This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File:                     MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier:          sXOshwuwfaAPWguk4c7DaCZ++OnZSAyI3IFA+m9+wXM=
Subject key identifier:   9A:9C:6B:71:48:1E:26:A6:CB:33:C4:BA:DF:02:23:87:2D:25:07:02
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer:       /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial:       019C42468B820C8E8E89E1B023BCBCEDD717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 12:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:45 +0000
Files and hashes:         1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
                          2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
                          3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: 3necx+FhMG2apywe01ONQEnnLEkalLUsGcO2cdXAfI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:8b:82:0c:8e:8e:89:e1:b0:23:bc:bc:ed:d7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
        Validity
            Not Before: Feb  9 12:00:45 2026 GMT
            Not After : Feb 10 12:00:45 2026 GMT
        Subject: CN=9a9c6b71481e26a6cb33c4badf0223872d250702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:01:a1:c4:58:96:a9:8f:85:52:59:29:40:34:
                    15:87:8e:37:d6:3e:6c:7a:b5:e9:59:f8:d3:43:2f:
                    ff:b4:1c:b0:04:5e:9a:05:d2:0f:20:a2:4c:71:22:
                    ba:99:64:84:46:ed:e0:1e:48:7a:a5:3b:da:14:84:
                    7c:7c:91:01:b9:0e:cc:f5:01:03:4c:88:7b:e2:36:
                    b6:eb:d2:52:a8:30:6d:4c:22:27:d5:e7:a5:31:29:
                    66:e9:ae:f1:66:0d:8b:42:d2:59:91:cf:4a:13:aa:
                    df:d4:8a:e2:ea:da:01:83:82:83:2c:73:fe:60:17:
                    64:a4:0c:9d:68:27:e4:0f:5d:9b:8b:61:c4:9b:eb:
                    64:5a:5f:61:76:28:e6:f4:72:40:c5:a8:d2:02:6d:
                    ef:e0:8e:a4:4f:04:bb:dc:d8:70:e7:e7:49:c5:83:
                    13:79:a1:d0:72:ad:34:93:6f:a8:29:29:5b:51:3c:
                    94:fe:28:de:82:4b:1b:11:8a:e7:b8:00:de:58:f1:
                    c1:db:ed:f9:bc:7d:d3:24:1c:6c:f2:f5:2e:65:cc:
                    a1:88:fe:06:7b:1d:46:b0:be:10:ab:57:6b:23:d5:
                    b3:f0:4a:0d:6c:d9:18:af:f4:ee:b4:a4:d9:a4:c1:
                    63:35:0d:6a:89:1b:58:89:52:c7:f0:7a:1e:df:24:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9C:6B:71:48:1E:26:A6:CB:33:C4:BA:DF:02:23:87:2D:25:07:02
            X509v3 Authority Key Identifier:
                keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:74:04:96:e4:48:12:d0:bc:21:35:72:76:99:55:74:af:
         ee:aa:f3:62:32:f3:81:73:c4:bc:5f:c5:ae:b1:7a:f7:57:fe:
         5e:1b:bb:bc:43:87:37:bd:c7:a6:ff:19:94:ec:1e:bd:3d:c4:
         5c:be:e3:f7:7b:40:1a:b2:f4:50:08:31:15:35:e6:44:8a:bf:
         f6:4c:d8:40:58:91:a4:93:d8:bd:7a:9a:8e:3b:43:b6:10:12:
         84:78:ce:3b:7c:85:ab:bb:02:57:98:28:bf:06:e2:50:78:e9:
         c3:ca:de:52:b1:f5:04:a8:e9:2b:e9:09:7a:73:ea:41:c8:51:
         fa:05:06:ce:40:ec:5e:1e:84:98:18:50:97:d9:61:22:3d:d5:
         71:23:ac:08:0a:5b:4e:3c:9f:6d:18:35:2c:13:b3:14:d9:51:
         d1:ec:26:9f:c5:bd:99:4d:f0:50:4d:8e:75:b0:07:c4:45:ed:
         da:92:ab:a3:28:94:0d:13:2f:6d:0e:fd:bd:48:c2:81:68:0d:
         2b:19:2a:f9:eb:74:11:8f:4c:e6:6d:de:8f:df:81:ff:19:c5:
         ca:f9:81:95:bb:cd:35:f9:d5:4e:f0:aa:88:5e:14:5b:a0:b0:
         d2:8f:ba:9a:07:c1:a9:05:b1:35:e3:46:ee:3a:b5:4b:97:b6:
         da:52:dc:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRouCDI6OieGwI7y87dcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj
MDUxNGUwHhcNMjYwMjA5MTIwMDQ1WhcNMjYwMjEwMTIwMDQ1WjAzMTEwLwYDVQQD
Eyg5YTljNmI3MTQ4MWUyNmE2Y2IzM2M0YmFkZjAyMjM4NzJkMjUwNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAGhxFiWqY+FUlkpQDQVh4431j5s
erXpWfjTQy//tBywBF6aBdIPIKJMcSK6mWSERu3gHkh6pTvaFIR8fJEBuQ7M9QED
TIh74ja269JSqDBtTCIn1eelMSlm6a7xZg2LQtJZkc9KE6rf1Iri6toBg4KDLHP+
YBdkpAydaCfkD12bi2HEm+tkWl9hdijm9HJAxajSAm3v4I6kTwS73Nhw5+dJxYMT
eaHQcq00k2+oKSlbUTyU/ijegksbEYrnuADeWPHB2+35vH3TJBxs8vUuZcyhiP4G
ex1GsL4Qq1drI9Wz8EoNbNkYr/TutKTZpMFjNQ1qiRtYiVLH8Hoe3yQanwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqca3FIHiamyzPEut8CI4ctJQcCMB8GA1UdIwQY
MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt
NjkzNjc2MmQyZmNlLzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl
LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErl0BJbk
SBLQvCE1cnaZVXSv7qrzYjLzgXPEvF/FrrF691f+Xhu7vEOHN73Hpv8ZlOwevT3E
XL7j93tAGrL0UAgxFTXmRIq/9kzYQFiRpJPYvXqajjtDthAShHjOO3yFq7sCV5go
vwbiUHjpw8reUrH1BKjpK+kJenPqQchR+gUGzkDsXh6EmBhQl9lhIj3VcSOsCApb
TjyfbRg1LBOzFNlR0ewmn8W9mU3wUE2OdbAHxEXt2pKroyiUDRMvbQ79vUjCgWgN
Kxkq+et0EY9M5m3ej9+B/xnFyvmBlbvNNfnVTvCqiF4UW6Cw0o+6mgfBqQWxNeNG
7jq1S5e22lLcCA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:37 2026 by rpki-client