This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
File:                     SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft (raw, json)
Hash identifier:          OnpRlc7DwezqXm+443qOt6/r5YNmQcuVzjQe49g2yRM=
Subject key identifier:   01:F8:E7:EF:7E:BA:84:9C:01:F6:0C:F7:9E:72:98:F8:96:AA:42:34
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Certificate issuer:       /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial:       019C43FE01B1021B85D2C50D203F3950E216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
Manifest number:          172E
Signing time:             Mon 09 Feb 2026 20:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:45 +0000
Files and hashes:         1: EBsnXuG2a2uBMEsQVfF-KePJhMk.roa (hash: bjQUmEt2k6yWvLOqxU6vKmfzVfKPRv4cTmewL826UYc=)
                          2: PZ31ij_f35z3baYKKAZFGVEp6QY.roa (hash: Azm3iFHK2wZX1k58GaEHQq5yAK/+Odtok/+po77w/58=)
                          3: SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl (hash: SDUYI7+CSVdNTyThVeQ37/kUgBOq1zFbYiOuAmFTL8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:01:b1:02:1b:85:d2:c5:0d:20:3f:39:50:e2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
        Validity
            Not Before: Feb  9 20:00:45 2026 GMT
            Not After : Feb 10 20:00:45 2026 GMT
        Subject: CN=01f8e7ef7eba849c01f60cf79e7298f896aa4234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:b2:9f:54:e7:fe:6f:ff:5e:8f:ce:85:d0:
                    68:2a:dd:0b:74:1d:84:c1:44:cc:db:ce:8d:79:d3:
                    95:2a:55:df:75:5e:7d:62:b0:f5:80:11:a9:2e:a9:
                    aa:0d:00:a6:bf:0d:af:99:a8:bd:a7:2f:c6:7d:a6:
                    4c:d7:64:37:8a:10:e3:70:c7:0a:a0:48:3a:17:6b:
                    bd:e0:29:8b:c8:3b:ea:5f:19:2e:08:58:a4:4a:8b:
                    ec:83:74:9f:a1:25:75:dd:6a:26:b1:3a:08:7c:f9:
                    e2:34:a8:00:71:19:80:0d:5a:8f:d0:32:e6:bc:a6:
                    4b:ad:5a:66:d0:2a:38:8e:dd:a1:28:c1:2f:6d:32:
                    a7:6e:a5:4d:b0:8f:5a:6e:bd:4d:d9:8d:66:af:82:
                    71:52:bf:0c:13:31:01:ba:84:8c:6e:fd:8c:d5:ca:
                    c0:2d:b4:36:1c:73:5c:17:db:6e:7b:f4:b7:90:69:
                    5c:91:79:a2:0f:f1:d1:ab:03:91:f2:ec:87:98:6b:
                    bd:45:b7:3a:5a:42:49:1f:0a:6d:09:af:4e:b5:6d:
                    cb:62:5f:83:4d:bc:21:23:6b:2e:9b:a3:b1:a6:8b:
                    b6:5a:43:6f:2a:b5:14:70:cd:11:fd:ec:c5:a2:07:
                    f0:80:77:56:04:f1:55:e9:67:d4:9b:b2:c7:1d:4d:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:E7:EF:7E:BA:84:9C:01:F6:0C:F7:9E:72:98:F8:96:AA:42:34
            X509v3 Authority Key Identifier:
                keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:50:db:c1:8c:8f:c7:70:54:b2:0a:e6:49:5e:54:4d:99:a4:
         6a:db:c8:b5:ba:90:a3:d1:74:6c:57:78:5b:69:cc:46:c7:c6:
         c1:8d:14:87:a6:a1:81:80:36:3f:8b:d8:54:b6:a9:38:38:ba:
         9d:30:2b:ce:a8:83:b1:89:8d:2b:bd:12:62:44:b9:cc:d1:2c:
         88:a3:e9:92:e5:34:7a:bb:38:2f:2c:f1:af:c9:37:91:30:90:
         a9:b0:91:94:0a:fa:d9:bb:84:1e:86:c1:ad:16:16:72:2d:71:
         e1:fe:63:d0:12:d0:d9:06:8a:e8:b1:ec:6f:4e:56:2c:32:74:
         4d:ea:9f:c4:ef:fa:86:d6:42:63:69:46:12:2c:e6:b6:ae:c8:
         b9:97:06:80:a0:f2:32:83:8a:e0:fb:e5:f6:6c:b5:87:5f:fd:
         bd:b8:6a:da:a0:26:81:d6:39:b0:5e:a6:21:aa:a2:67:2d:7b:
         68:b4:d3:0c:8a:86:8d:fe:51:ab:c8:45:fc:7c:7c:e6:f8:94:
         63:d4:de:a8:28:ac:6f:0e:bf:a1:61:8b:e4:87:ee:d9:34:a4:
         00:ed:5a:1e:a7:9f:87:ef:b7:9f:77:27:38:e2:55:1b:1a:7d:
         00:4d:3f:b7:21:75:cb:b0:80:d4:a9:f8:25:8e:12:c3:4b:a4:
         22:26:2e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/gGxAhuF0sUNID85UOIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjBkNWM3OGMxMDdiY2Y5YzcxNTQ1M2QyMTQ0NGY2OTZl
NDRiMTEwHhcNMjYwMjA5MjAwMDQ1WhcNMjYwMjEwMjAwMDQ1WjAzMTEwLwYDVQQD
EygwMWY4ZTdlZjdlYmE4NDljMDFmNjBjZjc5ZTcyOThmODk2YWE0MjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCuyn1Tn/m//Xo/OhdBoKt0LdB2E
wUTM286NedOVKlXfdV59YrD1gBGpLqmqDQCmvw2vmai9py/GfaZM12Q3ihDjcMcK
oEg6F2u94CmLyDvqXxkuCFikSovsg3SfoSV13WomsToIfPniNKgAcRmADVqP0DLm
vKZLrVpm0Co4jt2hKMEvbTKnbqVNsI9abr1N2Y1mr4JxUr8MEzEBuoSMbv2M1crA
LbQ2HHNcF9tue/S3kGlckXmiD/HRqwOR8uyHmGu9Rbc6WkJJHwptCa9OtW3LYl+D
TbwhI2sum6Oxpou2WkNvKrUUcM0R/ezFogfwgHdWBPFV6WfUm7LHHU1xNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH45+9+uoScAfYM955ymPiWqkI0MB8GA1UdIwQY
MBaAFEsg1ceMEHvPnHFUU9IURPaW5EsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZTQ4YjYtN2ZiMC00YTEyLWIzZTct
NGI5YTYwNThiNDIzLzEvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZTQ4YjYtN2ZiMC00YTEyLWIzZTctNGI5YTYwNThiNDIz
LzEvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFDbwYyP
x3BUsgrmSV5UTZmkatvItbqQo9F0bFd4W2nMRsfGwY0Uh6ahgYA2P4vYVLapODi6
nTArzqiDsYmNK70SYkS5zNEsiKPpkuU0ers4Lyzxr8k3kTCQqbCRlAr62buEHobB
rRYWci1x4f5j0BLQ2QaK6LHsb05WLDJ0TeqfxO/6htZCY2lGEizmtq7IuZcGgKDy
MoOK4Pvl9my1h1/9vbhq2qAmgdY5sF6mIaqiZy17aLTTDIqGjf5Rq8hF/Hx85viU
Y9TeqCisbw6/oWGL5Ifu2TSkAO1aHqefh++3n3cnOOJVGxp9AE0/tyF1y7CA1Kn4
JY4Sw0ukIiYudw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:12 2026 by rpki-client