This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
File:                     eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json)
Hash identifier:          Q4tNhiRMnJZ3O7YmgHWAUkpJw1pyyk5rWD6CB7ZFUlk=
Subject key identifier:   7D:CD:3B:E2:D9:4D:2B:0E:0F:B9:FB:ED:A1:07:7D:35:76:79:30:9A
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Certificate issuer:       /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial:       019C43FE0789D5B1DA75F4E8932F671F3086
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:47 +0000
Files and hashes:         1: Ym1MgRv-50h_8HgOmRXao0XyVRI.roa (hash: QCOXuZU6xfCdgok7iSaeanqJZnLc1XTx+TNhtGwPM/g=)
                          2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: n7qVOUwbVYbgaaqHYfw26pMgZdGawT1566w5F3Lqztk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:07:89:d5:b1:da:75:f4:e8:93:2f:67:1f:30:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
        Validity
            Not Before: Feb  9 20:00:47 2026 GMT
            Not After : Feb 10 20:00:47 2026 GMT
        Subject: CN=7dcd3be2d94d2b0e0fb9fbeda1077d357679309a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:78:fa:23:f7:79:de:57:6e:2d:c7:75:ef:
                    71:1a:1e:99:2f:79:19:12:94:bb:f6:5f:ad:06:3b:
                    c9:7c:54:e6:a8:a2:59:a4:de:45:5e:8b:2a:09:68:
                    10:a1:cf:11:da:20:e3:51:cd:ba:ea:d3:3b:4e:f2:
                    c5:ba:fd:0a:1e:2b:97:39:de:1f:57:a3:d2:f9:af:
                    c1:36:91:24:47:98:83:4f:4d:16:31:aa:0b:7b:77:
                    b9:2d:36:d4:50:82:66:d5:6e:76:ad:6b:4b:29:45:
                    43:7c:91:7a:83:84:3a:c7:c0:bf:74:f1:c4:f4:79:
                    c0:bb:6f:c4:42:53:07:d8:ca:e3:dd:d0:a7:7a:db:
                    e8:9e:ca:44:dc:79:26:13:ce:08:91:33:26:84:ee:
                    b8:3e:55:81:f1:04:a8:51:69:22:5d:fe:01:ca:b0:
                    75:67:61:9a:db:72:5a:5e:00:ce:a5:92:be:eb:3c:
                    cf:8f:5b:9e:1f:25:00:f0:12:51:ff:e8:83:22:a5:
                    ef:97:1b:e0:c2:9e:06:71:45:79:e2:8a:e0:d7:ae:
                    c3:78:c5:d1:46:80:cb:d2:38:1b:9c:38:01:35:8e:
                    3e:3f:eb:4f:6b:73:71:79:09:d8:31:15:c5:68:86:
                    25:94:a2:5b:36:9a:ea:9a:5f:b5:c4:ae:a2:4e:09:
                    c4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:3B:E2:D9:4D:2B:0E:0F:B9:FB:ED:A1:07:7D:35:76:79:30:9A
            X509v3 Authority Key Identifier:
                keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:10:98:5f:60:8d:a9:74:38:98:cb:db:da:a6:7d:cc:98:da:
         c4:c1:04:f6:b6:b4:7a:54:32:d3:a4:c0:9b:22:85:96:f5:0a:
         dc:6c:86:ae:a1:b7:6f:7f:2f:66:dd:8b:0f:fb:b3:ed:ed:7c:
         1f:ce:b6:d8:f2:95:5d:34:9d:cc:eb:f2:6d:fb:6a:49:54:ea:
         1a:01:c1:4c:1d:f9:ac:d8:e8:0a:3c:4f:d0:ba:0e:81:0f:0d:
         5b:35:39:a8:69:1a:a1:24:e3:c5:30:64:d4:1b:25:d5:71:f1:
         58:91:31:60:b3:89:61:7e:7e:13:15:d2:8d:e9:a6:f1:17:e3:
         50:70:1c:9d:cb:39:e0:c5:a0:ee:a4:c5:49:f2:05:8c:1e:88:
         91:90:af:25:f1:69:6f:00:36:fc:76:97:61:e6:6d:36:63:25:
         f5:23:b2:b6:96:e0:10:69:23:ab:7d:f4:8f:f9:0f:8c:89:ff:
         d2:21:ba:82:74:2a:83:e1:1f:7e:73:36:17:33:d4:56:5c:7e:
         52:5f:26:f9:8f:90:3d:5b:03:6c:82:ba:22:e4:f2:40:e2:f8:
         98:7a:ae:4a:8d:fb:18:89:f6:36:fe:12:29:66:49:a1:a8:8b:
         c6:86:23:33:8c:14:0e:de:c8:1e:4e:40:ab:a4:25:51:5f:74:
         e8:21:8a:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/geJ1bHadfToky9nHzCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ODI4MDJjZTcxODMwNTkwYjI2YWJhOTk3MWUxMmY2YWUx
OGRjZWUwHhcNMjYwMjA5MjAwMDQ3WhcNMjYwMjEwMjAwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZGNkM2JlMmQ5NGQyYjBlMGZiOWZiZWRhMTA3N2QzNTc2NzkzMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCp4+iP3ed5Xbi3Hde9xGh6ZL3kZ
EpS79l+tBjvJfFTmqKJZpN5FXosqCWgQoc8R2iDjUc266tM7TvLFuv0KHiuXOd4f
V6PS+a/BNpEkR5iDT00WMaoLe3e5LTbUUIJm1W52rWtLKUVDfJF6g4Q6x8C/dPHE
9HnAu2/EQlMH2Mrj3dCnetvonspE3HkmE84IkTMmhO64PlWB8QSoUWkiXf4ByrB1
Z2Ga23JaXgDOpZK+6zzPj1ueHyUA8BJR/+iDIqXvlxvgwp4GcUV54org167DeMXR
RoDL0jgbnDgBNY4+P+tPa3NxeQnYMRXFaIYllKJbNprqml+1xK6iTgnE0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3NO+LZTSsOD7n77aEHfTV2eTCaMB8GA1UdIwQY
MBaAFHmCgCznGDBZCyarqZceEvauGNzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUt
ZGNkZjI0NDE0OTg5LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUtZGNkZjI0NDE0OTg5
LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhCYX2CN
qXQ4mMvb2qZ9zJjaxMEE9ra0elQy06TAmyKFlvUK3GyGrqG3b38vZt2LD/uz7e18
H8622PKVXTSdzOvybftqSVTqGgHBTB35rNjoCjxP0LoOgQ8NWzU5qGkaoSTjxTBk
1Bsl1XHxWJExYLOJYX5+ExXSjemm8RfjUHAcncs54MWg7qTFSfIFjB6IkZCvJfFp
bwA2/HaXYeZtNmMl9SOytpbgEGkjq330j/kPjIn/0iG6gnQqg+EffnM2FzPUVlx+
Ul8m+Y+QPVsDbIK6IuTyQOL4mHquSo37GIn2Nv4SKWZJoaiLxoYjM4wUDt7IHk5A
q6QlUV906CGKpA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:21 2026 by rpki-client