This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File:                     1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier:          JzsXZGlB1f59FLznnHceRPi5ervkieKQVvJqYnE0Wwc=
Subject key identifier:   0F:F4:87:6C:E0:6A:94:1A:9A:19:36:00:0E:1A:34:44:D7:02:FF:6D
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer:       /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial:       019C44A26901A7C85A4F7F0C0BF9212087A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number:          0EFA
Signing time:             Mon 09 Feb 2026 23:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:19 +0000
Files and hashes:         1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: d75QxwdfAQeDVmhgUSz/FEhZN0xJrDN6s9mN/0qgnec=)
                          2: znlH05wUUI_cREyEO6A7B87acRI.roa (hash: MtJpDkpsvsN3UGCwGXX+CpXcpcwlJRAixBEzCR1dqmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:69:01:a7:c8:5a:4f:7f:0c:0b:f9:21:20:87:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
        Validity
            Not Before: Feb  9 23:00:19 2026 GMT
            Not After : Feb 10 23:00:19 2026 GMT
        Subject: CN=0ff4876ce06a941a9a1936000e1a3444d702ff6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:27:bc:fc:08:a0:3d:7b:08:9e:51:df:0b:
                    9f:24:6c:38:4a:38:07:bc:65:de:2b:67:49:d4:19:
                    bf:25:22:e6:35:b1:8d:d7:65:f8:89:5f:28:8a:68:
                    35:01:8d:91:42:90:c4:04:31:a4:37:c4:b7:a7:3c:
                    70:0d:de:8b:6c:49:3e:58:87:e1:17:fe:94:28:40:
                    30:6a:9a:38:9e:b3:99:30:40:f5:60:8b:4d:c4:0f:
                    a3:bc:e6:76:a7:e6:b1:2a:0d:a5:d6:76:ca:55:b9:
                    d6:02:0f:76:17:42:b3:e4:4a:32:0c:d5:bd:00:94:
                    c1:10:46:7b:13:ea:af:6d:40:16:99:4d:00:68:d3:
                    27:04:32:9f:4c:34:8c:a8:19:01:a0:6e:62:69:dd:
                    4a:0e:b4:38:95:c7:6c:a7:21:75:b2:c3:8d:9c:fd:
                    21:5a:a0:5c:aa:94:bc:99:3f:eb:2e:61:4e:29:4e:
                    b4:ea:40:3a:08:20:28:9f:48:10:24:e8:3b:79:3c:
                    e1:47:f9:f7:d2:76:55:9e:7b:46:8f:db:67:c6:99:
                    52:8d:d7:89:4a:db:01:25:1f:63:7b:8c:bc:78:5e:
                    49:ec:cc:38:e8:12:a5:07:b4:5b:e5:f0:ea:d4:9f:
                    39:ab:b0:68:05:54:a8:e4:41:d1:22:86:ca:ab:a9:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:87:6C:E0:6A:94:1A:9A:19:36:00:0E:1A:34:44:D7:02:FF:6D
            X509v3 Authority Key Identifier:
                keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:aa:f2:b6:a2:81:8b:94:f9:78:4d:ba:ec:94:0b:50:cd:
         37:0d:de:5d:88:c6:87:a4:67:c9:cc:cb:e4:c4:f6:df:df:1c:
         6a:e1:32:42:bb:94:9a:33:8a:92:b0:42:9f:7a:e8:5a:85:64:
         87:10:de:bf:89:11:b8:52:35:bf:ad:50:d3:69:33:85:80:ca:
         8e:07:70:9c:87:3d:a9:1e:71:cf:4b:19:5d:15:00:2c:8c:2c:
         f5:9b:53:56:fb:fa:f2:d6:43:60:11:5d:77:dd:93:8f:3e:88:
         d6:48:bf:8e:7a:1c:52:85:13:d1:74:62:ec:67:28:3c:e8:ef:
         06:13:aa:7d:37:7b:db:f2:49:df:f6:ca:f0:cb:c0:a6:ce:70:
         49:6a:6c:de:69:31:e4:be:11:c1:db:48:a6:47:95:c2:38:2c:
         45:fb:6f:b5:61:5c:29:92:c5:29:9e:2d:b9:a1:50:d2:0a:c6:
         62:2c:c7:f1:bf:66:a2:32:3e:29:b5:97:bc:e5:d8:95:f5:31:
         32:26:2b:d8:c6:09:2a:1a:cd:3c:18:cd:ca:45:22:01:bb:ef:
         66:b1:e4:28:f4:a9:c9:dd:62:97:e8:54:e9:67:1a:c8:4a:2c:
         3d:a2:3c:d2:61:89:43:89:ce:dc:63:0f:14:22:55:89:7b:14:
         77:8d:d9:5e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxEomkBp8haT38MC/khIIelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjE4Mjg1ZjQyZWQ2N2MxMWQ4ZjgzZGY0ODhiMTBmYzg3
ZjE3YmYwHhcNMjYwMjA5MjMwMDE5WhcNMjYwMjEwMjMwMDE5WjAzMTEwLwYDVQQD
EygwZmY0ODc2Y2UwNmE5NDFhOWExOTM2MDAwZTFhMzQ0NGQ3MDJmZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXYnvPwIoD17CJ5R3wufJGw4SjgH
vGXeK2dJ1Bm/JSLmNbGN12X4iV8oimg1AY2RQpDEBDGkN8S3pzxwDd6LbEk+WIfh
F/6UKEAwapo4nrOZMED1YItNxA+jvOZ2p+axKg2l1nbKVbnWAg92F0Kz5EoyDNW9
AJTBEEZ7E+qvbUAWmU0AaNMnBDKfTDSMqBkBoG5iad1KDrQ4lcdspyF1ssONnP0h
WqBcqpS8mT/rLmFOKU606kA6CCAon0gQJOg7eTzhR/n30nZVnntGj9tnxplSjdeJ
StsBJR9je4y8eF5J7Mw46BKlB7Rb5fDq1J85q7BoBVSo5EHRIobKq6kmGwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA/0h2zgapQamhk2AA4aNETXAv9tMB8GA1UdIwQY
MBaAFPixgoX0LtZ8Edj4PfSIsQ/Ifxe/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MR0NoZlF1MW53UjJQZzk5SWl4RDhoX0Y3OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYjMzMWNjLTZiNmQtNDY5My05MjY3
LWI0MjI3NzkxNjBiYi8xLzEtTEdDaGZRdTFud1IyUGc5OUlpeEQ4aF9GNzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EyL2IzMzFjYy02YjZkLTQ2OTMtOTI2Ny1iNDIyNzc5MTYw
YmIvMS8xLUxHQ2hmUXUxbndSMlBnOTlJaXhEOGhfRjc4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNGq
8raigYuU+XhNuuyUC1DNNw3eXYjGh6RnyczL5MT2398cauEyQruUmjOKkrBCn3ro
WoVkhxDev4kRuFI1v61Q02kzhYDKjgdwnIc9qR5xz0sZXRUALIws9ZtTVvv68tZD
YBFdd92Tjz6I1ki/jnocUoUT0XRi7GcoPOjvBhOqfTd72/JJ3/bK8MvAps5wSWps
3mkx5L4RwdtIpkeVwjgsRftvtWFcKZLFKZ4tuaFQ0grGYizH8b9mojI+KbWXvOXY
lfUxMiYr2MYJKhrNPBjNykUiAbvvZrHkKPSpyd1il+hU6WcayEosPaI80mGJQ4nO
3GMPFCJViXsUd43ZXg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:05 2026 by rpki-client