This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File:                     0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier:          HLadRfDTnqWeo6+DuJ8nd4agD+u/h2qondyedaEn8rk=
Subject key identifier:   93:E0:F2:B1:95:97:8B:E0:E3:C8:B9:AC:26:79:09:B3:7A:56:6D:48
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer:       /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial:       019C420FD4226457AB538C6BE171E0978D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number:          14CD
Signing time:             Mon 09 Feb 2026 11:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:59 +0000
Files and hashes:         1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: pOXHuvpXkI+H8NKzKvz2owDnnxL/fM5+Tpnx9LFWA0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:d4:22:64:57:ab:53:8c:6b:e1:71:e0:97:8d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
        Validity
            Not Before: Feb  9 11:00:59 2026 GMT
            Not After : Feb 10 11:00:59 2026 GMT
        Subject: CN=93e0f2b195978be0e3c8b9ac267909b37a566d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:af:3e:cb:4d:3d:23:51:7a:94:75:d9:f3:
                    83:38:de:fb:3d:ff:e9:59:06:6b:d0:8d:cd:2e:33:
                    ce:6b:b7:e9:03:50:71:9e:6e:9d:80:a1:b7:8c:d5:
                    3e:2b:07:ab:4c:6c:32:0f:50:34:e5:56:4a:9c:5f:
                    ff:91:34:ea:8d:61:bb:4f:23:cd:d0:1a:58:08:8c:
                    b9:16:ad:7e:d1:23:74:b1:60:18:64:d8:ae:9c:b4:
                    54:cf:3e:40:a1:34:e6:6c:f4:82:c0:fd:ad:cb:14:
                    45:24:d4:a4:3f:80:af:eb:fd:b2:f4:3a:16:5b:49:
                    6b:9c:65:b3:c7:cd:97:e4:dd:f9:4f:4f:75:a0:c9:
                    79:41:c2:bd:57:e0:5c:7c:e5:92:7a:61:6e:0b:9b:
                    6b:02:60:76:33:49:2d:cb:d5:f3:b6:6f:85:78:ae:
                    18:65:6a:75:47:9f:b7:8d:62:ff:6e:6f:eb:f2:4d:
                    36:00:f1:49:04:1b:6a:e8:8f:0b:4a:02:c2:5d:a6:
                    b9:a6:08:70:6d:d2:d0:92:c5:6a:0e:82:05:fc:4c:
                    b0:b9:ed:47:18:0b:01:06:40:0e:ba:13:48:43:b8:
                    89:36:a8:7f:a1:48:b0:b6:17:92:e4:cf:97:3b:1e:
                    51:b5:bd:9d:34:1b:b2:0d:9c:cd:2a:43:f4:34:d7:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E0:F2:B1:95:97:8B:E0:E3:C8:B9:AC:26:79:09:B3:7A:56:6D:48
            X509v3 Authority Key Identifier:
                keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:79:54:39:5b:fc:f6:81:27:a1:d2:61:b3:d4:b9:1c:61:
         f1:f8:b5:6e:8a:4a:e2:23:67:ca:e6:ed:99:21:5e:7d:b8:97:
         26:d2:f7:31:30:d7:46:4b:a7:65:5d:3c:0f:26:ec:64:61:a1:
         42:21:0e:ce:f0:8f:25:2b:40:71:b9:50:f1:df:32:f8:58:69:
         13:b4:fa:cb:c9:e6:27:d2:c1:6e:ff:3b:3b:f8:6b:21:38:84:
         ab:de:cf:ed:34:05:21:0e:d2:a1:f4:27:90:c2:3d:08:79:1e:
         90:aa:3d:57:05:9c:c5:73:55:8c:22:8e:7f:95:32:37:53:ec:
         fb:8a:2f:9c:2a:81:f8:07:53:84:52:9a:32:b0:1c:c1:56:92:
         27:39:56:c8:1a:48:56:c2:0f:c1:f1:00:14:e5:65:32:44:47:
         b2:b1:4d:9f:87:a5:80:08:42:f3:3f:97:1f:9d:7b:7f:7d:33:
         f5:dc:6d:34:0c:dc:a4:69:eb:05:2b:85:27:eb:f8:e3:53:ec:
         56:02:79:9e:86:48:8f:ac:be:f7:c1:74:9d:bf:5e:4b:70:89:
         04:f6:18:9e:98:7a:f5:52:01:12:4c:a0:79:6d:45:c4:4e:84:
         6f:5b:9d:20:c9:ae:ca:43:b9:51:b7:e2:0d:5b:c4:92:92:0f:
         36:11:9b:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD9QiZFerU4xr4XHgl40kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNmJkMGU4Y2I1NDk4YzdmOWFjYTFiYmZjZjlkYjM3NzU2
NWU4ZGYwHhcNMjYwMjA5MTEwMDU5WhcNMjYwMjEwMTEwMDU5WjAzMTEwLwYDVQQD
Eyg5M2UwZjJiMTk1OTc4YmUwZTNjOGI5YWMyNjc5MDliMzdhNTY2ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaCvPstNPSNRepR12fODON77Pf/p
WQZr0I3NLjPOa7fpA1Bxnm6dgKG3jNU+KwerTGwyD1A05VZKnF//kTTqjWG7TyPN
0BpYCIy5Fq1+0SN0sWAYZNiunLRUzz5AoTTmbPSCwP2tyxRFJNSkP4Cv6/2y9DoW
W0lrnGWzx82X5N35T091oMl5QcK9V+BcfOWSemFuC5trAmB2M0kty9Xztm+FeK4Y
ZWp1R5+3jWL/bm/r8k02APFJBBtq6I8LSgLCXaa5pghwbdLQksVqDoIF/Eywue1H
GAsBBkAOuhNIQ7iJNqh/oUiwtheS5M+XOx5Rtb2dNBuyDZzNKkP0NNeLkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPg8rGVl4vg48i5rCZ5CbN6Vm1IMB8GA1UdIwQY
MBaAFNFr0OjLVJjH+ayhu/z52zd1ZejfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iNWUyY2QtNWZiMC00OWQ1LWJjNjUt
ODlmMmRmODBjMzQ1LzEvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iNWUyY2QtNWZiMC00OWQ1LWJjNjUtODlmMmRmODBjMzQ1
LzEvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJp5VDlb
/PaBJ6HSYbPUuRxh8fi1bopK4iNnyubtmSFefbiXJtL3MTDXRkunZV08DybsZGGh
QiEOzvCPJStAcblQ8d8y+FhpE7T6y8nmJ9LBbv87O/hrITiEq97P7TQFIQ7SofQn
kMI9CHkekKo9VwWcxXNVjCKOf5UyN1Ps+4ovnCqB+AdThFKaMrAcwVaSJzlWyBpI
VsIPwfEAFOVlMkRHsrFNn4elgAhC8z+XH517f30z9dxtNAzcpGnrBSuFJ+v441Ps
VgJ5noZIj6y+98F0nb9eS3CJBPYYnph69VIBEkygeW1FxE6Eb1udIMmuykO5Ubfi
DVvEkpIPNhGbWQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:41 2026 by rpki-client