This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File:                     d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier:          0baGLTCoHD8bzlNWAQTnekmw+WRKwCWixBoYIEMdjMA=
Subject key identifier:   70:AE:6F:DB:E6:A7:79:FA:BB:1B:7C:18:0C:3C:14:89:4A:B9:39:7E
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer:       /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial:       019C420FFBD5FEF113FD8B9132E8ED713CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:09 +0000
Files and hashes:         1: VuWfYezMuwuKUhdrekzuq4vKzXw.roa (hash: 9mN6oUykcmvDqkiR4AZJmp9qI5JmRegNOsGR4Bu/epo=)
                          2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: MHBE+oIzFgD75B63JJJB38qCAO0171ue3dpl+FVP3Uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:fb:d5:fe:f1:13:fd:8b:91:32:e8:ed:71:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
        Validity
            Not Before: Feb  9 11:01:09 2026 GMT
            Not After : Feb 10 11:01:09 2026 GMT
        Subject: CN=70ae6fdbe6a779fabb1b7c180c3c14894ab9397e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:22:d0:dc:08:bc:c9:66:a2:b1:2d:6f:c6:
                    79:fe:8f:fd:a7:f5:82:12:1e:d5:32:d8:cb:d2:33:
                    56:ed:c4:92:11:41:c0:be:66:c1:35:b4:2d:f9:26:
                    95:f9:a4:c7:72:2b:b5:fb:3c:0b:80:fa:d2:dd:cf:
                    89:cc:7e:65:8d:fd:69:aa:f0:ba:b3:06:55:bd:9e:
                    a7:38:8c:ee:e2:98:e4:dd:8e:a2:81:8d:b7:f1:7a:
                    04:b4:a2:2e:1d:9f:c0:19:24:bd:48:20:69:46:d7:
                    04:0b:e0:f5:5f:91:18:15:41:fe:a3:e4:ed:84:65:
                    79:b1:96:ae:2a:80:7a:05:95:3a:c5:2e:cc:3c:09:
                    de:9c:17:87:7c:f8:c4:b7:7f:32:78:61:cb:38:ef:
                    0e:22:89:4e:bf:96:9e:46:2d:c5:77:b2:80:c6:e1:
                    d4:ba:02:dc:df:94:5c:04:b0:c2:41:96:1d:4a:33:
                    c8:d6:a8:ad:cb:fc:62:ee:4d:ae:e1:48:ab:1b:54:
                    8a:ae:b3:2b:74:71:7c:e2:fd:fb:f0:2a:bd:08:8e:
                    16:aa:44:b9:33:1e:6b:cb:91:fc:2f:d5:3a:c6:75:
                    ac:6d:69:37:23:ab:93:45:50:0c:e1:b7:d8:c1:27:
                    d1:c2:42:be:be:9b:09:19:30:89:ea:f1:4e:32:06:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AE:6F:DB:E6:A7:79:FA:BB:1B:7C:18:0C:3C:14:89:4A:B9:39:7E
            X509v3 Authority Key Identifier:
                keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:77:b0:67:03:bd:cb:06:03:f4:9e:10:42:de:5c:e8:07:80:
         ef:d6:80:43:64:e1:5c:b5:ba:d2:be:0a:58:83:22:d5:f0:07:
         88:12:19:e2:52:59:be:dc:b9:fc:37:41:f4:dd:35:96:ea:48:
         cc:bb:7e:c9:ff:9e:3b:19:f9:70:f8:0e:ed:1d:fa:07:04:f9:
         84:db:ea:f1:a8:f8:37:86:e2:3d:c7:d8:88:76:21:d0:bd:33:
         2a:72:35:7f:a7:b8:25:d6:e3:d4:e9:c8:97:4f:1b:86:1e:8e:
         7f:33:39:46:69:2e:10:52:61:8d:c6:30:54:ab:98:9c:c7:61:
         09:70:fa:93:d6:ef:47:3c:37:6a:d8:3e:b8:97:ff:c8:80:e4:
         35:19:0d:34:4d:a4:86:25:84:fc:3b:78:ee:f4:7a:bb:ad:fa:
         8f:ba:28:4c:4c:2d:72:5a:11:c2:1f:c2:a8:71:d6:05:af:4c:
         cc:93:d3:68:50:e4:43:a2:38:48:15:9b:e3:ff:63:ec:af:9e:
         32:86:2e:ac:62:2b:8e:04:87:2a:32:09:51:0f:95:6c:e1:aa:
         3d:1e:e1:29:ed:87:16:e5:cb:65:e2:eb:a3:b6:69:26:34:ff:
         5a:99:25:3c:30:43:98:bf:8b:6b:5b:13:bd:92:89:82:64:1a:
         7d:57:4f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD/vV/vET/YuRMujtcTzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz
ODYwMWEwHhcNMjYwMjA5MTEwMTA5WhcNMjYwMjEwMTEwMTA5WjAzMTEwLwYDVQQD
Eyg3MGFlNmZkYmU2YTc3OWZhYmIxYjdjMTgwYzNjMTQ4OTRhYjkzOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F4i0NwIvMlmorEtb8Z5/o/9p/WC
Eh7VMtjL0jNW7cSSEUHAvmbBNbQt+SaV+aTHciu1+zwLgPrS3c+JzH5ljf1pqvC6
swZVvZ6nOIzu4pjk3Y6igY238XoEtKIuHZ/AGSS9SCBpRtcEC+D1X5EYFUH+o+Tt
hGV5sZauKoB6BZU6xS7MPAnenBeHfPjEt38yeGHLOO8OIolOv5aeRi3Fd7KAxuHU
ugLc35RcBLDCQZYdSjPI1qity/xi7k2u4UirG1SKrrMrdHF84v378Cq9CI4WqkS5
Mx5ry5H8L9U6xnWsbWk3I6uTRVAM4bfYwSfRwkK+vpsJGTCJ6vFOMgYk8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCub9vmp3n6uxt8GAw8FIlKuTl+MB8GA1UdIwQY
MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt
NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz
LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3ewZwO9
ywYD9J4QQt5c6AeA79aAQ2ThXLW60r4KWIMi1fAHiBIZ4lJZvty5/DdB9N01lupI
zLt+yf+eOxn5cPgO7R36BwT5hNvq8aj4N4biPcfYiHYh0L0zKnI1f6e4Jdbj1OnI
l08bhh6OfzM5RmkuEFJhjcYwVKuYnMdhCXD6k9bvRzw3atg+uJf/yIDkNRkNNE2k
hiWE/Dt47vR6u636j7ooTEwtcloRwh/CqHHWBa9MzJPTaFDkQ6I4SBWb4/9j7K+e
MoYurGIrjgSHKjIJUQ+VbOGqPR7hKe2HFuXLZeLro7ZpJjT/WpklPDBDmL+La1sT
vZKJgmQafVdP9Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:33 2026 by rpki-client