This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File:                     rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier:          qK8S1/xL9o1A20uPb0vY5/U4IEw8dOhq7maDfDHXyYc=
Subject key identifier:   0D:7D:A8:6E:63:4C:CC:FF:9D:B4:29:6B:5E:01:0E:A6:CC:88:5A:55
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer:       /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial:       019C420F959C5FDAFB06F1A040EAE8BC89A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:43 +0000
Files and hashes:         1: BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa (hash: e4XrjTZT9DVKsoP6xpDG68p8DkyaP4kbQPdVBr18Zts=)
                          2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: b7xkZNFXMu74cDiZI/4dMGYITgPhmCtJWQ+cXyeGgxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:95:9c:5f:da:fb:06:f1:a0:40:ea:e8:bc:89:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
        Validity
            Not Before: Feb  9 11:00:43 2026 GMT
            Not After : Feb 10 11:00:43 2026 GMT
        Subject: CN=0d7da86e634cccff9db4296b5e010ea6cc885a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:3b:c0:9e:63:23:96:22:79:8c:01:eb:da:
                    6b:57:ce:70:20:1c:ef:8e:e5:65:01:15:92:fd:2c:
                    b6:af:51:54:3a:fb:1c:53:13:0a:e0:b4:42:db:b0:
                    51:b7:ad:69:4a:a0:ac:e8:05:39:61:6b:69:a0:d4:
                    8e:ae:41:b6:00:ba:7e:a4:02:ab:11:fd:8d:cd:f4:
                    1e:a6:fa:e2:f6:33:23:be:89:75:a4:b1:ae:f1:e9:
                    f7:14:75:a4:c6:32:8b:b4:0f:0d:7d:63:26:cc:36:
                    51:8c:ff:94:c5:3a:77:63:b8:1e:d7:57:05:c9:66:
                    48:fc:27:36:48:5e:ff:b7:21:f8:37:3d:18:f5:48:
                    a6:fd:a6:a2:6d:6d:4f:49:5c:00:93:d9:5b:ed:fa:
                    25:05:4e:08:e8:0e:a1:07:7c:4f:19:c3:11:87:e9:
                    2a:9d:ca:be:ef:cd:c3:98:23:23:ea:55:8a:17:7f:
                    b9:2d:24:f6:45:72:8b:07:68:f0:64:b7:24:0f:65:
                    a3:a8:dc:b7:05:f4:b2:9d:fb:99:90:d2:03:2e:64:
                    72:e2:d5:b2:bf:cb:b4:e0:8a:16:e5:f7:4b:ff:18:
                    ad:79:a7:40:fc:7f:c2:da:dc:d5:c6:03:f7:f4:6b:
                    71:d6:ac:04:5c:9d:82:8b:81:1c:e3:33:eb:95:d7:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7D:A8:6E:63:4C:CC:FF:9D:B4:29:6B:5E:01:0E:A6:CC:88:5A:55
            X509v3 Authority Key Identifier:
                keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3e:3c:ec:fd:aa:da:d8:df:a7:58:48:f0:7f:94:88:da:41:
         dc:46:53:43:c3:ad:e7:e9:9e:b9:80:31:9b:fb:81:57:71:3f:
         3d:19:81:02:c3:37:53:77:27:8c:ed:f0:ea:df:58:90:0d:53:
         10:53:30:c1:e8:52:47:f5:f7:68:d1:60:8c:94:31:f9:2a:af:
         05:6d:4b:d0:49:67:38:9d:96:13:97:fb:92:68:85:d9:6a:a0:
         92:ba:29:a9:ec:1b:db:28:d3:6e:b7:65:be:0e:fe:26:19:c6:
         2f:aa:b8:30:58:b9:0a:7d:5a:57:87:67:b7:9f:97:87:c3:88:
         4b:b7:1b:e1:56:3a:ae:c8:cd:ca:47:0c:f8:fd:61:90:ab:bd:
         ed:78:9d:f7:bb:c8:ae:74:1a:8d:ef:66:46:38:cb:82:28:68:
         d7:5e:da:58:82:c4:02:75:dd:60:82:bc:cb:b9:ec:be:2b:ca:
         93:2e:03:03:05:49:24:05:ce:49:23:9f:ef:98:99:6c:49:81:
         d8:58:8d:ab:11:e3:63:0e:4f:23:dc:5d:68:94:dd:49:cc:a8:
         e5:b1:f6:8b:e4:01:75:b4:ff:e1:92:6f:d0:9d:19:88:d1:fc:
         32:f9:1b:d4:63:0b:8f:5d:af:6f:86:a1:11:ee:38:84:73:0d:
         a1:69:a6:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD5WcX9r7BvGgQOrovImjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4
OThlY2IwHhcNMjYwMjA5MTEwMDQzWhcNMjYwMjEwMTEwMDQzWjAzMTEwLwYDVQQD
EygwZDdkYTg2ZTYzNGNjY2ZmOWRiNDI5NmI1ZTAxMGVhNmNjODg1YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGw7wJ5jI5YieYwB69prV85wIBzv
juVlARWS/Sy2r1FUOvscUxMK4LRC27BRt61pSqCs6AU5YWtpoNSOrkG2ALp+pAKr
Ef2NzfQepvri9jMjvol1pLGu8en3FHWkxjKLtA8NfWMmzDZRjP+UxTp3Y7ge11cF
yWZI/Cc2SF7/tyH4Nz0Y9Uim/aaibW1PSVwAk9lb7folBU4I6A6hB3xPGcMRh+kq
ncq+783DmCMj6lWKF3+5LST2RXKLB2jwZLckD2WjqNy3BfSynfuZkNIDLmRy4tWy
v8u04IoW5fdL/xiteadA/H/C2tzVxgP39Gtx1qwEXJ2Ci4Ec4zPrldcwJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA19qG5jTMz/nbQpa14BDqbMiFpVMB8GA1UdIwQY
MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt
MzFkMjQ1ZjNiM2I4LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4
LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnD487P2q
2tjfp1hI8H+UiNpB3EZTQ8Ot5+meuYAxm/uBV3E/PRmBAsM3U3cnjO3w6t9YkA1T
EFMwwehSR/X3aNFgjJQx+SqvBW1L0ElnOJ2WE5f7kmiF2Wqgkropqewb2yjTbrdl
vg7+JhnGL6q4MFi5Cn1aV4dnt5+Xh8OIS7cb4VY6rsjNykcM+P1hkKu97Xid97vI
rnQaje9mRjjLgiho117aWILEAnXdYIK8y7nsvivKky4DAwVJJAXOSSOf75iZbEmB
2FiNqxHjYw5PI9xdaJTdScyo5bH2i+QBdbT/4ZJv0J0ZiNH8Mvkb1GMLj12vb4ah
Ee44hHMNoWmmng==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:35 2026 by rpki-client