This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File:                     I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier:          GmtdDecfnJRTnxZwHjIHga0hb/LxPVgB1DhNtv3muqc=
Subject key identifier:   E4:88:5A:F7:EF:2C:8B:FF:BA:19:D6:CA:A9:BF:97:84:A5:CB:71:64
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer:       /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial:       019C40FD7CFE747095C11B8A5CD739781463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 06:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:19 +0000
Files and hashes:         1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: PenfbwwR/uQozKO2emPZ9c0G+ZbMdUrAq0P2GHei05w=)
                          2: MkZDnhBWSDVFNPdTIbLySY13AZo.roa (hash: G0tZaVek6hHuGJJA8eubBZEIhMXdNUS6nfdqgnLslHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:7c:fe:74:70:95:c1:1b:8a:5c:d7:39:78:14:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
        Validity
            Not Before: Feb  9 06:01:19 2026 GMT
            Not After : Feb 10 06:01:19 2026 GMT
        Subject: CN=e4885af7ef2c8bffba19d6caa9bf9784a5cb7164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:91:c5:81:db:e4:42:4a:d0:59:70:93:a2:bf:
                    08:4d:0d:f5:b3:8d:f2:03:6a:cd:34:cb:0a:86:04:
                    58:e6:79:99:b1:47:f9:bd:26:f8:69:99:5f:c4:96:
                    28:22:77:6d:2c:32:1e:77:b2:8c:ef:1a:6e:7a:e9:
                    56:1f:e1:4b:44:8b:e4:c8:92:4a:3d:19:47:9b:c1:
                    00:fb:39:96:0e:7b:dd:ef:3b:1b:cd:60:57:be:9e:
                    82:dc:ac:e6:70:fb:7c:fa:75:c7:a2:1a:12:38:42:
                    72:9c:73:b3:0e:2a:a9:6e:bb:7d:61:dd:92:87:4e:
                    05:70:80:e3:51:a6:bb:31:c8:8b:ca:b7:fb:75:5b:
                    90:df:78:91:1c:7e:ad:e2:19:7b:d9:db:55:53:84:
                    f2:4e:00:b0:09:0f:2a:60:d0:8e:24:53:6b:92:ea:
                    35:a1:31:1e:0b:cd:e1:7b:9c:54:0e:72:8b:b5:00:
                    23:e6:69:bc:2f:ec:50:e6:a3:46:29:35:cd:ac:54:
                    dd:dc:7d:46:dc:25:af:f5:97:e6:c0:f3:19:a2:c4:
                    b6:4e:8a:1b:80:9f:74:ec:99:c2:a2:32:bf:10:f7:
                    17:5b:c9:78:6f:90:47:54:2e:a9:65:7c:6c:e1:80:
                    33:c1:06:1b:08:37:93:ba:2d:25:4f:d5:65:88:d5:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:5A:F7:EF:2C:8B:FF:BA:19:D6:CA:A9:BF:97:84:A5:CB:71:64
            X509v3 Authority Key Identifier:
                keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:35:fe:16:76:ea:5f:17:3e:7e:6d:b5:b3:8d:4a:d7:4a:4a:
         14:40:40:46:f7:94:05:01:03:d0:57:02:32:ef:e4:82:27:33:
         c2:39:57:1f:a5:61:32:b4:a5:18:74:2a:d9:e3:92:26:43:ae:
         fb:cd:f2:04:3a:f0:7c:5c:32:a8:7c:d7:9a:bc:71:fd:8d:c7:
         e0:e3:a9:00:97:7f:51:c9:1b:5d:d2:c9:63:73:07:ed:d3:84:
         e5:68:16:07:b9:65:6d:08:1f:64:c1:b1:1b:5d:3f:8e:bd:b0:
         aa:b1:e5:c2:ff:68:af:c8:44:6f:82:e0:1b:04:c8:17:f1:b4:
         89:10:00:c2:44:08:3d:f4:e5:a2:f9:55:69:84:65:d3:cb:d6:
         37:b1:c5:7d:b3:de:a3:d0:b9:c0:4f:07:b2:2b:54:30:3f:e5:
         95:13:9e:dc:72:1b:4f:a3:b0:e6:53:8f:d1:38:c3:18:6c:5e:
         15:13:d1:60:3c:0a:ac:c1:79:7d:40:48:62:1c:8c:cc:8f:3e:
         ca:b4:a6:73:11:64:86:42:c2:13:da:eb:85:ed:70:bc:ad:2c:
         6c:0d:04:64:20:f8:04:75:86:57:10:19:1e:9d:27:d0:bc:64:
         e6:42:61:b5:f7:a0:0b:ef:98:94:7c:1b:e6:b1:55:77:9c:3d:
         c5:ea:c9:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/Xz+dHCVwRuKXNc5eBRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOTU3MmRkZmNhYjYyOTFlNjQxMGNjZDRlODYwZWUzNjAw
MGU2NjgwHhcNMjYwMjA5MDYwMTE5WhcNMjYwMjEwMDYwMTE5WjAzMTEwLwYDVQQD
EyhlNDg4NWFmN2VmMmM4YmZmYmExOWQ2Y2FhOWJmOTc4NGE1Y2I3MTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55HFgdvkQkrQWXCTor8ITQ31s43y
A2rNNMsKhgRY5nmZsUf5vSb4aZlfxJYoIndtLDIed7KM7xpueulWH+FLRIvkyJJK
PRlHm8EA+zmWDnvd7zsbzWBXvp6C3KzmcPt8+nXHohoSOEJynHOzDiqpbrt9Yd2S
h04FcIDjUaa7MciLyrf7dVuQ33iRHH6t4hl72dtVU4TyTgCwCQ8qYNCOJFNrkuo1
oTEeC83he5xUDnKLtQAj5mm8L+xQ5qNGKTXNrFTd3H1G3CWv9ZfmwPMZosS2Toob
gJ907JnCojK/EPcXW8l4b5BHVC6pZXxs4YAzwQYbCDeTui0lT9VliNW0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSIWvfvLIv/uhnWyqm/l4Sly3FkMB8GA1UdIwQY
MBaAFCOVct38q2KR5kEMzU6GDuNgAOZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZDdmMDgtZTc3Yy00MzM4LTlhMzkt
OGUxOWMwZGI4NmMyLzEvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZDdmMDgtZTc3Yy00MzM4LTlhMzktOGUxOWMwZGI4NmMy
LzEvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzX+Fnbq
Xxc+fm21s41K10pKFEBARveUBQED0FcCMu/kgiczwjlXH6VhMrSlGHQq2eOSJkOu
+83yBDrwfFwyqHzXmrxx/Y3H4OOpAJd/UckbXdLJY3MH7dOE5WgWB7llbQgfZMGx
G10/jr2wqrHlwv9or8hEb4LgGwTIF/G0iRAAwkQIPfTlovlVaYRl08vWN7HFfbPe
o9C5wE8HsitUMD/llROe3HIbT6Ow5lOP0TjDGGxeFRPRYDwKrMF5fUBIYhyMzI8+
yrSmcxFkhkLCE9rrhe1wvK0sbA0EZCD4BHWGVxAZHp0n0Lxk5kJhtfegC++YlHwb
5rFVd5w9xerJJA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:26 2026 by rpki-client