This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File:                     04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier:          pTFmAYHAB+zpiknb4uv3VYVYkTyG2LzmbUNULgGQ89o=
Subject key identifier:   5C:89:A2:77:AB:D1:96:23:D0:66:4B:61:C2:22:7C:7A:B7:CD:00:35
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer:       /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial:       019C42B43F4DBCD5043FE34CD1A00981A65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number:          0510
Signing time:             Mon 09 Feb 2026 14:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:34 +0000
Files and hashes:         1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: rxXwohP044AREJfwQpnqVbfSi/gMv1dHu5tOlx+S5Go=)
                          2: WJ8RC-1511gAcgP7V2qvF3pMn2U.roa (hash: dIBhT1tAUbW7t5HBxfGi3Z3u9jhu8zIjbsn+nKs3E9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:3f:4d:bc:d5:04:3f:e3:4c:d1:a0:09:81:a6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
        Validity
            Not Before: Feb  9 14:00:34 2026 GMT
            Not After : Feb 10 14:00:34 2026 GMT
        Subject: CN=5c89a277abd19623d0664b61c2227c7ab7cd0035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:df:85:b1:54:c3:73:8c:f0:c5:22:d7:21:
                    18:ab:75:e8:e3:d5:77:8d:54:b6:c2:a3:d4:6b:50:
                    11:3b:02:2c:ca:e0:85:2d:8c:6c:a0:08:86:08:c5:
                    dc:32:a2:4f:7f:46:7d:a2:f5:dd:d7:6d:f9:86:dd:
                    2c:42:9e:b8:e3:05:1b:26:b2:02:5f:e6:b6:d7:bc:
                    be:cc:cb:e7:54:ac:8f:8b:43:fa:da:a8:a5:54:e8:
                    b7:d4:c3:c6:13:ac:b5:11:c1:dc:74:3f:84:0f:1f:
                    9e:9d:8a:13:c4:7d:6f:12:66:64:9b:9f:f7:9c:75:
                    c3:51:16:f4:92:da:c5:e1:a8:45:93:44:d7:fe:9f:
                    93:c6:5e:06:76:62:4f:1c:d3:83:b3:eb:1c:a5:e1:
                    71:5e:8f:1d:1c:13:fc:17:9e:15:79:f8:ee:c5:0f:
                    c2:ae:1d:f4:e0:d5:4b:3d:d1:34:9f:cc:3b:f8:72:
                    90:b0:eb:1a:bf:eb:01:39:9b:05:6e:68:45:cb:54:
                    f0:3d:78:68:6c:70:66:7b:88:18:6f:60:cd:bf:e3:
                    37:8c:d6:db:2d:d8:aa:c8:45:89:31:20:2c:eb:03:
                    4c:b8:79:52:22:19:51:3d:eb:42:df:d7:37:18:38:
                    cc:17:68:78:75:6c:2e:37:e1:53:46:57:3f:46:e3:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:A2:77:AB:D1:96:23:D0:66:4B:61:C2:22:7C:7A:B7:CD:00:35
            X509v3 Authority Key Identifier:
                keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6f:c9:4d:1b:8b:ae:e1:46:bb:9f:dd:e4:93:4c:ec:bf:5f:
         52:38:8f:a5:27:f5:f6:b0:16:8b:60:5d:9e:88:b3:21:80:1c:
         db:bc:1f:89:03:d1:9e:75:9f:f1:0a:6b:db:f3:0a:46:71:9c:
         31:76:d0:bf:e7:e5:f1:d7:90:af:42:b1:19:c4:8c:87:78:53:
         df:1d:15:bd:0d:08:18:9a:3e:a5:11:11:6b:7a:76:69:8f:37:
         fb:cb:0a:4f:ba:42:71:69:67:61:0c:9c:80:85:d6:96:87:4f:
         3a:57:79:b6:61:11:24:d5:07:4a:93:a6:a5:00:79:de:bb:fb:
         0d:9f:28:5c:b5:d0:d0:87:40:8d:52:fb:2d:f4:4d:80:13:8c:
         0a:04:57:80:a6:ce:c5:63:25:60:e6:12:af:78:e5:17:c7:b9:
         ed:2f:aa:0a:44:0d:4c:92:3f:39:6f:01:29:93:79:c7:5f:af:
         89:c3:42:57:ce:e2:1d:08:b9:bf:3e:5d:48:8e:a1:ee:78:32:
         87:3e:c0:15:1f:ab:c9:6a:42:75:98:3b:f6:a1:b7:3e:ec:04:
         cf:27:98:7b:41:86:bd:59:99:0c:c0:b3:74:14:9f:4b:3b:33:
         8a:20:69:ec:d3:45:74:9a:25:a7:ec:5f:2c:09:97:28:51:04:
         18:b8:66:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtD9NvNUEP+NM0aAJgaZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODAyZWE4ZjljZTgwMmI1N2JiYmFiNzhlMzA5NzkzN2Zm
YTExYzQwHhcNMjYwMjA5MTQwMDM0WhcNMjYwMjEwMTQwMDM0WjAzMTEwLwYDVQQD
Eyg1Yzg5YTI3N2FiZDE5NjIzZDA2NjRiNjFjMjIyN2M3YWI3Y2QwMDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb3fhbFUw3OM8MUi1yEYq3Xo49V3
jVS2wqPUa1AROwIsyuCFLYxsoAiGCMXcMqJPf0Z9ovXd1235ht0sQp644wUbJrIC
X+a217y+zMvnVKyPi0P62qilVOi31MPGE6y1EcHcdD+EDx+enYoTxH1vEmZkm5/3
nHXDURb0ktrF4ahFk0TX/p+Txl4GdmJPHNODs+scpeFxXo8dHBP8F54VefjuxQ/C
rh304NVLPdE0n8w7+HKQsOsav+sBOZsFbmhFy1TwPXhobHBme4gYb2DNv+M3jNbb
LdiqyEWJMSAs6wNMuHlSIhlRPetC39c3GDjMF2h4dWwuN+FTRlc/RuP+xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyJoner0ZYj0GZLYcIifHq3zQA1MB8GA1UdIwQY
MBaAFNOALqj5zoArV7u6t44wl5N/+hHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NzAyZTctNGJmMS00MDdlLWJhZmUt
ZmFkMjFmZjI5ZTJiLzEvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84NzAyZTctNGJmMS00MDdlLWJhZmUtZmFkMjFmZjI5ZTJi
LzEvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2/JTRuL
ruFGu5/d5JNM7L9fUjiPpSf19rAWi2BdnoizIYAc27wfiQPRnnWf8Qpr2/MKRnGc
MXbQv+fl8deQr0KxGcSMh3hT3x0VvQ0IGJo+pRERa3p2aY83+8sKT7pCcWlnYQyc
gIXWlodPOld5tmERJNUHSpOmpQB53rv7DZ8oXLXQ0IdAjVL7LfRNgBOMCgRXgKbO
xWMlYOYSr3jlF8e57S+qCkQNTJI/OW8BKZN5x1+vicNCV87iHQi5vz5dSI6h7ngy
hz7AFR+ryWpCdZg79qG3PuwEzyeYe0GGvVmZDMCzdBSfSzsziiBp7NNFdJolp+xf
LAmXKFEEGLhmJA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:31 2026 by rpki-client