This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File:                     V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier:          9HGTCLifsQJhYrt20WxbRBJHtn6tfTaZS/0ROMeHQDw=
Subject key identifier:   7C:71:17:BE:F9:C8:10:C2:85:D0:02:48:C1:A4:36:4A:62:45:CD:92
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer:       /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial:       019C41D8A39F90A90EC50A5D85B0C4720CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 10:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:42 +0000
Files and hashes:         1: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: i/+IL5/w1iPtcUFrlQoF2r0f/f4h3F7Y/7ne/T+0dvc=)
                          2: Vu1SMqSbNvxo8-uVtXs0Eld2o_Q.roa (hash: blwSnQqhNIoWvduAY/JgSuj6c5kvRYhLpvdaBWUqc10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:a3:9f:90:a9:0e:c5:0a:5d:85:b0:c4:72:0c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
        Validity
            Not Before: Feb  9 10:00:42 2026 GMT
            Not After : Feb 10 10:00:42 2026 GMT
        Subject: CN=7c7117bef9c810c285d00248c1a4364a6245cd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:9a:44:9c:72:b0:9b:d5:72:d0:dd:3b:1d:
                    ea:4d:cf:98:37:db:0c:b6:86:61:6f:e5:96:01:54:
                    b4:6a:dc:7b:5f:01:0b:38:58:b8:ab:a9:e4:9e:1b:
                    8a:26:13:01:86:d1:44:91:e5:6f:d5:49:04:61:43:
                    a2:a2:e9:96:5f:83:5d:6e:60:03:16:61:bd:d3:47:
                    be:9b:ac:eb:c3:88:00:88:27:b0:28:a5:b6:e6:65:
                    e4:d6:91:2f:5d:ef:bb:86:57:49:2a:9c:de:2b:11:
                    3f:76:ab:a8:03:2f:fb:b4:6e:bd:ca:96:19:0b:bf:
                    fd:b7:80:94:17:50:96:bc:61:6d:83:a7:07:f7:72:
                    85:3f:04:c7:07:6a:fc:45:61:30:3c:e7:c6:4a:32:
                    48:91:40:34:dd:79:98:90:f3:d5:bf:d3:1a:92:7e:
                    f5:48:fe:20:84:b1:89:5c:fd:b0:c4:87:7d:7f:fe:
                    93:fc:8d:3f:2b:74:b8:0d:de:b8:15:3c:06:d6:d3:
                    3a:c6:34:4a:9a:a6:2b:e7:82:8b:a1:93:06:c3:18:
                    fd:88:2c:7b:e2:79:f8:7a:14:be:18:f6:3b:d7:c2:
                    30:62:a2:33:fb:da:3f:b0:2e:80:c3:29:8a:5c:7e:
                    9b:72:3c:45:d4:b1:9f:83:cd:a9:b3:f0:11:74:0e:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:17:BE:F9:C8:10:C2:85:D0:02:48:C1:A4:36:4A:62:45:CD:92
            X509v3 Authority Key Identifier:
                keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:10:7e:95:09:3f:90:f6:ae:e6:15:0e:54:fb:ba:86:d8:01:
         f8:7c:71:a1:b8:eb:43:4e:fa:98:4a:03:4a:50:10:83:dc:10:
         af:d9:6a:72:57:72:fe:e9:f3:35:80:20:39:fe:d9:7d:e1:e8:
         48:87:b9:0b:01:40:df:9a:16:87:57:d4:b8:d4:b6:57:be:d3:
         4a:c4:70:3d:b7:d9:17:a5:20:c4:7a:be:80:fe:aa:e3:57:69:
         ed:cf:da:87:30:b7:c7:39:7d:5c:34:9d:22:bb:c7:f6:c5:88:
         4d:81:63:6d:e3:f4:21:82:0c:73:8a:80:82:3e:64:59:57:56:
         8a:7f:bb:26:de:d7:94:17:2a:d3:bc:1a:08:d9:fb:8f:78:bd:
         77:11:9d:5f:ce:33:3b:b0:d7:5f:c3:1c:48:a7:73:53:b3:40:
         46:80:8d:00:da:05:4c:98:d1:32:f4:55:08:ef:d4:4d:d9:36:
         2c:ed:3e:36:36:e4:d4:80:ce:9d:79:a3:a9:29:87:5d:47:bd:
         36:7e:cd:76:ff:0b:4f:35:c1:e3:e7:e7:39:42:6d:fe:7f:f7:
         89:25:bc:a0:00:23:06:fd:64:17:7a:2b:9d:ab:ef:47:4b:70:
         c6:8a:b6:00:27:af:48:0f:14:95:eb:6b:09:e2:6e:ae:2c:15:
         15:2e:39:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2KOfkKkOxQpdhbDEcgznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTAyNGZhMjIyZDA5ZjZlZDk5ZDBjOGU2YjdjZWQxNjhl
M2E3NzUwHhcNMjYwMjA5MTAwMDQyWhcNMjYwMjEwMTAwMDQyWjAzMTEwLwYDVQQD
Eyg3YzcxMTdiZWY5YzgxMGMyODVkMDAyNDhjMWE0MzY0YTYyNDVjZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjKaRJxysJvVctDdOx3qTc+YN9sM
toZhb+WWAVS0atx7XwELOFi4q6nknhuKJhMBhtFEkeVv1UkEYUOioumWX4NdbmAD
FmG900e+m6zrw4gAiCewKKW25mXk1pEvXe+7hldJKpzeKxE/dquoAy/7tG69ypYZ
C7/9t4CUF1CWvGFtg6cH93KFPwTHB2r8RWEwPOfGSjJIkUA03XmYkPPVv9Makn71
SP4ghLGJXP2wxId9f/6T/I0/K3S4Dd64FTwG1tM6xjRKmqYr54KLoZMGwxj9iCx7
4nn4ehS+GPY718IwYqIz+9o/sC6AwymKXH6bcjxF1LGfg82ps/ARdA5CGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxxF775yBDChdACSMGkNkpiRc2SMB8GA1UdIwQY
MBaAFFdQJPoiLQn27ZnQyOa3ztFo46d1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAt
ZTY2MTg2YzdhNjg5LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lMTJmNjItYzlhYi00Y2YwLWFlNjAtZTY2MTg2YzdhNjg5
LzEvVjFBay1pSXRDZmJ0bWRESTVyZk8wV2pqcDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhB+lQk/
kPau5hUOVPu6htgB+HxxobjrQ076mEoDSlAQg9wQr9lqcldy/unzNYAgOf7ZfeHo
SIe5CwFA35oWh1fUuNS2V77TSsRwPbfZF6UgxHq+gP6q41dp7c/ahzC3xzl9XDSd
IrvH9sWITYFjbeP0IYIMc4qAgj5kWVdWin+7Jt7XlBcq07waCNn7j3i9dxGdX84z
O7DXX8McSKdzU7NARoCNANoFTJjRMvRVCO/UTdk2LO0+Njbk1IDOnXmjqSmHXUe9
Nn7Ndv8LTzXB4+fnOUJt/n/3iSW8oAAjBv1kF3ornavvR0twxoq2ACevSA8Uletr
CeJuriwVFS45Zw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:00 2026 by rpki-client