This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File:                     8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier:          ih1frnDWyy7+GyuCWprXftNawotHKeID9Wqvi4lotjU=
Subject key identifier:   53:38:C2:14:98:1D:94:5A:09:29:56:F5:EA:B4:83:8C:B0:62:4D:B1
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer:       /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial:       019C43C731862380F0D5D93E2D38A57BFA65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 19:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:53 +0000
Files and hashes:         1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: PKOvoVfdbzF6ZFNFiCtveLQHq0BNCDIRFWEggOeoiHE=)
                          2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:31:86:23:80:f0:d5:d9:3e:2d:38:a5:7b:fa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
        Validity
            Not Before: Feb  9 19:00:53 2026 GMT
            Not After : Feb 10 19:00:53 2026 GMT
        Subject: CN=5338c214981d945a092956f5eab4838cb0624db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:04:96:1a:fe:7d:90:b1:2b:a9:c0:a9:79:
                    66:b2:32:72:95:5f:e6:e4:37:61:fe:c9:7d:33:24:
                    44:b2:16:a2:e8:2f:cb:24:3c:55:33:20:33:ce:51:
                    b9:c2:64:26:77:99:79:9a:39:2c:7b:57:48:4a:1f:
                    e2:e4:ae:a1:f9:96:d5:ed:e0:2d:b4:0e:55:4c:10:
                    a4:55:04:1f:9f:ad:44:b1:1f:ac:61:a7:99:ae:a2:
                    bb:e1:21:e9:98:25:eb:de:8b:b5:c4:32:bf:c7:28:
                    f4:3f:35:58:08:ab:6d:21:8b:39:d5:04:c8:ff:47:
                    da:f0:d2:eb:51:30:32:35:e2:65:af:7d:1c:d2:99:
                    56:72:8a:88:55:1b:5e:b4:74:c6:73:f5:85:f8:24:
                    82:a9:57:1e:56:d8:ff:ef:a9:72:d8:63:3e:ad:38:
                    23:55:16:1e:bc:27:26:6b:3a:3e:8d:85:cc:5c:b7:
                    80:5e:da:f4:df:23:47:dc:55:63:e5:ea:3b:80:ae:
                    01:c5:61:42:f2:fa:56:24:2d:0d:79:78:f2:88:5f:
                    38:c7:27:f7:71:55:f4:bd:44:3d:1a:c1:e0:f6:6e:
                    5c:46:6b:c5:1a:0e:f6:cd:1e:73:4e:fa:e5:46:cd:
                    a9:d7:b4:77:29:9a:39:a7:73:a8:1f:2a:28:e3:76:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:38:C2:14:98:1D:94:5A:09:29:56:F5:EA:B4:83:8C:B0:62:4D:B1
            X509v3 Authority Key Identifier:
                keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:27:53:4d:de:b6:c1:b6:8f:ce:31:d2:93:00:7e:94:ab:b7:
         61:06:b3:f7:86:81:94:e1:b9:b7:28:7a:6f:1f:7a:5e:7c:cd:
         39:38:f0:6c:26:c2:4f:33:1c:86:09:2a:ed:f9:f4:1d:77:56:
         18:01:8a:32:8b:f3:84:ee:f9:01:85:8e:ae:d9:dc:da:f0:80:
         14:4b:94:ef:d1:9d:3d:07:5d:b0:b5:9f:42:1e:6a:45:5d:a5:
         38:68:23:08:f3:54:a1:50:a0:ce:29:2b:8f:67:96:9b:84:23:
         b2:aa:3a:8f:26:23:62:02:57:36:51:9a:2e:cf:d4:ef:8e:8f:
         36:7f:5e:cb:e2:d1:0e:8f:2e:98:f7:d7:b3:41:92:7d:19:e0:
         58:ef:a4:e1:6b:07:f2:69:bb:f2:98:ad:6a:02:59:47:e5:5f:
         1d:b2:81:07:c5:74:1c:69:af:0d:76:07:ca:02:08:35:ae:14:
         bc:36:4e:0a:e3:6d:5d:1d:0e:a0:91:fc:3a:bd:23:8b:e2:77:
         30:c1:a7:8f:6d:1a:d6:a7:d8:3f:c5:0a:36:0b:84:7a:47:34:
         81:d3:e3:ef:7f:1a:c6:ab:77:5e:fd:f7:0c:cf:32:ab:6a:50:
         99:5e:fe:2b:60:e1:4f:76:aa:49:e9:65:41:0e:27:71:f8:d9:
         c1:3b:85:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxzGGI4Dw1dk+LTile/plMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzlhM2U4NTRmMDEwMTVlOWQwZTAzZTg5ZDgwNzBjYzll
YmNmODkwHhcNMjYwMjA5MTkwMDUzWhcNMjYwMjEwMTkwMDUzWjAzMTEwLwYDVQQD
Eyg1MzM4YzIxNDk4MWQ5NDVhMDkyOTU2ZjVlYWI0ODM4Y2IwNjI0ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MgElhr+fZCxK6nAqXlmsjJylV/m
5Ddh/sl9MyREshai6C/LJDxVMyAzzlG5wmQmd5l5mjkse1dISh/i5K6h+ZbV7eAt
tA5VTBCkVQQfn61EsR+sYaeZrqK74SHpmCXr3ou1xDK/xyj0PzVYCKttIYs51QTI
/0fa8NLrUTAyNeJlr30c0plWcoqIVRtetHTGc/WF+CSCqVceVtj/76ly2GM+rTgj
VRYevCcmazo+jYXMXLeAXtr03yNH3FVj5eo7gK4BxWFC8vpWJC0NeXjyiF84xyf3
cVX0vUQ9GsHg9m5cRmvFGg72zR5zTvrlRs2p17R3KZo5p3OoHyoo43agWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM4whSYHZRaCSlW9eq0g4ywYk2xMB8GA1UdIwQY
MBaAFPJ5o+hU8BAV6dDgPonYBwzJ68+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMt
OGJhZTdlOWZkNzVjLzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMtOGJhZTdlOWZkNzVj
LzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCdTTd62
wbaPzjHSkwB+lKu3YQaz94aBlOG5tyh6bx96XnzNOTjwbCbCTzMchgkq7fn0HXdW
GAGKMovzhO75AYWOrtnc2vCAFEuU79GdPQddsLWfQh5qRV2lOGgjCPNUoVCgzikr
j2eWm4Qjsqo6jyYjYgJXNlGaLs/U746PNn9ey+LRDo8umPfXs0GSfRngWO+k4WsH
8mm78pitagJZR+VfHbKBB8V0HGmvDXYHygIINa4UvDZOCuNtXR0OoJH8Or0ji+J3
MMGnj20a1qfYP8UKNguEekc0gdPj738axqt3Xv33DM8yq2pQmV7+K2DhT3aqSell
QQ4ncfjZwTuFZA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:59 2026 by rpki-client