This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File:                     59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier:          6VcLmsdSM/UKjH1kBxzhguSDm2/2megEnTRaysIb+Q0=
Subject key identifier:   4F:F5:7D:B6:71:22:0B:D0:84:B8:5C:7B:C6:A1:B6:DA:7B:9B:D8:40
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer:       /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial:       019C44D9A308F98ED2243C0A3E34FE3C4E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number:          1819
Signing time:             Tue 10 Feb 2026 00:00:39 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:39 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:39 +0000
Files and hashes:         1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: guVI++Ge2qQ4cvCH1h+8aAltFhdZcyCqoLClsu1p9EE=)
                          2: oy6YGnI1tgVRTk-nYNf6Oj1ty_A.roa (hash: n+xGlQJ9PKisT5uNbmDxJgPK8Ls92DjlJDEtC3P1OH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:a3:08:f9:8e:d2:24:3c:0a:3e:34:fe:3c:4e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
        Validity
            Not Before: Feb 10 00:00:39 2026 GMT
            Not After : Feb 11 00:00:39 2026 GMT
        Subject: CN=4ff57db671220bd084b85c7bc6a1b6da7b9bd840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:61:5c:af:ae:0a:ab:4c:4a:9c:c2:39:5e:
                    8f:2a:7e:84:56:a3:bf:28:c8:d3:f4:cd:68:d5:2b:
                    a2:ba:09:27:1e:7a:3b:d7:5e:ce:5d:f2:13:f1:81:
                    fd:bf:ab:ae:52:3c:76:bc:f6:33:63:24:d8:e9:fe:
                    f1:20:f4:89:d5:82:fa:25:ee:0a:1d:0d:05:97:ff:
                    eb:05:3d:4c:eb:b0:f1:d8:34:a7:c8:94:31:42:3d:
                    58:65:60:79:60:dd:e1:93:14:eb:02:ae:f7:90:18:
                    bf:d9:b2:bd:c2:c3:40:1e:9e:04:18:c9:a8:28:1a:
                    65:ca:9c:5c:2b:ad:a4:61:6b:74:8f:03:bb:35:3b:
                    50:10:b4:94:f9:1d:6b:62:fc:3d:af:b5:98:12:74:
                    4e:91:91:f5:b1:39:66:53:0c:dc:5f:8e:16:aa:5a:
                    f9:df:76:b7:e6:74:b6:67:1b:37:49:64:0a:f5:49:
                    d9:61:5d:90:b9:9e:34:ce:21:b2:8f:99:f4:82:59:
                    0a:a8:c6:cc:f6:af:e5:b4:06:81:64:b9:92:d6:71:
                    5e:87:85:81:fd:af:1c:56:af:ee:c9:25:79:aa:31:
                    71:aa:84:1e:bc:ac:8f:90:0c:16:f6:59:20:61:80:
                    31:89:d4:f7:de:45:c3:15:15:40:85:31:1d:ce:da:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F5:7D:B6:71:22:0B:D0:84:B8:5C:7B:C6:A1:B6:DA:7B:9B:D8:40
            X509v3 Authority Key Identifier:
                keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:c4:58:39:7c:ca:ba:d9:94:22:eb:ad:74:45:d6:40:fb:
         6b:59:d1:7a:79:66:0b:8a:91:f3:6c:32:2e:60:ba:b8:39:23:
         d8:aa:06:92:a1:bd:dc:d9:08:28:a9:00:e7:eb:8f:4e:8e:cd:
         03:2d:52:8c:e5:d8:d1:46:4f:7b:a3:e6:1e:77:bf:55:1a:5c:
         fa:00:73:46:d0:79:7a:06:9a:5b:0c:20:39:88:56:62:2f:2b:
         44:4f:e6:22:7a:19:ec:93:51:06:52:39:a1:ff:11:fa:63:a8:
         fd:24:6a:8c:7b:c5:44:0c:5f:e8:cd:7d:ad:c2:52:3f:4a:13:
         ec:0c:28:6a:37:ec:ce:07:1e:79:cd:98:42:24:8c:0f:51:84:
         f2:ae:96:d2:ea:ef:f9:d4:6c:9f:db:b1:f6:64:0e:9b:f5:50:
         ed:85:ac:52:9f:8e:f0:5a:10:34:e7:8e:bb:38:b4:41:26:5b:
         03:77:26:87:a1:58:38:42:7c:8d:31:b9:dc:53:5a:63:e3:c1:
         5e:19:49:bb:59:8c:e6:13:5a:d6:73:f6:44:1b:e4:9c:9c:0b:
         eb:b7:71:d2:90:36:ee:ff:26:d9:2f:40:c1:fe:fa:db:8e:5c:
         69:ab:29:2f:0f:3b:e7:fb:56:69:01:62:8b:5a:a6:9f:cf:9f:
         e5:df:c0:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2aMI+Y7SJDwKPjT+PE4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDc5OWFlMGVmZGQ5ODZkZGU3N2ZiMzVhZDBhMTA4MjNj
Yjk3MmYwHhcNMjYwMjEwMDAwMDM5WhcNMjYwMjExMDAwMDM5WjAzMTEwLwYDVQQD
Eyg0ZmY1N2RiNjcxMjIwYmQwODRiODVjN2JjNmExYjZkYTdiOWJkODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEJhXK+uCqtMSpzCOV6PKn6EVqO/
KMjT9M1o1SuiugknHno7117OXfIT8YH9v6uuUjx2vPYzYyTY6f7xIPSJ1YL6Je4K
HQ0Fl//rBT1M67Dx2DSnyJQxQj1YZWB5YN3hkxTrAq73kBi/2bK9wsNAHp4EGMmo
KBplypxcK62kYWt0jwO7NTtQELSU+R1rYvw9r7WYEnROkZH1sTlmUwzcX44Wqlr5
33a35nS2Zxs3SWQK9UnZYV2QuZ40ziGyj5n0glkKqMbM9q/ltAaBZLmS1nFeh4WB
/a8cVq/uySV5qjFxqoQevKyPkAwW9lkgYYAxidT33kXDFRVAhTEdztotkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/1fbZxIgvQhLhce8ahttp7m9hAMB8GA1UdIwQY
MBaAFOfXma4O/dmG3ed/s1rQoQgjy5cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMt
Mjg3OTM3OTQwZDdiLzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMtMjg3OTM3OTQwZDdi
LzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRjEWDl8
yrrZlCLrrXRF1kD7a1nRenlmC4qR82wyLmC6uDkj2KoGkqG93NkIKKkA5+uPTo7N
Ay1SjOXY0UZPe6PmHne/VRpc+gBzRtB5egaaWwwgOYhWYi8rRE/mInoZ7JNRBlI5
of8R+mOo/SRqjHvFRAxf6M19rcJSP0oT7Awoajfszgceec2YQiSMD1GE8q6W0urv
+dRsn9ux9mQOm/VQ7YWsUp+O8FoQNOeOuzi0QSZbA3cmh6FYOEJ8jTG53FNaY+PB
XhlJu1mM5hNa1nP2RBvknJwL67dx0pA27v8m2S9Awf76245caaspLw875/tWaQFi
i1qmn8+f5d/A4A==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:44 2026 by rpki-client