This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File:                     MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier:          46rY9c2IL8TBRSll1prMKPmKkdQXTyiL+KcsAg1+TUo=
Subject key identifier:   8F:F1:85:50:46:CB:BD:84:8E:52:A1:59:42:76:82:78:94:D9:88:EA
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer:       /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial:       019C43FE043AA27A5993E58049199A7E5082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number:          13B0
Signing time:             Mon 09 Feb 2026 20:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:46 +0000
Files and hashes:         1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: vA2J1/Vli45dizMmge9sBsoVAin35+jl6JoOQwE97lQ=)
                          2: _J-j7B7EBVpS6iWSIcOV728Uk0g.roa (hash: +Uy6WqqggKFrmTGgRkmBqe1HnPUwyMjAxaGGze9f2+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:04:3a:a2:7a:59:93:e5:80:49:19:9a:7e:50:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
        Validity
            Not Before: Feb  9 20:00:46 2026 GMT
            Not After : Feb 10 20:00:46 2026 GMT
        Subject: CN=8ff1855046cbbd848e52a1594276827894d988ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:62:85:f3:a5:a5:91:d7:7a:7c:ef:a8:40:
                    9e:a3:85:40:53:18:29:c8:52:2f:5a:f9:aa:17:c6:
                    2d:97:75:80:8b:46:f3:9c:ae:71:64:06:1e:71:54:
                    33:8b:ae:77:bd:1b:da:94:ad:09:c5:d0:62:6d:c5:
                    73:b5:8a:60:77:29:9e:19:95:d2:8d:95:42:ec:7c:
                    47:b7:52:c4:24:af:3b:81:02:04:6d:07:0a:a7:67:
                    5f:5a:3b:ef:ef:a5:9e:ba:48:d8:7b:87:99:03:73:
                    cf:88:0e:53:ac:62:6d:80:4d:0e:d3:eb:9e:5b:57:
                    60:59:72:e3:54:26:e3:f7:8b:83:ff:5d:4a:c2:98:
                    95:c5:64:9d:11:d5:87:93:47:98:74:94:5a:11:7b:
                    24:4b:3d:65:cf:cd:66:eb:e6:19:cc:78:12:a0:39:
                    ef:0f:34:e6:8e:5e:a0:06:92:1c:cc:03:d6:21:f2:
                    7e:91:be:42:b7:ee:03:17:f7:fb:e6:b5:2f:a3:0c:
                    87:6c:e8:f9:a3:16:b3:9a:26:1f:6b:55:89:dc:5e:
                    7e:c4:78:81:ae:76:39:3f:71:36:00:0b:ca:88:91:
                    e7:6e:2a:ab:37:c5:0f:7c:a0:ca:75:ff:22:76:ee:
                    aa:2d:17:d1:c4:30:96:6c:31:de:a3:bd:be:f6:bf:
                    4b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F1:85:50:46:CB:BD:84:8E:52:A1:59:42:76:82:78:94:D9:88:EA
            X509v3 Authority Key Identifier:
                keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:9b:2b:65:53:89:23:83:05:68:19:fa:59:b4:87:de:2b:
         a1:8b:79:9e:59:21:1e:e9:72:31:76:09:d7:10:82:6e:c5:11:
         69:97:21:d6:0f:c1:29:a6:87:11:97:f6:94:46:b5:e5:26:1a:
         b3:9f:4f:c6:df:44:ab:14:73:7b:56:a8:bd:fd:19:f0:18:46:
         91:ef:3f:f4:f5:43:7c:48:3c:a2:a8:87:63:d4:12:8c:da:ff:
         6a:a4:34:5a:16:a2:49:1a:fb:70:19:1e:07:7b:fb:a2:7b:16:
         d8:2e:21:af:6d:43:0a:3a:e2:f6:02:87:0f:af:c5:14:6f:61:
         1e:fc:06:47:c2:0d:2c:06:31:69:e1:16:2e:df:3a:ea:9e:8d:
         6a:60:d6:de:59:15:b6:3c:0a:f4:70:96:d0:5d:de:f0:f1:94:
         e1:8d:ca:01:2b:8a:b0:e6:55:c9:3d:f7:f2:43:f3:d3:a2:06:
         1d:b9:2f:94:3c:69:38:ad:92:c0:6a:d2:47:4d:57:3e:92:34:
         0d:19:9e:ce:cf:85:d2:88:5f:d0:1a:1d:e5:e1:38:18:ae:a2:
         63:e6:eb:ad:55:48:04:0e:4c:cd:2b:ff:18:47:0d:e0:84:91:
         1f:ba:bb:24:7b:ec:ca:17:67:41:39:59:0b:f5:74:bb:86:51:
         b9:54:75:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/gQ6onpZk+WASRmaflCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjEzNGJjZjU5ZjU4MWQ2Yjc2NjMwY2ZhODc4Njc4NzZh
MjkyMTUwHhcNMjYwMjA5MjAwMDQ2WhcNMjYwMjEwMjAwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZmYxODU1MDQ2Y2JiZDg0OGU1MmExNTk0Mjc2ODI3ODk0ZDk4OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGFihfOlpZHXenzvqECeo4VAUxgp
yFIvWvmqF8Ytl3WAi0bznK5xZAYecVQzi653vRvalK0JxdBibcVztYpgdymeGZXS
jZVC7HxHt1LEJK87gQIEbQcKp2dfWjvv76WeukjYe4eZA3PPiA5TrGJtgE0O0+ue
W1dgWXLjVCbj94uD/11KwpiVxWSdEdWHk0eYdJRaEXskSz1lz81m6+YZzHgSoDnv
DzTmjl6gBpIczAPWIfJ+kb5Ct+4DF/f75rUvowyHbOj5oxazmiYfa1WJ3F5+xHiB
rnY5P3E2AAvKiJHnbiqrN8UPfKDKdf8idu6qLRfRxDCWbDHeo72+9r9L/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/xhVBGy72EjlKhWUJ2gniU2YjqMB8GA1UdIwQY
MBaAFDBhNLz1n1gda3ZjDPqHhnh2opIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgt
NmQ4ZWE5ZDFjZDczLzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgtNmQ4ZWE5ZDFjZDcz
LzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfibK2VT
iSODBWgZ+lm0h94roYt5nlkhHulyMXYJ1xCCbsURaZch1g/BKaaHEZf2lEa15SYa
s59Pxt9EqxRze1aovf0Z8BhGke8/9PVDfEg8oqiHY9QSjNr/aqQ0WhaiSRr7cBke
B3v7onsW2C4hr21DCjri9gKHD6/FFG9hHvwGR8INLAYxaeEWLt866p6NamDW3lkV
tjwK9HCW0F3e8PGU4Y3KASuKsOZVyT338kPz06IGHbkvlDxpOK2SwGrSR01XPpI0
DRmezs+F0ohf0Bod5eE4GK6iY+brrVVIBA5MzSv/GEcN4ISRH7q7JHvsyhdnQTlZ
C/V0u4ZRuVR1Wg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:47 2026 by rpki-client