This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File:                     G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier:          n4uPSfZRXljLT4u6SKI5LhkHQNUoIrNBxZIpRKriu2s=
Subject key identifier:   BF:41:30:E6:C7:1E:87:61:89:FD:74:EA:81:11:0A:A3:EB:AC:23:DF
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer:       /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial:       019C43C7032D4969E5A7A47D245C73D5747C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 19:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:41 +0000
Files and hashes:         1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
                          2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: 40kr3FieaLcICnYjdagmLtphSO2IPfvhqIKBWMS2Nys=)
                          3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:03:2d:49:69:e5:a7:a4:7d:24:5c:73:d5:74:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
        Validity
            Not Before: Feb  9 19:00:41 2026 GMT
            Not After : Feb 10 19:00:41 2026 GMT
        Subject: CN=bf4130e6c71e876189fd74ea81110aa3ebac23df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c9:e7:c5:90:3b:da:82:df:d7:42:f5:f3:0b:
                    b3:75:0e:93:28:5e:6d:7b:3f:50:6e:12:76:c5:af:
                    e9:82:82:50:77:dd:f8:6f:f8:89:89:f8:78:33:1c:
                    b1:fc:48:57:77:5b:ad:b6:72:39:7f:66:12:c0:e7:
                    1a:a5:08:f0:e0:59:44:ba:35:b8:ad:de:1d:31:10:
                    92:07:33:33:d8:a4:e7:39:d7:52:3f:db:2f:f1:75:
                    be:62:02:0c:f1:1e:53:3b:73:3f:84:3b:ec:7e:f9:
                    13:40:35:cd:1e:f5:d7:9e:b6:1c:de:6e:b8:51:53:
                    58:f4:b8:70:cb:6f:17:07:25:fe:10:82:4c:b1:60:
                    1a:50:0a:55:3b:be:9e:c2:76:e5:ed:38:1d:38:2f:
                    b9:83:e0:13:72:0d:bd:73:6e:d2:f5:67:1e:cb:11:
                    eb:26:37:c7:63:59:7c:20:0d:43:d7:82:63:e7:c4:
                    0d:94:12:f2:8d:eb:e4:65:21:f9:e3:68:35:be:7b:
                    a0:d2:dc:f8:8d:9d:ce:99:40:df:6f:33:67:71:3b:
                    fa:42:05:a8:20:d9:7b:f1:9a:78:99:24:e3:1d:00:
                    d9:76:7d:c3:9a:75:a4:e7:07:78:18:1a:38:39:c0:
                    cc:1d:f8:0d:ff:06:58:57:47:ac:6d:5e:10:12:07:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:41:30:E6:C7:1E:87:61:89:FD:74:EA:81:11:0A:A3:EB:AC:23:DF
            X509v3 Authority Key Identifier:
                keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:c3:08:44:56:3f:19:34:ea:06:f4:e1:ec:cc:c7:3c:04:
         ca:c1:56:5c:1b:2e:96:63:a2:04:7f:cc:1c:1c:e4:7b:13:8a:
         cf:ff:06:64:ab:23:25:7c:c4:84:ee:df:75:48:e3:2d:f1:47:
         35:f3:73:0a:c6:c1:c2:a9:00:4a:a7:8c:71:5e:3c:de:4c:8b:
         a6:5e:c2:be:bc:ef:0c:13:b6:dd:68:c6:17:e5:a9:f0:53:2b:
         f0:a0:c1:ea:7b:60:a7:fe:61:f4:03:f5:1f:01:72:62:cb:89:
         5d:4c:5c:23:59:31:42:d3:18:76:b1:ea:66:91:73:cd:9c:52:
         fe:72:0a:b9:14:51:b8:1f:48:48:0f:81:2c:f4:89:78:8f:27:
         6b:2f:2b:65:e2:7d:e2:c2:5e:5e:6d:82:f4:eb:ba:55:78:45:
         34:e3:82:c3:57:19:96:67:e0:3c:f0:42:40:3c:c1:e3:e4:68:
         f8:dd:aa:2c:eb:62:35:28:01:0a:70:70:7d:74:39:40:a9:53:
         02:4e:89:d8:a2:c5:cf:7b:d9:95:ba:a8:44:aa:42:ec:cc:7d:
         81:25:ea:04:0a:6d:e9:1c:b5:7d:45:7b:83:98:57:7a:92:7e:
         ac:8a:0b:29:61:21:15:ae:5a:3f:28:4f:3d:ea:2f:db:97:9c:
         7c:98:20:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxwMtSWnlp6R9JFxz1XR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjYwMjA5MTkwMDQxWhcNMjYwMjEwMTkwMDQxWjAzMTEwLwYDVQQD
EyhiZjQxMzBlNmM3MWU4NzYxODlmZDc0ZWE4MTExMGFhM2ViYWMyM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08nnxZA72oLf10L18wuzdQ6TKF5t
ez9QbhJ2xa/pgoJQd934b/iJifh4Mxyx/EhXd1uttnI5f2YSwOcapQjw4FlEujW4
rd4dMRCSBzMz2KTnOddSP9sv8XW+YgIM8R5TO3M/hDvsfvkTQDXNHvXXnrYc3m64
UVNY9Lhwy28XByX+EIJMsWAaUApVO76ewnbl7TgdOC+5g+ATcg29c27S9WceyxHr
JjfHY1l8IA1D14Jj58QNlBLyjevkZSH542g1vnug0tz4jZ3OmUDfbzNncTv6QgWo
INl78Zp4mSTjHQDZdn3DmnWk5wd4GBo4OcDMHfgN/wZYV0esbV4QEgew3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9BMObHHodhif106oERCqPrrCPfMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvjDCERW
Pxk06gb04ezMxzwEysFWXBsulmOiBH/MHBzkexOKz/8GZKsjJXzEhO7fdUjjLfFH
NfNzCsbBwqkASqeMcV483kyLpl7CvrzvDBO23WjGF+Wp8FMr8KDB6ntgp/5h9AP1
HwFyYsuJXUxcI1kxQtMYdrHqZpFzzZxS/nIKuRRRuB9ISA+BLPSJeI8nay8rZeJ9
4sJeXm2C9Ou6VXhFNOOCw1cZlmfgPPBCQDzB4+Ro+N2qLOtiNSgBCnBwfXQ5QKlT
Ak6J2KLFz3vZlbqoRKpC7Mx9gSXqBApt6Ry1fUV7g5hXepJ+rIoLKWEhFa5aPyhP
Peov25ecfJgg0g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:40 2026 by rpki-client