This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          MGLswczwJhcA76yIWNse27PDGK+Ez9yumOh5ent0y1w=
Subject key identifier:   0A:AE:52:0A:58:49:F5:72:C9:3A:CE:98:20:24:73:A3:4D:70:06:9D
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       019C4246B770D1C16C60598501848F02FA68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 12:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:56 +0000
Files and hashes:         1: 2_ip97ddlj1cQ2mlpG8VnnAhSa4.roa (hash: 6R1vvhI30TeNiE30+I3zfpPJroDLNETGICaQVhgLg/w=)
                          2: KoVt6Xy7gkv7j_38ctTdwANrLe0.roa (hash: f72VqLp88rf5xfXfyl+PJYk0ViN53QtQMBfU74Y077U=)
                          3: LMl6QCFGZ6NTfYGlowyafW63Beg.roa (hash: BhySL2ahxdsB2rFdsSzbUlZCzHf0m4FchHvGZ6v2dx8=)
                          4: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: NXHva1jnn52H5zP9CFjxnOwipq4/HdVmE/kQ338y9oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:b7:70:d1:c1:6c:60:59:85:01:84:8f:02:fa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Feb  9 12:00:56 2026 GMT
            Not After : Feb 10 12:00:56 2026 GMT
        Subject: CN=0aae520a5849f572c93ace98202473a34d70069d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:3a:e5:57:12:e7:8b:82:d6:13:b3:00:c2:
                    de:09:ce:98:e3:4a:04:ac:ae:e2:cd:e7:05:78:d9:
                    b9:27:1c:d2:d7:44:5d:cd:8b:64:62:0a:cf:b2:5a:
                    53:e1:d7:07:04:03:38:09:00:ae:38:47:92:54:79:
                    50:27:0d:be:c0:fb:0f:f8:bc:28:c7:7a:94:08:1c:
                    b5:4b:7a:f2:2b:71:b3:72:a5:b8:91:5f:ec:b2:b4:
                    b5:9b:5b:34:4d:d7:98:fa:21:a6:d2:81:7a:71:3c:
                    b5:f5:0f:10:e5:a2:58:71:ff:8b:d5:7c:4a:01:72:
                    2e:07:c9:7a:d0:5d:ff:20:2e:50:4d:c8:04:da:83:
                    c8:05:94:71:f7:3d:7e:b2:b2:36:1c:6e:3a:3d:2a:
                    0c:1d:23:66:10:d7:c4:97:dc:3c:b8:f8:d3:3f:11:
                    3e:5d:59:9e:d2:65:e2:6b:ce:ff:4a:f1:f6:b8:3b:
                    28:f1:7c:db:aa:97:95:80:ab:65:f7:5f:c3:5b:9d:
                    09:5c:71:fd:72:3a:9f:3e:09:50:00:e1:57:c5:97:
                    3e:7e:13:3b:69:d9:4b:19:20:36:5f:cc:f8:7f:0c:
                    01:35:f2:74:06:10:86:62:d9:d5:88:7f:51:94:65:
                    60:ca:28:c7:2a:44:6d:da:7d:54:13:f6:53:ec:ed:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AE:52:0A:58:49:F5:72:C9:3A:CE:98:20:24:73:A3:4D:70:06:9D
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:57:f5:fa:7e:7e:1d:03:07:3b:77:be:33:fa:31:88:77:
         f1:be:6b:28:e6:07:f5:a5:fe:ad:00:29:70:10:d2:d2:15:60:
         f1:7d:50:c8:bc:3c:f8:1b:ca:ce:07:40:6b:3e:43:8f:66:ee:
         94:7e:7b:1f:46:7b:3b:ae:c8:e3:45:17:14:e3:85:f4:d3:42:
         29:92:25:1c:53:55:3a:e7:0d:42:22:da:10:2d:9c:10:5b:c7:
         3a:93:ce:bb:e5:02:a9:40:79:3a:26:7a:b4:5e:91:dc:b2:70:
         40:f4:38:ea:e7:6b:62:c8:f2:b1:f4:e9:ef:54:48:50:46:81:
         f6:93:eb:5f:80:53:a0:b8:06:1f:4d:4c:a7:95:72:a6:c0:03:
         f4:fe:67:a1:38:aa:2b:c3:da:b2:28:e6:da:6f:27:8f:be:22:
         5a:c0:c5:44:86:ca:f9:cd:22:e6:7e:2b:e6:28:a8:cb:07:81:
         1d:40:2f:be:89:2a:db:1d:43:d5:5d:a7:60:ee:d6:aa:a8:1a:
         19:f3:93:5a:12:de:48:de:a5:49:8a:dd:aa:a1:c9:14:9c:d0:
         ab:a9:ee:de:03:db:60:2d:f3:4a:af:fb:c9:69:a7:47:6a:f1:
         bf:8a:f3:e1:0e:e4:20:3d:00:2c:11:f2:c5:c2:54:cb:a0:04:
         e5:2e:93:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRrdw0cFsYFmFAYSPAvpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZWE4OTRlZTA1Nzc1ZTBlZjA2MWQwODZjYTI1MjE0N2Y1
YzkxZGUwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD
EygwYWFlNTIwYTU4NDlmNTcyYzkzYWNlOTgyMDI0NzNhMzRkNzAwNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NE65VcS54uC1hOzAMLeCc6Y40oE
rK7izecFeNm5JxzS10RdzYtkYgrPslpT4dcHBAM4CQCuOEeSVHlQJw2+wPsP+Lwo
x3qUCBy1S3ryK3GzcqW4kV/ssrS1m1s0TdeY+iGm0oF6cTy19Q8Q5aJYcf+L1XxK
AXIuB8l60F3/IC5QTcgE2oPIBZRx9z1+srI2HG46PSoMHSNmENfEl9w8uPjTPxE+
XVme0mXia87/SvH2uDso8XzbqpeVgKtl91/DW50JXHH9cjqfPglQAOFXxZc+fhM7
adlLGSA2X8z4fwwBNfJ0BhCGYtnViH9RlGVgyijHKkRt2n1UE/ZT7O2n7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAquUgpYSfVyyTrOmCAkc6NNcAadMB8GA1UdIwQY
MBaAFHXqiU7gV3Xg7wYdCGyiUhR/XJHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xY2RjZTItYTNmOC00NGI2LWI1ZTEt
YjdmMjk4NGViNjUzLzEvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xY2RjZTItYTNmOC00NGI2LWI1ZTEtYjdmMjk4NGViNjUz
LzEvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesZX9fp+
fh0DBzt3vjP6MYh38b5rKOYH9aX+rQApcBDS0hVg8X1QyLw8+BvKzgdAaz5Dj2bu
lH57H0Z7O67I40UXFOOF9NNCKZIlHFNVOucNQiLaEC2cEFvHOpPOu+UCqUB5OiZ6
tF6R3LJwQPQ46udrYsjysfTp71RIUEaB9pPrX4BToLgGH01Mp5VypsAD9P5noTiq
K8Pasijm2m8nj74iWsDFRIbK+c0i5n4r5iioyweBHUAvvokq2x1D1V2nYO7Wqqga
GfOTWhLeSN6lSYrdqqHJFJzQq6nu3gPbYC3zSq/7yWmnR2rxv4rz4Q7kID0ALBHy
xcJUy6AE5S6TmQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:39 2026 by rpki-client