This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File:                     1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier:          rX62Ad4lGygZMTXXLOtXMCONczPM7X92R4e+M/naF6Y=
Subject key identifier:   07:2E:A5:F0:AA:06:08:31:C0:AB:DF:C3:01:56:6E:74:90:2E:E3:0F
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer:       /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial:       019C446BE60FB1B0E1C107886EDA1565A95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 22:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:47 +0000
Files and hashes:         1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: vNrOiaLiHUlnijmYqjOIwLSZLXWLKeW6OOA7kAZnV0k=)
                          2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:e6:0f:b1:b0:e1:c1:07:88:6e:da:15:65:a9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
        Validity
            Not Before: Feb  9 22:00:47 2026 GMT
            Not After : Feb 10 22:00:47 2026 GMT
        Subject: CN=072ea5f0aa060831c0abdfc301566e74902ee30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:3d:f9:fe:c6:97:21:23:d5:e2:3a:25:27:
                    ab:f1:b1:f3:a0:e5:b3:b7:bb:fc:0d:a0:7f:67:41:
                    10:49:d7:0a:f0:6b:ce:d2:cb:c1:c7:bf:af:a9:7b:
                    d6:08:fd:8f:62:de:b3:65:e3:a6:6f:d8:31:c8:ce:
                    83:b2:b0:27:c9:04:80:c0:ae:28:d7:85:e1:31:0d:
                    4d:8a:fd:c3:51:51:81:3e:42:fa:75:7f:73:4a:2a:
                    60:fd:c4:48:63:41:b7:76:4d:91:fa:a6:69:25:90:
                    76:4a:e5:24:8c:bf:49:64:d1:8c:bc:73:df:03:28:
                    25:43:cf:65:1c:d3:e0:0e:73:68:68:0e:8d:2c:30:
                    b9:fb:6a:20:2e:87:e1:98:49:a8:b5:5e:57:86:4b:
                    f1:09:f7:c8:bb:79:f1:b2:77:c0:06:2d:ff:d2:a7:
                    ad:80:55:1e:37:75:de:07:cc:5c:f7:53:72:ab:96:
                    00:ea:e3:c7:0a:58:41:08:ec:ed:5b:0a:0f:22:23:
                    c0:1e:fa:1c:50:5b:68:3d:c6:f3:3d:9c:4c:b0:ea:
                    53:8b:ef:ca:3e:bb:7a:c3:ef:cb:bc:f1:22:76:08:
                    4b:db:b0:db:82:04:74:fa:5d:a0:f7:2b:ba:d3:48:
                    6e:9f:da:4a:26:97:42:74:41:b4:0b:70:ad:a9:dd:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2E:A5:F0:AA:06:08:31:C0:AB:DF:C3:01:56:6E:74:90:2E:E3:0F
            X509v3 Authority Key Identifier:
                keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:91:96:c4:c3:50:b4:8c:04:c4:6b:c8:3d:d2:97:e7:4e:
         58:4b:71:f3:7a:2b:31:62:a2:d1:5a:d2:7d:4c:5d:36:ce:6c:
         eb:63:62:4e:bd:d5:f0:6d:7d:00:42:34:4c:a3:03:cf:a1:6e:
         69:f3:07:68:72:5c:d1:06:68:ba:c4:35:b3:23:0e:e4:2a:02:
         f0:98:64:87:10:b9:2c:ff:07:fe:b4:b9:bd:78:8f:82:0d:0f:
         f9:69:ed:94:1f:74:9c:e7:a8:00:50:37:58:4a:be:34:cf:73:
         91:77:34:40:ac:d7:89:79:de:29:5b:39:7d:7e:ba:c1:cb:aa:
         4e:bb:1c:a5:a7:6d:10:17:e0:62:1f:a9:08:d0:47:70:08:8e:
         ca:0b:ce:45:a5:82:81:ee:41:c9:11:6f:9e:2c:33:9c:60:30:
         b3:ca:d9:0e:09:5b:62:69:e5:7e:50:80:64:ea:c5:27:d6:99:
         5e:2c:27:35:78:1f:84:e7:08:8f:40:74:a1:85:bb:c7:27:11:
         0c:65:17:92:a2:0d:2f:4a:bb:b3:63:66:43:e9:42:28:a9:11:
         4a:51:1b:97:d0:5c:00:57:75:e2:a6:bb:8c:31:a8:30:a3:72:
         ae:4a:1d:47:b4:20:8b:38:6b:53:6b:22:9b:dc:d5:f8:77:10:
         af:76:21:0e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxEa+YPsbDhwQeIbtoVZalaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx
ZGVlMGEwHhcNMjYwMjA5MjIwMDQ3WhcNMjYwMjEwMjIwMDQ3WjAzMTEwLwYDVQQD
EygwNzJlYTVmMGFhMDYwODMxYzBhYmRmYzMwMTU2NmU3NDkwMmVlMzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3U9+f7GlyEj1eI6JSer8bHzoOWz
t7v8DaB/Z0EQSdcK8GvO0svBx7+vqXvWCP2PYt6zZeOmb9gxyM6DsrAnyQSAwK4o
14XhMQ1Niv3DUVGBPkL6dX9zSipg/cRIY0G3dk2R+qZpJZB2SuUkjL9JZNGMvHPf
AyglQ89lHNPgDnNoaA6NLDC5+2ogLofhmEmotV5XhkvxCffIu3nxsnfABi3/0qet
gFUeN3XeB8xc91Nyq5YA6uPHClhBCOztWwoPIiPAHvocUFtoPcbzPZxMsOpTi+/K
Prt6w+/LvPEidghL27DbggR0+l2g9yu600hun9pKJpdCdEG0C3Ctqd1JNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAcupfCqBggxwKvfwwFWbnSQLuMPMB8GA1UdIwQY
MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy
LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz
YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYyR
lsTDULSMBMRryD3Sl+dOWEtx83orMWKi0VrSfUxdNs5s62NiTr3V8G19AEI0TKMD
z6FuafMHaHJc0QZousQ1syMO5CoC8JhkhxC5LP8H/rS5vXiPgg0P+WntlB90nOeo
AFA3WEq+NM9zkXc0QKzXiXneKVs5fX66wcuqTrscpadtEBfgYh+pCNBHcAiOygvO
RaWCge5ByRFvniwznGAws8rZDglbYmnlflCAZOrFJ9aZXiwnNXgfhOcIj0B0oYW7
xycRDGUXkqINL0q7s2NmQ+lCKKkRSlEbl9BcAFd14qa7jDGoMKNyrkodR7Qgizhr
U2sim9zV+HcQr3YhDg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:00 2026 by rpki-client