This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File:                     1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier:          UtB/OG7Q9gN3RYGJEg7NEHzLdYYqDZKFt+FweNpyyZI=
Subject key identifier:   36:BC:2A:BC:19:1A:8D:1F:EA:B8:67:B5:15:90:55:E8:58:57:60:B6
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer:       /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial:       019C424669EF1FF684149A0F44A5F552FFBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number:          0A
Signing time:             Mon 09 Feb 2026 12:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:36 +0000
Files and hashes:         1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: hV5FDHVLkKy1XKD5tcmWEMbhpTmDWvjRarekCIZb2M4=)
                          2: PF2OCRtQsy2fSZDNKDqwzoNCB1Y.roa (hash: M52yhP6y8g0o+VHUIMWLcgdfgxWY8wSI1j3oDTkEbrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:69:ef:1f:f6:84:14:9a:0f:44:a5:f5:52:ff:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
        Validity
            Not Before: Feb  9 12:00:36 2026 GMT
            Not After : Feb 10 12:00:36 2026 GMT
        Subject: CN=36bc2abc191a8d1feab867b5159055e8585760b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e9:20:d1:eb:24:fc:89:6c:da:59:fe:83:c8:
                    b5:40:d0:30:3b:49:51:e8:48:61:b2:cf:be:19:ab:
                    16:c7:3f:cd:43:2c:4d:e0:ef:ea:4a:f7:06:82:40:
                    ec:08:10:c2:d6:23:27:0a:9a:de:d2:30:c6:68:df:
                    4a:5f:7d:9c:c4:bf:3f:2b:aa:25:5b:a8:37:44:0b:
                    b8:03:da:42:ed:3a:ca:10:b6:21:cd:58:ff:ad:d8:
                    a6:b6:a6:fa:85:2c:6b:80:9c:7e:fe:50:16:28:be:
                    c8:6d:c1:86:e0:76:25:d2:31:50:ff:83:5f:59:49:
                    36:c3:66:fb:6f:7f:dd:78:cf:0a:44:8a:17:51:97:
                    6a:72:2a:c1:ba:f8:4a:18:e8:09:c4:27:1e:ba:6f:
                    8d:bc:44:af:88:ef:08:04:f5:c3:eb:5d:35:48:c9:
                    1d:fa:35:6c:01:78:2c:b4:31:9f:e6:cb:f0:5a:1a:
                    71:a6:d9:63:47:81:da:dc:fc:2b:09:e9:80:30:5e:
                    d4:9d:4c:45:67:ea:a5:7f:33:c7:f8:75:c3:85:05:
                    29:0b:6c:84:c2:7c:37:13:a9:80:83:2e:3b:83:ee:
                    4b:40:87:1c:5a:dd:19:67:a5:f5:d1:21:97:d0:50:
                    27:81:0e:fc:00:b7:e6:2f:a1:96:f8:d4:2e:b2:de:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BC:2A:BC:19:1A:8D:1F:EA:B8:67:B5:15:90:55:E8:58:57:60:B6
            X509v3 Authority Key Identifier:
                keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:4f:61:73:ae:cd:39:52:eb:65:11:63:56:80:e6:39:ea:
         e6:97:e5:be:83:d0:4f:7e:94:97:45:8b:92:46:16:9d:d8:39:
         a5:54:28:01:cd:ac:55:03:6a:ed:a8:97:81:28:f8:a5:98:2a:
         ef:cf:63:a1:fe:02:0b:60:d5:a1:de:f6:c2:16:06:6c:9c:c9:
         8a:52:b2:50:0a:a2:da:66:6e:a1:5b:20:af:b0:6d:ba:d0:51:
         09:9e:90:a8:8e:6c:62:5b:11:cd:5a:12:3a:30:f5:4e:25:3b:
         d0:7a:fe:49:ea:34:7a:62:29:28:86:71:50:5f:6b:2a:17:72:
         52:25:10:6a:2e:1e:c6:48:e7:40:b9:36:1f:a7:b4:94:1e:b1:
         3f:c9:8f:af:83:91:71:92:45:cd:66:12:4f:65:81:fa:8a:47:
         f0:43:a6:08:4e:47:d1:09:01:93:18:52:76:b9:02:45:c6:39:
         23:64:6b:85:b6:8c:04:c8:ef:94:f0:28:cb:3e:38:2f:85:29:
         a5:89:18:b7:9a:9a:5d:3b:b8:e8:68:d2:de:be:4e:b5:7d:97:
         05:5c:34:1d:2b:04:f7:29:17:65:8c:83:b0:6c:b7:49:93:4d:
         be:37:b7:c3:95:44:04:91:da:a0:18:42:3f:9a:a0:cb:b8:de:
         dc:d7:12:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRmnvH/aEFJoPRKX1Uv+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U3YzdjMjE5Mjc3YTA3MmJhMjY5NTRkNWNhM2VjY2Vi
Mjk4NGEwHhcNMjYwMjA5MTIwMDM2WhcNMjYwMjEwMTIwMDM2WjAzMTEwLwYDVQQD
EygzNmJjMmFiYzE5MWE4ZDFmZWFiODY3YjUxNTkwNTVlODU4NTc2MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ukg0esk/Ils2ln+g8i1QNAwO0lR
6Ehhss++GasWxz/NQyxN4O/qSvcGgkDsCBDC1iMnCpre0jDGaN9KX32cxL8/K6ol
W6g3RAu4A9pC7TrKELYhzVj/rdimtqb6hSxrgJx+/lAWKL7IbcGG4HYl0jFQ/4Nf
WUk2w2b7b3/deM8KRIoXUZdqcirBuvhKGOgJxCceum+NvESviO8IBPXD6101SMkd
+jVsAXgstDGf5svwWhpxptljR4Ha3PwrCemAMF7UnUxFZ+qlfzPH+HXDhQUpC2yE
wnw3E6mAgy47g+5LQIccWt0ZZ6X10SGX0FAngQ78ALfmL6GW+NQust7jcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa8KrwZGo0f6rhntRWQVehYV2C2MB8GA1UdIwQY
MBaAFNbOfHwhknegcromlU1co+zOsphKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1OGZDR1NkNkJ5dWlhVlRWeWo3TTZ5bUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zM2M3NzEtNzcwNC00NmI5LWJjZDAt
OTNhZTBjM2UyNzM2LzEvMXM1OGZDR1NkNkJ5dWlhVlRWeWo3TTZ5bUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zM2M3NzEtNzcwNC00NmI5LWJjZDAtOTNhZTBjM2UyNzM2
LzEvMXM1OGZDR1NkNkJ5dWlhVlRWeWo3TTZ5bUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGi5PYXOu
zTlS62URY1aA5jnq5pflvoPQT36Ul0WLkkYWndg5pVQoAc2sVQNq7aiXgSj4pZgq
789jof4CC2DVod72whYGbJzJilKyUAqi2mZuoVsgr7BtutBRCZ6QqI5sYlsRzVoS
OjD1TiU70Hr+Seo0emIpKIZxUF9rKhdyUiUQai4exkjnQLk2H6e0lB6xP8mPr4OR
cZJFzWYST2WB+opH8EOmCE5H0QkBkxhSdrkCRcY5I2RrhbaMBMjvlPAoyz44L4Up
pYkYt5qaXTu46GjS3r5OtX2XBVw0HSsE9ykXZYyDsGy3SZNNvje3w5VEBJHaoBhC
P5qgy7je3NcSNw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:26 2026 by rpki-client