This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File:                     RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier:          K+jlNHtG5SH6+DGCNlKSBt6+BAArJrg2Cx0mF7N7Jfo=
Subject key identifier:   21:E6:40:A6:E9:CA:98:AC:16:78:57:26:B3:94:5B:D7:11:09:85:06
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer:       /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial:       019C42B4403A94AD38C8F6B6CBB298680D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:35 +0000
Files and hashes:         1: Qtm2y6O9fQOxDLh4r9HUduXRJPk.roa (hash: EeZqlsTqzdCbFC/CM71VpRuG30gKSOjHa90sXicLvG4=)
                          2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: bilGk2w8sB8BEhC0gmOpBWf+2cpnRAehoI27Ufhz6NE=)
                          3: qkZbad248G4D0mXEkOMEjzYi1Ec.roa (hash: fqso9UJIp15vhELsb8vv3FftzXgRXh9zaLx7ly4FaQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:40:3a:94:ad:38:c8:f6:b6:cb:b2:98:68:0d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
        Validity
            Not Before: Feb  9 14:00:35 2026 GMT
            Not After : Feb 10 14:00:35 2026 GMT
        Subject: CN=21e640a6e9ca98ac16785726b3945bd711098506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:df:8b:46:b3:1d:c0:47:5a:9b:6d:45:f7:
                    32:8f:4a:5f:97:36:94:34:6c:3c:b5:44:a9:ef:07:
                    45:b3:00:76:89:07:0f:23:c8:cf:b5:17:16:8c:c1:
                    e3:88:ad:d5:80:22:36:45:84:d8:9e:59:bd:e1:82:
                    80:ad:c8:34:7b:ab:97:54:c2:d4:41:b1:14:a2:4c:
                    d6:56:77:1c:74:bd:0f:bb:ed:3d:74:cf:f3:71:11:
                    df:48:e5:b5:e6:1c:2e:68:26:53:55:e0:d1:15:0c:
                    5f:8b:25:e6:18:83:25:4f:35:c9:cf:14:eb:4b:6b:
                    01:c7:6b:de:87:a1:45:f4:ca:71:2f:91:68:9b:1f:
                    ac:34:95:37:ba:3a:6a:a8:cc:1a:e2:b3:58:88:3b:
                    ed:9c:59:f4:32:32:4b:df:8f:59:6d:0e:50:3c:b1:
                    c8:e0:1c:8d:c3:bc:b4:e6:aa:1f:a3:1c:9b:d8:00:
                    b0:df:26:a7:5a:fa:f2:8e:9a:25:12:88:af:b4:05:
                    55:b7:79:c3:50:fd:19:d0:15:5f:34:71:6a:f5:25:
                    cf:d1:eb:03:c5:a6:a3:58:3f:52:91:84:21:4a:3e:
                    da:3e:29:20:14:dd:44:36:2a:ff:de:b9:cf:b3:87:
                    50:da:fc:48:06:83:cc:08:f8:4b:3c:8b:27:f5:b1:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E6:40:A6:E9:CA:98:AC:16:78:57:26:B3:94:5B:D7:11:09:85:06
            X509v3 Authority Key Identifier:
                keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:41:6f:76:ba:7e:96:8a:6a:4a:7a:41:6c:30:89:b3:fa:
         ff:8b:e7:40:11:f0:99:fa:11:e4:86:8f:1b:30:f5:da:e2:11:
         36:2a:96:a2:bf:2d:52:f5:5a:18:04:6b:99:20:be:0f:f0:21:
         64:e6:9c:23:51:04:46:3d:9d:8d:dc:8f:5a:43:ac:e8:eb:3d:
         c5:f2:3a:4b:a4:99:f4:c5:fd:6d:c6:42:50:ff:c1:6c:91:3c:
         01:f0:7c:93:04:6a:e1:4a:15:7f:48:7e:e7:a6:da:67:26:9e:
         26:22:26:fa:bd:9d:c1:07:aa:ec:96:c5:5b:60:6f:90:ee:18:
         47:ba:87:76:71:8f:da:4e:5c:bf:97:3e:7a:4e:a3:ad:7e:0c:
         31:28:11:05:92:37:e0:ea:f9:59:57:58:6a:f7:d6:03:7c:48:
         43:36:23:ef:c9:4a:0d:22:fc:a9:65:03:70:b1:52:37:76:e1:
         31:4f:5c:4e:e4:85:4a:a5:cf:4b:78:22:bc:a5:ef:cb:fc:4b:
         32:6a:64:3f:6e:fa:c5:47:eb:8d:bf:da:b0:bd:5e:42:bf:9b:
         d5:7c:d1:95:cb:0f:c3:2e:bc:b9:9a:43:1c:cb:de:b0:b7:1a:
         75:16:55:72:be:f4:12:fc:13:30:ca:ee:de:73:6a:5d:a6:66:
         c1:20:ed:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtEA6lK04yPa2y7KYaA0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzBmMmEyYTU2MDA3ZTRjNDVjY2M3MWU3ZGEwOTI4NjEz
MDViMjAwHhcNMjYwMjA5MTQwMDM1WhcNMjYwMjEwMTQwMDM1WjAzMTEwLwYDVQQD
EygyMWU2NDBhNmU5Y2E5OGFjMTY3ODU3MjZiMzk0NWJkNzExMDk4NTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ijfi0azHcBHWpttRfcyj0pflzaU
NGw8tUSp7wdFswB2iQcPI8jPtRcWjMHjiK3VgCI2RYTYnlm94YKArcg0e6uXVMLU
QbEUokzWVnccdL0Pu+09dM/zcRHfSOW15hwuaCZTVeDRFQxfiyXmGIMlTzXJzxTr
S2sBx2veh6FF9MpxL5Fomx+sNJU3ujpqqMwa4rNYiDvtnFn0MjJL349ZbQ5QPLHI
4ByNw7y05qofoxyb2ACw3yanWvryjpolEoivtAVVt3nDUP0Z0BVfNHFq9SXP0esD
xaajWD9SkYQhSj7aPikgFN1ENir/3rnPs4dQ2vxIBoPMCPhLPIsn9bFIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHmQKbpypisFnhXJrOUW9cRCYUGMB8GA1UdIwQY
MBaAFETA8qKlYAfkxFzMcefaCShhMFsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQt
OWM4NGYyZmRkOGYwLzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQtOWM4NGYyZmRkOGYw
LzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEtBb3a6
fpaKakp6QWwwibP6/4vnQBHwmfoR5IaPGzD12uIRNiqWor8tUvVaGARrmSC+D/Ah
ZOacI1EERj2djdyPWkOs6Os9xfI6S6SZ9MX9bcZCUP/BbJE8AfB8kwRq4UoVf0h+
56baZyaeJiIm+r2dwQeq7JbFW2BvkO4YR7qHdnGP2k5cv5c+ek6jrX4MMSgRBZI3
4Or5WVdYavfWA3xIQzYj78lKDSL8qWUDcLFSN3bhMU9cTuSFSqXPS3givKXvy/xL
MmpkP276xUfrjb/asL1eQr+b1XzRlcsPwy68uZpDHMvesLcadRZVcr70EvwTMMru
3nNqXaZmwSDt6Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:23 2026 by rpki-client