This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File:                     M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier:          sqHFneNh+lNdAnesUNMlDUOGW1KWmINCUQJ3+RMu1Kc=
Subject key identifier:   81:B0:42:EC:75:ED:7E:8F:D6:D2:16:17:AF:32:F9:EF:90:82:3D:87
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer:       /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial:       019C427DC322E73236A2C4A3833A0FCBD91E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 13:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:03 +0000
Files and hashes:         1: 53AAbOBBkXvtwzFCRKhN2YER9wI.roa (hash: J04OcUQtPBWoHYiXQ+dSEt3YhPfELs053aa/pbV3cuA=)
                          2: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: kPIFzhQv1uHGbsRYcsYxNoxCvqb8Kao/Nh9/U4lGQ5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:c3:22:e7:32:36:a2:c4:a3:83:3a:0f:cb:d9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
        Validity
            Not Before: Feb  9 13:01:03 2026 GMT
            Not After : Feb 10 13:01:03 2026 GMT
        Subject: CN=81b042ec75ed7e8fd6d21617af32f9ef90823d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:29:ff:ba:0c:11:a3:22:e4:d0:23:e2:31:
                    5f:d4:21:48:8d:4e:aa:6e:25:19:dd:0d:5a:0f:b2:
                    68:ce:5a:4a:e5:84:db:dc:2b:41:7a:6c:59:c0:3e:
                    cb:22:5d:a3:55:d5:87:7b:64:1b:01:e2:21:64:46:
                    63:ba:da:d3:70:40:dc:72:2f:96:c8:7c:64:53:65:
                    1a:35:88:e8:e1:43:f1:1f:c6:78:e0:40:01:c0:75:
                    e0:8d:27:cd:8d:be:25:f9:bf:92:11:f9:16:ba:13:
                    93:21:13:73:56:6d:21:72:7a:8a:91:ea:df:12:b9:
                    d9:c7:33:7a:6b:af:19:a5:ba:33:ba:31:36:be:0d:
                    d5:76:e6:ce:4a:53:e4:a8:be:bb:47:ce:de:a1:51:
                    f8:ae:81:8d:ea:de:eb:a8:71:05:1a:a7:13:fa:06:
                    7d:eb:0a:03:76:76:0f:33:7c:72:13:68:87:17:57:
                    f3:1f:13:ff:08:15:30:38:e7:04:37:ff:47:b6:de:
                    69:66:98:f9:38:93:6e:91:6b:68:32:7d:a3:e6:91:
                    42:ea:f9:c3:36:21:dc:d0:19:a2:26:33:94:a9:fa:
                    e1:72:19:44:58:dc:25:20:b8:ab:7d:6d:f5:db:cc:
                    3f:f1:60:e2:be:26:e2:39:74:e2:df:ae:17:56:cd:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B0:42:EC:75:ED:7E:8F:D6:D2:16:17:AF:32:F9:EF:90:82:3D:87
            X509v3 Authority Key Identifier:
                keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:36:ea:ad:4a:ad:2f:54:3b:5d:bf:35:79:af:1f:d4:9b:f4:
         73:c8:d1:d0:38:e4:d3:65:43:b6:4d:ae:6f:fe:13:40:60:eb:
         45:2a:de:99:2f:44:e8:44:23:d5:93:ca:b7:da:65:6e:10:13:
         22:a6:87:31:d5:a5:de:fe:c8:aa:00:bf:2f:24:b4:b6:e7:e9:
         5c:64:46:13:b5:64:d3:fa:22:dd:c2:38:c8:7e:6a:cb:11:2a:
         cc:12:eb:20:c8:0f:6d:d8:b2:c6:05:16:14:0c:9a:d0:5d:67:
         a2:eb:fd:68:ba:0d:f6:87:6c:87:a0:5c:a3:ac:6a:bf:ce:c4:
         88:ed:0b:43:a3:d8:ba:82:07:2d:e1:85:11:f1:15:83:01:01:
         53:9f:fc:8a:86:24:db:3c:8f:cd:cd:0e:f9:59:bc:05:8d:6b:
         0b:22:6d:8e:37:03:42:6a:71:2f:22:b3:79:e7:27:38:19:e7:
         9d:cf:e9:b4:91:1b:ad:e9:f6:ae:11:23:3a:21:08:b3:65:d7:
         68:a1:38:b5:24:38:f5:ad:f6:80:6b:14:b4:94:54:0a:94:5a:
         78:7d:21:82:c2:0b:db:a6:c2:ee:85:80:35:15:28:e6:1d:a9:
         bb:1c:e6:85:84:28:bb:2a:06:eb:be:eb:c9:7d:20:c5:af:6f:
         53:81:75:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfcMi5zI2osSjgzoPy9keMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjRiNWI3YjIxY2FlYmYzZDIwODA5ZjZjNTcwNTk5ZjFk
NjA0NjgwHhcNMjYwMjA5MTMwMTAzWhcNMjYwMjEwMTMwMTAzWjAzMTEwLwYDVQQD
Eyg4MWIwNDJlYzc1ZWQ3ZThmZDZkMjE2MTdhZjMyZjllZjkwODIzZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Ip/7oMEaMi5NAj4jFf1CFIjU6q
biUZ3Q1aD7JozlpK5YTb3CtBemxZwD7LIl2jVdWHe2QbAeIhZEZjutrTcEDcci+W
yHxkU2UaNYjo4UPxH8Z44EABwHXgjSfNjb4l+b+SEfkWuhOTIRNzVm0hcnqKkerf
ErnZxzN6a68ZpbozujE2vg3VdubOSlPkqL67R87eoVH4roGN6t7rqHEFGqcT+gZ9
6woDdnYPM3xyE2iHF1fzHxP/CBUwOOcEN/9Htt5pZpj5OJNukWtoMn2j5pFC6vnD
NiHc0BmiJjOUqfrhchlEWNwlILirfW3128w/8WDivibiOXTi364XVs1ZIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGwQux17X6P1tIWF68y+e+Qgj2HMB8GA1UdIwQY
MBaAFDO0tbeyHK6/PSCAn2xXBZnx1gRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMt
ODYyMzMzNWMwZWUwLzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMtODYyMzMzNWMwZWUw
LzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTbqrUqt
L1Q7Xb81ea8f1Jv0c8jR0Djk02VDtk2ub/4TQGDrRSremS9E6EQj1ZPKt9plbhAT
IqaHMdWl3v7IqgC/LyS0tufpXGRGE7Vk0/oi3cI4yH5qyxEqzBLrIMgPbdiyxgUW
FAya0F1nouv9aLoN9odsh6Bco6xqv87EiO0LQ6PYuoIHLeGFEfEVgwEBU5/8ioYk
2zyPzc0O+Vm8BY1rCyJtjjcDQmpxLyKzeecnOBnnnc/ptJEbren2rhEjOiEIs2XX
aKE4tSQ49a32gGsUtJRUCpRaeH0hgsIL26bC7oWANRUo5h2puxzmhYQouyoG677r
yX0gxa9vU4F1zg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:15 2026 by rpki-client