This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File:                     I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier:          bkqE/raF8BivUu4PdHMRyILntp08yp3eyoV+2qFiWBs=
Subject key identifier:   2D:E3:18:7B:12:92:9C:8B:43:05:D7:C8:DF:E8:69:D1:2E:D9:04:C6
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer:       /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial:       019C427D325BEAE207FEABBCC825E9A8A6BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:26 +0000
Files and hashes:         1: 4OtylCmVUOQ1YUFtglhWgqf0IYA.roa (hash: WWTOLHqEiZ6EYrBZLenBHdV2VidIQmH+ASGlD1/87NA=)
                          2: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: m5PRHSaZxJAC2hZQ30cwTqrGxJ+aUy9o9rEArSyJrrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:32:5b:ea:e2:07:fe:ab:bc:c8:25:e9:a8:a6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
        Validity
            Not Before: Feb  9 13:00:26 2026 GMT
            Not After : Feb 10 13:00:26 2026 GMT
        Subject: CN=2de3187b12929c8b4305d7c8dfe869d12ed904c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:17:f5:de:7e:0a:17:96:81:26:a9:6c:1f:
                    9b:c5:f0:bb:fd:5d:71:63:d6:a3:17:3f:62:d3:5e:
                    19:4a:b0:08:25:cf:6c:fc:af:11:aa:ad:cc:21:8b:
                    e8:fb:04:7a:9f:3f:b0:e6:6d:1d:7a:ad:41:e2:ae:
                    d6:19:f4:0f:81:15:0c:27:11:84:2f:8f:4b:14:a6:
                    0f:58:fa:dc:ad:24:95:f3:9d:7b:2a:48:8f:bb:ff:
                    a1:ab:05:a1:90:85:2e:89:12:ba:62:ca:ec:48:f8:
                    a2:c5:d2:23:dc:93:96:f2:1f:c2:df:a9:30:bc:2a:
                    bf:32:a0:20:f8:6e:dd:87:5d:e4:d0:7a:aa:38:d0:
                    b4:6d:62:4a:bb:b1:3a:e1:28:7a:78:54:d7:59:03:
                    39:a1:0c:69:1a:c2:51:37:f4:92:ef:eb:ed:e4:57:
                    18:d5:ef:dd:1b:21:cb:0f:19:e0:4d:21:67:2c:c6:
                    69:53:e2:f9:c3:4b:62:94:40:b2:92:65:1a:9e:30:
                    00:39:41:d0:2e:01:96:a0:3c:e3:06:fc:10:73:e4:
                    06:a3:bc:55:9d:99:16:e7:94:87:48:c7:7c:cc:c8:
                    0c:fc:53:82:c3:da:3e:d9:1d:23:8f:45:5f:2c:a9:
                    52:d5:8b:a7:3a:79:39:4d:4a:14:e9:0d:9b:68:ec:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E3:18:7B:12:92:9C:8B:43:05:D7:C8:DF:E8:69:D1:2E:D9:04:C6
            X509v3 Authority Key Identifier:
                keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:c9:01:19:ff:cd:a1:de:95:af:a5:b9:13:27:6d:02:1b:
         dd:22:7c:31:08:91:10:d6:9c:50:37:08:09:56:1f:41:2d:74:
         f4:4d:00:b1:27:9f:99:e2:8b:4b:87:1b:66:97:84:ee:51:94:
         5c:e1:e7:48:81:3d:93:27:35:45:f2:df:35:db:7f:bd:8d:c1:
         f4:d6:ee:d4:2f:1d:29:55:45:5b:76:cc:8e:c7:82:0c:ce:85:
         15:b1:57:43:02:a1:13:2d:a4:0a:35:88:e0:65:3f:88:a8:09:
         bd:ea:41:b5:45:59:ae:29:a0:d5:d0:60:49:fa:9e:73:b9:e2:
         1f:81:27:4b:7a:3b:ba:78:5d:dd:5e:5c:9a:66:f5:a1:65:7e:
         49:58:58:c3:e1:2d:bb:17:c7:4f:7c:85:51:83:bd:a0:f8:cd:
         bf:53:c2:28:15:21:04:8c:b9:fb:bd:ed:e6:7c:62:c4:2c:30:
         1f:b4:3c:9b:8e:5e:27:6d:c6:ab:94:e0:03:ac:20:ce:81:27:
         f4:a5:88:5f:ca:b7:47:50:a6:41:bd:b7:c5:7c:84:80:57:67:
         d9:1c:ee:ce:8a:ae:ba:26:67:6b:e4:6a:18:3c:72:4e:ef:e6:
         08:27:a8:f8:a1:51:df:93:b0:45:b5:2e:ce:7c:eb:d3:ab:36:
         3b:ed:e1:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfTJb6uIH/qu8yCXpqKa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYWM0ODY4MDczOThhYzFjZWVjMDkyMWQwNGQ0MDlhNGY3
ZjQ3OWIwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD
EygyZGUzMTg3YjEyOTI5YzhiNDMwNWQ3YzhkZmU4NjlkMTJlZDkwNGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NkX9d5+CheWgSapbB+bxfC7/V1x
Y9ajFz9i014ZSrAIJc9s/K8Rqq3MIYvo+wR6nz+w5m0deq1B4q7WGfQPgRUMJxGE
L49LFKYPWPrcrSSV8517KkiPu/+hqwWhkIUuiRK6YsrsSPiixdIj3JOW8h/C36kw
vCq/MqAg+G7dh13k0HqqONC0bWJKu7E64Sh6eFTXWQM5oQxpGsJRN/SS7+vt5FcY
1e/dGyHLDxngTSFnLMZpU+L5w0tilECykmUanjAAOUHQLgGWoDzjBvwQc+QGo7xV
nZkW55SHSMd8zMgM/FOCw9o+2R0jj0VfLKlS1YunOnk5TUoU6Q2baOxc/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3jGHsSkpyLQwXXyN/oadEu2QTGMB8GA1UdIwQY
MBaAFCOsSGgHOYrBzuwJIdBNQJpPf0ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2Qt
NjE2MDViMjZmODJkLzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2QtNjE2MDViMjZmODJk
LzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquDJARn/
zaHela+luRMnbQIb3SJ8MQiRENacUDcICVYfQS109E0AsSefmeKLS4cbZpeE7lGU
XOHnSIE9kyc1RfLfNdt/vY3B9Nbu1C8dKVVFW3bMjseCDM6FFbFXQwKhEy2kCjWI
4GU/iKgJvepBtUVZrimg1dBgSfqec7niH4EnS3o7unhd3V5cmmb1oWV+SVhYw+Et
uxfHT3yFUYO9oPjNv1PCKBUhBIy5+73t5nxixCwwH7Q8m45eJ23Gq5TgA6wgzoEn
9KWIX8q3R1CmQb23xXyEgFdn2RzuzoquuiZna+RqGDxyTu/mCCeo+KFR35OwRbUu
znzr06s2O+3hIA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:41 2026 by rpki-client