This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier:          edr0Wd/RGXrtGGpqClm4menHl+svTEq8t/2mcvLTcJY=
Subject key identifier:   56:E9:A3:F7:7F:FF:B0:13:2F:5B:AD:E1:2E:3C:4C:F5:DD:5E:1B:2A
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer:       /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial:       019C43222E1D1F29F88A33BCC62866F06B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number:          0F70
Signing time:             Mon 09 Feb 2026 16:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:39 +0000
Files and hashes:         1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: CLgWtvGl14Mi+zDtFD3B84jQHvKLVPROLt2+iwNokbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:2e:1d:1f:29:f8:8a:33:bc:c6:28:66:f0:6b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Validity
            Not Before: Feb  9 16:00:39 2026 GMT
            Not After : Feb 10 16:00:39 2026 GMT
        Subject: CN=56e9a3f77fffb0132f5bade12e3c4cf5dd5e1b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:73:63:58:f0:7b:41:fd:08:56:be:e0:60:
                    46:21:a9:ad:84:45:cb:b6:38:b6:f5:2e:b2:26:b0:
                    6f:1d:18:2c:67:a1:02:85:84:c7:e8:99:07:7b:a0:
                    29:8f:2f:48:88:cd:4b:39:e7:cf:2e:03:5f:98:dd:
                    9f:ec:b6:9d:a3:c2:5d:2e:b7:25:bc:5b:c6:02:97:
                    f0:b2:67:72:1a:c9:74:f4:da:cc:85:ad:48:d9:03:
                    9f:eb:56:d0:cd:2c:12:4e:d9:d4:2e:4e:a5:69:8b:
                    00:0e:6b:8e:74:04:66:f2:18:30:38:bb:1d:38:4f:
                    c2:98:58:de:f9:68:88:49:c0:63:c4:c5:c8:e5:3a:
                    a1:57:5d:74:10:50:e3:5c:a8:0d:78:a6:5a:db:06:
                    6c:0a:1c:c1:3c:ba:3e:a0:1c:4f:fc:87:0f:7c:a1:
                    73:35:c4:d5:51:d6:cb:9d:b0:b7:0d:ba:38:e3:fa:
                    77:c5:7b:da:85:27:92:51:5a:3b:c4:47:4b:90:c1:
                    37:46:ae:9e:42:8d:ad:8c:1d:f7:62:8f:fb:53:58:
                    ed:33:cd:ed:23:b9:6e:5d:6c:8b:6b:d0:46:d0:37:
                    4a:77:8f:44:bd:6b:69:29:80:0c:4c:cd:82:27:68:
                    52:89:da:e1:c8:de:32:9c:02:bc:20:6e:9e:f5:d1:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E9:A3:F7:7F:FF:B0:13:2F:5B:AD:E1:2E:3C:4C:F5:DD:5E:1B:2A
            X509v3 Authority Key Identifier:
                keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:cc:9e:ca:a0:e1:c8:7f:72:ef:af:ef:19:ab:7a:75:03:
         94:cc:a9:f9:26:57:43:93:96:27:40:8f:9b:25:08:85:e1:64:
         c5:f6:81:46:b1:31:46:df:cb:46:ba:04:e4:07:ad:44:cf:9f:
         05:16:62:55:29:20:a7:f5:1e:da:e8:a2:cd:ca:05:f9:d8:80:
         3a:93:02:80:8b:97:27:01:15:95:64:8c:75:e4:89:cf:61:83:
         77:8b:83:1e:fb:0c:f6:d8:cb:2b:0e:49:a8:5f:a9:07:ad:7e:
         c9:34:77:a2:13:35:c9:b7:f8:06:ec:be:86:01:83:69:64:7c:
         be:5d:89:64:a7:51:49:fb:66:1f:a6:ad:6b:f3:bb:d0:d4:6c:
         b5:b5:23:fa:1d:87:91:c3:be:e4:e4:85:bb:fb:34:06:2a:61:
         af:30:be:3b:44:d6:ae:eb:45:45:d2:b6:dd:0e:d6:d6:c6:43:
         de:08:92:ba:2b:e9:c1:ce:a2:6a:05:89:dc:bd:23:2a:39:8e:
         14:2c:ca:c7:65:93:96:78:2f:38:60:ac:6b:42:49:05:53:60:
         fc:f0:68:1a:01:91:91:14:0f:9c:b7:c4:48:14:6b:c7:74:a5:
         ff:21:21:9a:2f:1b:a3:32:4e:4f:07:43:c2:d9:bc:8c:6d:64:
         99:02:be:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIi4dHyn4ijO8xihm8Gs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGExODcxNWRiY2I0ODUzNjhmYWZlOTliOGFlMmM5ZjA0
YWY3NjMwHhcNMjYwMjA5MTYwMDM5WhcNMjYwMjEwMTYwMDM5WjAzMTEwLwYDVQQD
Eyg1NmU5YTNmNzdmZmZiMDEzMmY1YmFkZTEyZTNjNGNmNWRkNWUxYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEZzY1jwe0H9CFa+4GBGIamthEXL
tji29S6yJrBvHRgsZ6EChYTH6JkHe6Apjy9IiM1LOefPLgNfmN2f7Lado8JdLrcl
vFvGApfwsmdyGsl09NrMha1I2QOf61bQzSwSTtnULk6laYsADmuOdARm8hgwOLsd
OE/CmFje+WiIScBjxMXI5TqhV110EFDjXKgNeKZa2wZsChzBPLo+oBxP/IcPfKFz
NcTVUdbLnbC3Dbo44/p3xXvahSeSUVo7xEdLkME3Rq6eQo2tjB33Yo/7U1jtM83t
I7luXWyLa9BG0DdKd49EvWtpKYAMTM2CJ2hSidrhyN4ynAK8IG6e9dHlZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbpo/d//7ATL1ut4S48TPXdXhsqMB8GA1UdIwQY
MBaAFPBKGHFdvLSFNo+v6ZuK4snwSvdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTIt
MGY0MTAwN2E0Y2UwLzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTItMGY0MTAwN2E0Y2Uw
LzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApz3Mnsqg
4ch/cu+v7xmrenUDlMyp+SZXQ5OWJ0CPmyUIheFkxfaBRrExRt/LRroE5AetRM+f
BRZiVSkgp/Ue2uiizcoF+diAOpMCgIuXJwEVlWSMdeSJz2GDd4uDHvsM9tjLKw5J
qF+pB61+yTR3ohM1ybf4Buy+hgGDaWR8vl2JZKdRSftmH6ata/O70NRstbUj+h2H
kcO+5OSFu/s0BiphrzC+O0TWrutFRdK23Q7W1sZD3giSuivpwc6iagWJ3L0jKjmO
FCzKx2WTlngvOGCsa0JJBVNg/PBoGgGRkRQPnLfESBRrx3Sl/yEhmi8bozJOTwdD
wtm8jG1kmQK++w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:27 2026 by rpki-client