This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File:                     pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier:          RQTX9eTh/zIlyg+gnmDOjUJIQEUi+s2Hv0iK9btf+IM=
Subject key identifier:   27:E6:43:13:1A:36:36:2F:47:8C:52:A1:FF:EA:6C:9A:89:23:4D:8C
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer:       /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial:       019C424638AA35E065330AD7E358E430D9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 12:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:24 +0000
Files and hashes:         1: 5Gr2q7ZQUry_6juJo6TbPmIZ_GI.roa (hash: CLid1uYJD/tWmQGqtEiBJvjm9/bPdenK+e3VYv871Vk=)
                          2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: IYh0K5GMbPh+nniaY9myOTEqbW3HY80iL5hJxJtcTNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:38:aa:35:e0:65:33:0a:d7:e3:58:e4:30:d9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
        Validity
            Not Before: Feb  9 12:00:24 2026 GMT
            Not After : Feb 10 12:00:24 2026 GMT
        Subject: CN=27e643131a36362f478c52a1ffea6c9a89234d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:21:a6:5d:ba:8f:6d:27:5c:25:11:02:7f:7d:
                    fa:cf:73:46:79:a4:ad:f8:3d:4c:6d:92:ba:c8:da:
                    3c:2e:fc:f5:2a:43:e9:31:ec:c3:59:22:a8:c1:65:
                    b8:89:c0:bb:c7:c8:51:27:1f:03:14:1e:55:c8:a3:
                    fd:32:0b:51:8d:d2:0e:de:50:b8:ef:8d:46:14:55:
                    a3:c6:96:98:f7:ff:2c:c5:c5:a5:63:b4:1b:0f:e7:
                    b8:eb:9e:57:88:a4:6e:b4:54:04:92:52:39:c5:c9:
                    70:2e:25:43:84:20:c1:b4:cb:b4:d3:ef:a4:9b:55:
                    d8:78:72:24:a3:e9:fd:61:33:4b:f1:fc:29:94:08:
                    79:ba:46:c0:80:d9:3c:00:62:7a:8d:a2:44:1c:1c:
                    ff:79:f8:ce:2a:6e:43:1b:56:e9:9c:ba:4b:99:e2:
                    57:d4:c4:a3:af:7c:0e:91:5f:a1:76:15:9c:e9:cb:
                    9f:45:15:26:09:f7:ec:92:61:ca:fd:b5:04:c7:b0:
                    cc:88:31:46:45:55:c5:37:96:90:23:9d:12:47:16:
                    56:99:ea:5c:54:cd:36:c4:38:f3:74:5f:df:d0:09:
                    30:b7:a7:de:2a:02:69:5a:70:6b:ad:c0:d4:4f:7d:
                    40:95:da:cd:1a:82:b6:8e:98:5e:c9:ed:5a:c8:06:
                    b0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:43:13:1A:36:36:2F:47:8C:52:A1:FF:EA:6C:9A:89:23:4D:8C
            X509v3 Authority Key Identifier:
                keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:30:55:16:4d:97:39:ce:71:36:c0:7a:9c:6a:53:8d:b4:71:
         a7:df:d2:66:1e:84:dc:95:48:1f:f2:12:d4:03:e2:aa:22:b4:
         f1:f4:41:62:00:3a:8d:7d:75:5e:41:9d:f1:9f:d7:29:09:38:
         64:b8:73:66:86:11:da:58:75:f8:5a:3e:da:ea:a3:1b:b1:b6:
         d6:da:5e:d2:56:35:2b:54:05:25:d0:10:c4:87:05:8b:bd:78:
         4e:c2:19:3e:18:ed:cf:d8:8b:c7:0c:55:9d:3d:45:ab:6d:ad:
         b9:04:b4:e8:42:38:b4:c9:78:6b:6e:75:43:ba:ce:07:bb:e0:
         26:a6:f2:4e:95:29:7a:fc:14:e5:75:22:47:22:38:d7:2e:8b:
         85:de:b6:0e:8c:7a:a7:9e:ec:87:a1:16:6c:c3:15:1a:95:07:
         83:03:4c:b1:1d:78:56:82:4e:c9:59:76:32:a4:b2:5e:84:9a:
         61:a2:7f:6c:d3:ec:4e:75:4d:9d:52:c2:63:e0:b5:88:7e:9d:
         a2:7a:39:e4:36:90:39:4f:1d:56:b7:a8:3c:23:eb:38:0f:25:
         2e:e5:ef:98:1f:c6:01:72:4f:d3:5e:15:2c:1f:b7:92:e2:51:
         06:88:0d:b0:22:ef:1d:d3:d7:33:f9:33:d7:09:50:5d:3c:f8:
         2b:5e:60:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRjiqNeBlMwrX41jkMNmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmY2NTI0MDg1ZmExMGU4YzA5OGFjMmI1ODI4YTFmODhj
NjkxM2MwHhcNMjYwMjA5MTIwMDI0WhcNMjYwMjEwMTIwMDI0WjAzMTEwLwYDVQQD
EygyN2U2NDMxMzFhMzYzNjJmNDc4YzUyYTFmZmVhNmM5YTg5MjM0ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SGmXbqPbSdcJRECf336z3NGeaSt
+D1MbZK6yNo8Lvz1KkPpMezDWSKowWW4icC7x8hRJx8DFB5VyKP9MgtRjdIO3lC4
741GFFWjxpaY9/8sxcWlY7QbD+e4655XiKRutFQEklI5xclwLiVDhCDBtMu00++k
m1XYeHIko+n9YTNL8fwplAh5ukbAgNk8AGJ6jaJEHBz/efjOKm5DG1bpnLpLmeJX
1MSjr3wOkV+hdhWc6cufRRUmCffskmHK/bUEx7DMiDFGRVXFN5aQI50SRxZWmepc
VM02xDjzdF/f0Akwt6feKgJpWnBrrcDUT31AldrNGoK2jpheye1ayAawBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfmQxMaNjYvR4xSof/qbJqJI02MMB8GA1UdIwQY
MBaAFKUvZSQIX6EOjAmKwrWCih+IxpE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMt
YmZmZjUxNDIwNTNmLzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMtYmZmZjUxNDIwNTNm
LzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijBVFk2X
Oc5xNsB6nGpTjbRxp9/SZh6E3JVIH/IS1APiqiK08fRBYgA6jX11XkGd8Z/XKQk4
ZLhzZoYR2lh1+Fo+2uqjG7G21tpe0lY1K1QFJdAQxIcFi714TsIZPhjtz9iLxwxV
nT1Fq22tuQS06EI4tMl4a251Q7rOB7vgJqbyTpUpevwU5XUiRyI41y6Lhd62Dox6
p57sh6EWbMMVGpUHgwNMsR14VoJOyVl2MqSyXoSaYaJ/bNPsTnVNnVLCY+C1iH6d
ono55DaQOU8dVreoPCPrOA8lLuXvmB/GAXJP014VLB+3kuJRBogNsCLvHdPXM/kz
1wlQXTz4K15gnA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:54 2026 by rpki-client