This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
File:                     fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json)
Hash identifier:          4+aA8tmNQu1lI3cRDzuxA3qa/eEzBHGsMezt7QGKGXo=
Subject key identifier:   19:65:6F:ED:04:D6:65:60:38:14:2C:62:87:95:7E:10:3F:70:CE:04
Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Certificate issuer:       /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Certificate serial:       019C43FE3A140C694C2D35D09F24534EDCBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
Manifest number:          1727
Signing time:             Mon 09 Feb 2026 20:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:00 +0000
Files and hashes:         1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: S07n8ZTLvKXN/6jk23zROvVyUYgB+idzhQ3sNLhx82E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:3a:14:0c:69:4c:2d:35:d0:9f:24:53:4e:dc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
        Validity
            Not Before: Feb  9 20:01:00 2026 GMT
            Not After : Feb 10 20:01:00 2026 GMT
        Subject: CN=19656fed04d6656038142c6287957e103f70ce04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:22:9c:af:cc:c0:d7:96:fc:48:02:37:27:a9:
                    4d:ba:91:0f:ad:41:28:34:4a:bb:fa:0f:ea:15:79:
                    b6:d4:d9:09:a3:38:b2:58:e1:d7:e8:79:05:7c:84:
                    c5:f6:50:ab:d5:37:4a:7d:c3:bf:37:0f:cf:da:9a:
                    6f:a2:98:dd:e8:8a:56:b8:ca:f0:d0:74:66:6d:85:
                    93:93:64:1b:e1:d6:e8:a6:6d:f1:91:12:4d:5d:42:
                    f0:59:16:e3:ab:d3:1f:93:85:78:92:a2:f2:80:f5:
                    ce:59:d4:9e:50:7e:25:55:99:5e:dc:b7:1e:f0:80:
                    c3:7e:1c:c4:5f:9a:af:55:b2:66:6a:ca:45:2a:72:
                    d7:73:22:79:c2:e0:72:43:e8:eb:28:f7:b4:32:bc:
                    b9:c6:6c:2a:5f:f5:02:a6:ca:c8:a4:e2:30:78:22:
                    35:8d:94:6a:80:02:2d:63:bc:e8:a4:cb:09:72:6e:
                    68:b0:a7:c8:94:e6:dc:77:89:eb:40:6c:a1:40:01:
                    08:b7:2e:6e:2d:66:fe:b1:6d:57:39:a4:9d:7c:40:
                    5e:02:59:35:5b:93:1c:b4:83:db:59:05:d5:f3:d0:
                    b2:3d:b4:24:ca:c8:74:e5:5b:16:42:a4:f0:ed:57:
                    37:56:00:ab:a6:64:5e:f3:5a:38:b5:3d:fc:5a:f1:
                    73:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:6F:ED:04:D6:65:60:38:14:2C:62:87:95:7E:10:3F:70:CE:04
            X509v3 Authority Key Identifier:
                keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:35:51:c7:de:86:e3:1d:62:15:dd:23:8a:68:a0:5d:14:06:
         b8:d3:4a:ff:b6:52:d8:96:f3:4a:73:0e:62:2f:67:5e:cf:ff:
         a7:d1:16:91:06:ce:41:87:24:92:c7:13:df:d3:8f:99:49:2f:
         3e:13:b0:49:7f:3f:42:f5:95:59:0e:83:28:df:87:d7:bb:38:
         2b:d5:2b:b9:c9:7e:94:df:38:05:15:80:92:a8:48:53:c2:6e:
         ba:ae:f5:6b:b4:82:9c:8c:19:7d:a1:1f:77:d0:46:f5:f5:64:
         54:27:ed:62:05:f0:e2:df:f6:c6:aa:49:a7:37:80:28:6f:ce:
         27:3f:88:32:20:22:b7:6e:ba:d2:02:43:24:7c:2e:d5:97:b1:
         77:c3:f2:8b:63:94:0f:75:44:2f:49:57:62:54:66:2b:41:51:
         4b:52:4c:90:c4:91:75:91:51:57:f7:91:94:bd:e5:35:2d:26:
         87:95:b7:10:8a:86:b1:b2:93:ff:be:25:be:81:78:bb:30:7f:
         01:1f:9f:50:8b:48:f3:d6:44:c5:53:a7:91:1d:d9:56:93:b3:
         f9:6e:d5:96:c5:17:39:04:3c:34:2b:15:59:34:4b:03:b8:53:
         03:7d:c0:60:83:3f:16:f4:a4:a5:ff:a3:52:ce:02:e8:5a:fb:
         2a:fb:fc:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/joUDGlMLTXQnyRTTty8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOWQ2N2YwMjdhYjJiMGZmMjZhMzU3NTE0NzM5YWZlODgw
MzdhYzkwHhcNMjYwMjA5MjAwMTAwWhcNMjYwMjEwMjAwMTAwWjAzMTEwLwYDVQQD
EygxOTY1NmZlZDA0ZDY2NTYwMzgxNDJjNjI4Nzk1N2UxMDNmNzBjZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SKcr8zA15b8SAI3J6lNupEPrUEo
NEq7+g/qFXm21NkJoziyWOHX6HkFfITF9lCr1TdKfcO/Nw/P2ppvopjd6IpWuMrw
0HRmbYWTk2Qb4dbopm3xkRJNXULwWRbjq9Mfk4V4kqLygPXOWdSeUH4lVZle3Lce
8IDDfhzEX5qvVbJmaspFKnLXcyJ5wuByQ+jrKPe0Mry5xmwqX/UCpsrIpOIweCI1
jZRqgAItY7zopMsJcm5osKfIlObcd4nrQGyhQAEIty5uLWb+sW1XOaSdfEBeAlk1
W5MctIPbWQXV89CyPbQkysh05VsWQqTw7Vc3VgCrpmRe81o4tT38WvFzWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBllb+0E1mVgOBQsYoeVfhA/cM4EMB8GA1UdIwQY
MBaAFHydZ/AnqysP8mo1dRRzmv6IA3rJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OThmZTgtNWY2OS00ZDM3LWJkNTgt
NjVlYjFiYTZlMzM3LzEvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82OThmZTgtNWY2OS00ZDM3LWJkNTgtNjVlYjFiYTZlMzM3
LzEvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzVRx96G
4x1iFd0jimigXRQGuNNK/7ZS2JbzSnMOYi9nXs//p9EWkQbOQYckkscT39OPmUkv
PhOwSX8/QvWVWQ6DKN+H17s4K9Urucl+lN84BRWAkqhIU8Juuq71a7SCnIwZfaEf
d9BG9fVkVCftYgXw4t/2xqpJpzeAKG/OJz+IMiAit2660gJDJHwu1Zexd8Pyi2OU
D3VEL0lXYlRmK0FRS1JMkMSRdZFRV/eRlL3lNS0mh5W3EIqGsbKT/74lvoF4uzB/
AR+fUItI89ZExVOnkR3ZVpOz+W7VlsUXOQQ8NCsVWTRLA7hTA33AYIM/FvSkpf+j
Us4C6Fr7Kvv8ew==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:18 2026 by rpki-client