This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
File:                     eY97H9gCs9xqvXpc2nhqYxHh1j0.mft (raw, json)
Hash identifier:          HCVhgD4NTZvE7o7sFRlQKGkWJwzmufrbrfMRs9joJRU=
Subject key identifier:   8E:0A:EC:06:9A:22:A8:85:AC:31:4C:E9:08:AF:33:9C:E8:8E:5E:D5
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Certificate issuer:       /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial:       019C420F2ACFC4F075187F87C753216AEE68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
Manifest number:          1055
Signing time:             Mon 09 Feb 2026 11:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:16 +0000
Files and hashes:         1: eY97H9gCs9xqvXpc2nhqYxHh1j0.crl (hash: aBdzyqlBKAcgnWmTt3iTn774a1F7i896B7sXrudR7c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:2a:cf:c4:f0:75:18:7f:87:c7:53:21:6a:ee:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Validity
            Not Before: Feb  9 11:00:16 2026 GMT
            Not After : Feb 10 11:00:16 2026 GMT
        Subject: CN=8e0aec069a22a885ac314ce908af339ce88e5ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:f9:40:24:6a:68:88:bb:5a:b5:2c:eb:70:
                    a3:5c:71:56:69:14:60:1c:9f:24:70:ea:40:15:88:
                    d9:a2:e7:6e:2f:19:8e:c2:e9:60:3e:74:24:73:6c:
                    ff:c7:28:49:a1:cd:42:4f:03:02:9e:9a:27:fd:83:
                    f5:e5:f0:e3:2a:c3:cc:b1:79:ab:f7:4e:75:2a:30:
                    22:48:34:ce:cc:dc:8a:02:71:41:97:7b:5c:c1:a8:
                    96:66:42:d8:5f:48:55:9f:c2:a2:83:0c:14:ae:7f:
                    4d:7e:fe:31:45:89:1f:fd:af:9a:cc:2e:d6:b9:c6:
                    50:6a:7c:0c:6e:ee:db:13:bd:cd:f9:17:67:14:5b:
                    a9:af:36:3f:c1:a9:93:5b:7d:22:74:d2:ab:06:a4:
                    7a:60:c5:7c:90:24:d5:4f:c7:21:57:da:1a:87:04:
                    cb:c4:a3:ae:c8:16:42:65:88:6e:0e:9e:d5:b8:67:
                    d5:46:e2:c6:d3:48:ee:aa:6f:0d:b0:1d:6c:0b:0e:
                    38:33:14:b7:13:ee:a6:41:05:c8:73:d3:8d:f1:a4:
                    c9:37:1d:65:d6:1a:6f:1b:91:f7:60:0d:6c:f2:54:
                    73:9b:0f:54:b1:c7:a6:75:27:53:6f:33:04:99:44:
                    8d:97:2f:cb:98:b2:f7:59:01:12:0b:78:91:76:c1:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0A:EC:06:9A:22:A8:85:AC:31:4C:E9:08:AF:33:9C:E8:8E:5E:D5
            X509v3 Authority Key Identifier:
                keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:df:f2:d6:7f:0b:f3:ab:22:d0:c4:8f:2c:f8:d2:5e:5d:1c:
         53:0f:fe:81:58:c0:e0:ab:a6:52:c2:83:7b:3e:0c:32:c0:48:
         2e:a2:eb:a8:29:41:0e:91:da:a8:4c:f0:78:32:14:05:4a:66:
         fc:ff:ad:c0:44:b9:a5:b4:30:37:44:22:cf:0c:6f:10:68:05:
         c2:8a:8d:e9:a6:d3:0e:83:55:4a:77:d6:65:c9:51:f6:a9:a2:
         44:a7:c7:18:57:30:ae:54:ee:b4:be:ef:8d:6a:19:29:d5:a9:
         2d:fb:38:74:06:cd:23:1e:e1:44:be:24:8f:e4:0f:21:12:5b:
         3b:02:cd:bd:0f:68:94:1d:2a:37:f3:3c:22:c6:29:96:80:6a:
         89:95:f7:55:94:cb:86:8e:45:ac:1b:27:34:2e:8d:f7:2d:5c:
         09:6f:e3:6f:00:06:ec:af:99:78:90:26:d7:a7:24:9c:80:5c:
         c0:6a:40:ab:5b:27:d3:ae:7d:3c:9c:ab:8d:f7:ff:1d:1f:d6:
         39:67:6e:b1:15:8c:8b:04:18:c3:37:b1:b6:c7:91:b0:7d:a3:
         29:bd:de:e4:7b:ea:dc:14:da:ae:88:45:c1:39:96:31:8e:91:
         58:42:ef:15:10:e8:ac:1f:38:88:1e:48:e1:da:19:5f:7e:e6:
         e3:f6:42:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDyrPxPB1GH+Hx1Mhau5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjYwMjA5MTEwMDE2WhcNMjYwMjEwMTEwMDE2WjAzMTEwLwYDVQQD
Eyg4ZTBhZWMwNjlhMjJhODg1YWMzMTRjZTkwOGFmMzM5Y2U4OGU1ZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14X5QCRqaIi7WrUs63CjXHFWaRRg
HJ8kcOpAFYjZouduLxmOwulgPnQkc2z/xyhJoc1CTwMCnpon/YP15fDjKsPMsXmr
9051KjAiSDTOzNyKAnFBl3tcwaiWZkLYX0hVn8KigwwUrn9Nfv4xRYkf/a+azC7W
ucZQanwMbu7bE73N+RdnFFuprzY/wamTW30idNKrBqR6YMV8kCTVT8chV9oahwTL
xKOuyBZCZYhuDp7VuGfVRuLG00juqm8NsB1sCw44MxS3E+6mQQXIc9ON8aTJNx1l
1hpvG5H3YA1s8lRzmw9UscemdSdTbzMEmUSNly/LmLL3WQESC3iRdsFo4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4K7AaaIqiFrDFM6QivM5zojl7VMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz9/y1n8L
86si0MSPLPjSXl0cUw/+gVjA4KumUsKDez4MMsBILqLrqClBDpHaqEzweDIUBUpm
/P+twES5pbQwN0QizwxvEGgFwoqN6abTDoNVSnfWZclR9qmiRKfHGFcwrlTutL7v
jWoZKdWpLfs4dAbNIx7hRL4kj+QPIRJbOwLNvQ9olB0qN/M8IsYploBqiZX3VZTL
ho5FrBsnNC6N9y1cCW/jbwAG7K+ZeJAm16cknIBcwGpAq1sn0659PJyrjff/HR/W
OWdusRWMiwQYwzextseRsH2jKb3e5Hvq3BTarohFwTmWMY6RWELvFRDorB84iB5I
4doZX37m4/ZC8A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:18 2026 by rpki-client