f:cc:79:
         78:2e:bb:27:1d:64:8a:a8:ec:9e:b7:21:1c:a4:a6:91:7d:30:
         54:f3:de:f7:f1:9d:fd:1d:11:59:75:3f:0f:8d:6c:1f:25:b9:
         e5:68:13:1e:91:75:60:8f:6d:fe:30:17:87:3d:c3:8a:c7:6a:
         34:48:70:99:de:f0:27:3d:cd:86:e2:c0:0a:f9:ab:39:a7:4a:
         42:3b:5e:20:7d:18:6e:db:df:5d:06:52:55:28:42:22:78:33:
         8f:c3:2e:e9:ba:c5:ac:c2:ea:06:34:ec:59:9a:e6:8a:e9:3f:
         94:d7:7c:e1:12:28:e5:8b:18:4e:29:b6:3a:f5:b8:92:6c:06:
         2a:36:9a:22:60:f1:27:e9:b4:dd:ee:b6:7f:cf:2c:a2:a5:fb:
         ab:e4:be:43:3a:26:26:a4:46:68:32:b4:dd:d4:b1:de:38:e9:
         05:35:11:df:08:53:42:b8:ac:94:47:9d:02:88:ba:c4:c4:12:
         92:63:80:60:74:c3:e9:31:a9:68:22:31:e3:1c:17:ac:44:55:
         11:53:1a:59:4a:5a:42:de:1c:87:42:fd:dc:85:fd:54:6c:39:
         c6:56:c0:0e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxA/P4RJWEOmEpCKRR8rAyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGYyZjJlMjFiYzk4ZDBjNjFiMmMxNGMwZWUwMTlkMzMx
ZWFlNTgwHhcNMjYwMjA5MDYwMDQ3WhcNMjYwMjEwMDYwMDQ3WjAzMTEwLwYDVQQD
EyhjZDRkYjhhYzdmMWZjOTkxOWM1MTFmMjk1OTk0MmE0NjdlMDkxY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGjo9W4pVN58NZQpqz55fTZ3K5Pr
Sj1HSjLtRdOLvJLeEom0fa4UfdIx58s34ZC0LYKcaEeHXYXXWGZjkuCxK8EAcpmR
/7ZstOnRP/tfI88pZPzhg6P6stdH2WnBkoGnwMyMTE4kOKfgFky7+fY4wIEW4tOo
ynFqNJ5Rpz+lrxNRJgMp7rjMhHPv/+o+LoGLU1BnNDaHgz7BG8gTmSnihQ+hF3Eu
V7KoPx5frEktxXaJfqhMLPPg7aX++iA8ahBFkNF/uyqtZHHu/+Ee/u7EdegLXyn/
I5UOtU6yPdGYA8TmQiUyVSq0ITUy/lf9bSNZEfUg6sxX5Rh3eA5jG2DDPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM1NuKx/H8mRnFEfKVmUKkZ+CRygMB8GA1UdIwQY
MBaAFPlPLy4hvJjQxhssFMDuAZ0zHq5YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VOHZMaUc4bU5ER0d5d1V3TzRCblRNZXJsZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZGUwZDE2LTJmMjQtNGM1My04NGI4
LTVkOTdiMTlmYTU5NS8xLzEtVTh2TGlHOG1OREdHeXdVd080Qm5UTWVybGcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUxL2RlMGQxNi0yZjI0LTRjNTMtODRiOC01ZDk3YjE5ZmE1
OTUvMS8xLVU4dkxpRzhtTkRHR3l3VXdPNEJuVE1lcmxnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXkQ
z8g9yOGUvndfp5wlsv8hM26HokIAHh4PGzQNERCvb8x5eC67Jx1kiqjsnrchHKSm
kX0wVPPe9/Gd/R0RWXU/D41sHyW55WgTHpF1YI9t/jAXhz3DisdqNEhwmd7wJz3N
huLACvmrOadKQjteIH0YbtvfXQZSVShCIngzj8Mu6brFrMLqBjTsWZrmiuk/lNd8
4RIo5YsYTim2OvW4kmwGKjaaImDxJ+m03e62f88soqX7q+S+QzomJqRGaDK03dSx
3jjpBTUR3whTQrislEedAoi6xMQSkmOAYHTD6TGpaCIx4xwXrERVEVMaWUpaQt4c
h0L93IX9VGw5xlbADg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:24 2026 by rpki-client