This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File:                     1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier:          e8O5MTyurioPQ3cwJ6tmGN51AZldzs8jo6h61d1lgvo=
Subject key identifier:   03:0C:73:8D:DF:18:FD:34:49:1D:AF:96:05:1B:6D:5F:91:9E:F0:61
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer:       /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial:       019C4246C61227334779F9ED2B1BAA4F5AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number:          0170
Signing time:             Mon 09 Feb 2026 12:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 12:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 12:01:00 +0000
Files and hashes:         1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: P8JIeJwHJBRAderznxD/QUo3Db7G8Dxyq1/Wh1zp13s=)
                          2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:c6:12:27:33:47:79:f9:ed:2b:1b:aa:4f:5a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
        Validity
            Not Before: Feb  9 12:01:00 2026 GMT
            Not After : Feb 10 12:01:00 2026 GMT
        Subject: CN=030c738ddf18fd34491daf96051b6d5f919ef061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:71:aa:e1:f7:8b:96:92:05:b8:5c:77:cf:
                    2d:04:9e:08:c3:0c:b6:5a:e7:06:5f:4c:68:67:04:
                    8f:63:f4:9d:22:8e:cc:c7:12:dd:8b:e0:fd:81:f5:
                    a1:8c:1b:44:14:d2:90:c3:c3:f0:58:27:6d:2d:9c:
                    5c:2c:8e:f5:8e:14:49:c1:b3:3f:38:63:3d:1d:54:
                    cf:78:c0:3a:07:a6:fd:5c:d1:18:86:24:e8:74:c1:
                    e9:fa:0b:63:b5:66:4e:79:07:f9:80:70:d9:d4:be:
                    1d:5f:ea:d0:e2:96:aa:29:e4:fe:08:a2:d1:2e:32:
                    c9:82:0e:9f:5e:a7:e5:e8:43:64:d8:6e:26:3c:3d:
                    04:59:08:59:02:5c:26:8f:54:3e:4c:fc:84:3f:40:
                    8d:58:86:b4:7b:a2:1e:5e:5a:c1:e9:a1:55:a8:1f:
                    4e:4c:04:77:b2:40:e6:90:5a:3e:60:d3:e1:64:a2:
                    bb:cb:25:47:7c:60:47:7f:7e:9b:54:b9:4c:61:c0:
                    ce:61:1d:d0:f4:69:d5:39:f3:94:d2:76:93:be:89:
                    91:7f:64:7c:eb:57:54:22:82:a4:e3:61:b4:f1:29:
                    85:da:9f:3e:c5:b2:1b:09:42:9b:06:fb:0e:9e:49:
                    19:25:71:65:ba:cb:0c:b6:4f:9d:bc:5a:e1:a6:be:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0C:73:8D:DF:18:FD:34:49:1D:AF:96:05:1B:6D:5F:91:9E:F0:61
            X509v3 Authority Key Identifier:
                keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:80:9f:d1:c6:29:5b:54:db:d6:b1:ed:d8:ee:36:0c:d4:f9:
         9d:1e:62:37:42:c9:df:2c:0a:ca:aa:d3:50:ce:db:c9:3a:34:
         89:00:d8:20:b7:45:24:0c:08:07:50:ad:4b:8f:e4:d2:a6:ba:
         1a:db:57:6b:c7:60:27:1a:94:e1:95:bc:57:79:bd:ee:00:88:
         f3:ec:c6:af:fa:17:47:68:33:73:af:93:36:a9:b9:5b:a3:84:
         a4:02:7a:0f:c8:ec:3f:02:07:25:8c:35:b5:db:29:83:3b:e4:
         f0:db:3a:f1:e4:8c:d9:1c:29:1d:56:de:48:ac:c8:b5:d8:8c:
         a8:7c:0c:81:da:31:7c:b4:3f:04:55:f5:3e:b0:e2:53:c0:fa:
         dc:a7:ff:da:b3:5b:fd:49:16:85:5b:6b:3e:11:1c:43:93:13:
         1e:81:dc:67:5f:f2:47:46:b8:06:74:c8:6b:2c:62:2c:5c:fd:
         f5:90:5c:ab:47:68:44:82:d6:6e:cd:16:7a:59:dc:c5:21:e0:
         45:ae:77:fd:30:cd:1a:04:d6:2c:0a:2b:9f:36:6e:32:87:fe:
         57:88:a9:5e:9b:4e:df:6a:93:f3:f9:0b:aa:3a:53:b7:6d:53:
         62:3a:d3:03:f6:da:72:34:22:b3:5b:94:5a:0e:53:36:b1:9d:
         78:ac:31:1c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxCRsYSJzNHefntKxuqT1qiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YmE0MWI2YWQ2ZTYzNzgwZWMzZjEyMTYwZTdjNGVkMGY3
NDY5YWMwHhcNMjYwMjA5MTIwMTAwWhcNMjYwMjEwMTIwMTAwWjAzMTEwLwYDVQQD
EygwMzBjNzM4ZGRmMThmZDM0NDkxZGFmOTYwNTFiNmQ1ZjkxOWVmMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RtxquH3i5aSBbhcd88tBJ4Iwwy2
WucGX0xoZwSPY/SdIo7MxxLdi+D9gfWhjBtEFNKQw8PwWCdtLZxcLI71jhRJwbM/
OGM9HVTPeMA6B6b9XNEYhiTodMHp+gtjtWZOeQf5gHDZ1L4dX+rQ4paqKeT+CKLR
LjLJgg6fXqfl6ENk2G4mPD0EWQhZAlwmj1Q+TPyEP0CNWIa0e6IeXlrB6aFVqB9O
TAR3skDmkFo+YNPhZKK7yyVHfGBHf36bVLlMYcDOYR3Q9GnVOfOU0naTvomRf2R8
61dUIoKk42G08SmF2p8+xbIbCUKbBvsOnkkZJXFlussMtk+dvFrhpr4f7QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAMMc43fGP00SR2vlgUbbV+RnvBhMB8GA1UdIwQY
MBaAFPi6QbatbmN4DsPxIWDnxO0PdGmsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1McEJ0cTF1WTNnT3dfRWhZT2ZFN1E5MGFhdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvODNlZTZmLWVlODMtNDQ0Yi1iZGM2
LWFlNDQ5NzlmODFkZS8xLzEtTHBCdHExdVkzZ093X0VoWU9mRTdROTBhYXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M0LzgzZWU2Zi1lZTgzLTQ0NGItYmRjNi1hZTQ0OTc5Zjgx
ZGUvMS8xLUxwQnRxMXVZM2dPd19FaFlPZkU3UTkwYWF3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHICf
0cYpW1Tb1rHt2O42DNT5nR5iN0LJ3ywKyqrTUM7byTo0iQDYILdFJAwIB1CtS4/k
0qa6GttXa8dgJxqU4ZW8V3m97gCI8+zGr/oXR2gzc6+TNqm5W6OEpAJ6D8jsPwIH
JYw1tdspgzvk8Ns68eSM2RwpHVbeSKzItdiMqHwMgdoxfLQ/BFX1PrDiU8D63Kf/
2rNb/UkWhVtrPhEcQ5MTHoHcZ1/yR0a4BnTIayxiLFz99ZBcq0doRILWbs0Welnc
xSHgRa53/TDNGgTWLAornzZuMof+V4ipXptO32qT8/kLqjpTt21TYjrTA/bacjQi
s1uUWg5TNrGdeKwxHA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:39 2026 by rpki-client