This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File:                     mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier:          qjrrOml8WrUPSPxwSLPVpG3H6b+lwceV3TFfg5tYGZM=
Subject key identifier:   A1:4F:89:B6:A4:33:CC:88:17:95:8D:25:0E:17:9A:BC:49:F1:18:83
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer:       /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial:       019C451063CBEE474D061758E5520502863A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number:          09E5
Signing time:             Tue 10 Feb 2026 01:00:27 +0000
Manifest this update:     Tue 10 Feb 2026 01:00:27 +0000
Manifest next update:     Wed 11 Feb 2026 01:00:27 +0000
Files and hashes:         1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: K/j3yUK2CK81f22UsS376bRojsDXRrubhGLfqbw7TOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:10:63:cb:ee:47:4d:06:17:58:e5:52:05:02:86:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
        Validity
            Not Before: Feb 10 01:00:27 2026 GMT
            Not After : Feb 11 01:00:27 2026 GMT
        Subject: CN=a14f89b6a433cc8817958d250e179abc49f11883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:f4:9f:1f:3a:e0:4b:ff:d9:cb:1f:1a:c5:
                    73:76:2c:eb:f7:1d:87:77:89:a6:a6:16:88:13:35:
                    d7:67:c7:a6:a0:01:11:dd:4c:04:94:0c:07:06:e0:
                    3f:97:bc:7b:b8:fc:1a:b6:51:fc:bf:4f:6f:c5:67:
                    77:33:fc:95:66:7d:0b:23:ba:76:54:49:85:19:99:
                    7d:c7:1d:b2:ce:94:15:94:25:5d:e3:06:2f:20:a4:
                    80:0d:46:0d:7b:86:60:ba:e8:ee:00:17:a0:e4:d8:
                    3d:e2:5e:32:92:92:ec:82:1b:1f:c4:e0:af:72:26:
                    49:fd:a4:dc:f9:13:f2:85:84:0d:43:6e:a9:67:6b:
                    bd:98:32:48:df:f3:47:ae:a6:53:7e:09:25:ca:52:
                    c0:22:77:43:d2:be:0c:31:1a:ac:16:c4:5b:42:87:
                    6a:49:77:56:69:6f:19:90:2a:34:cd:fd:0c:f0:38:
                    38:8d:2f:02:fe:af:0e:f7:a8:7f:7f:b3:6f:66:86:
                    ae:ee:7d:fb:a7:32:48:1d:e0:08:59:6b:83:51:b0:
                    ca:ae:db:1b:11:c5:a5:b6:d8:bf:76:5e:ba:06:db:
                    6f:9e:35:e6:a8:f2:1b:d8:75:75:af:9b:9f:ad:a5:
                    60:cd:32:f9:43:7a:0d:66:96:12:3d:e0:43:63:ff:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4F:89:B6:A4:33:CC:88:17:95:8D:25:0E:17:9A:BC:49:F1:18:83
            X509v3 Authority Key Identifier:
                keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d9:22:2b:a4:87:29:71:15:65:8a:33:64:25:25:02:a4:a0:
         9d:56:0e:24:95:57:ed:23:b0:e6:72:51:2f:3b:de:11:a1:46:
         98:40:64:04:bc:4d:c6:24:1a:d0:65:58:ef:91:a4:d1:cc:9a:
         a0:70:ba:fa:34:5f:2d:28:d1:60:c9:68:c9:48:a0:79:cc:c3:
         29:45:27:7f:d0:58:54:84:70:31:60:57:46:9f:5b:5a:0b:46:
         c2:de:86:59:40:da:81:b6:88:a2:7c:7c:3c:b2:ef:6b:ea:6c:
         01:f5:38:18:8e:e4:ae:42:f9:a5:c4:12:19:a7:d0:11:bd:bf:
         88:93:b2:74:ec:cd:9e:56:a3:e5:ae:e2:19:46:50:ac:85:b7:
         a8:12:0d:a7:5f:d1:7d:69:5e:98:b0:a1:55:db:02:aa:85:45:
         52:6b:28:75:03:23:f3:8d:3f:30:33:66:92:d1:2e:5b:52:24:
         3a:92:2d:19:c8:82:ac:26:80:13:f1:27:e1:de:69:79:4e:f2:
         88:30:7e:55:5b:6f:8b:bb:49:b8:4e:7d:9f:3c:c9:e6:a4:1b:
         a0:1d:0b:f6:ad:d2:9b:5d:a1:bb:da:ed:68:51:6d:08:50:7b:
         c4:74:d2:60:71:15:7c:fe:42:20:42:8b:bf:c1:1e:e0:cb:7a:
         72:c4:fd:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxFEGPL7kdNBhdY5VIFAoY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2E5OGExMmJiNmQ4ZGFiODJmMzc0Y2YwYTI3OGE1YTYx
Yjc4ZTcwHhcNMjYwMjEwMDEwMDI3WhcNMjYwMjExMDEwMDI3WjAzMTEwLwYDVQQD
EyhhMTRmODliNmE0MzNjYzg4MTc5NThkMjUwZTE3OWFiYzQ5ZjExODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyov0nx864Ev/2csfGsVzdizr9x2H
d4mmphaIEzXXZ8emoAER3UwElAwHBuA/l7x7uPwatlH8v09vxWd3M/yVZn0LI7p2
VEmFGZl9xx2yzpQVlCVd4wYvIKSADUYNe4ZguujuABeg5Ng94l4ykpLsghsfxOCv
ciZJ/aTc+RPyhYQNQ26pZ2u9mDJI3/NHrqZTfgklylLAIndD0r4MMRqsFsRbQodq
SXdWaW8ZkCo0zf0M8Dg4jS8C/q8O96h/f7NvZoau7n37pzJIHeAIWWuDUbDKrtsb
EcWltti/dl66BttvnjXmqPIb2HV1r5ufraVgzTL5Q3oNZpYSPeBDY/8cPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFPibakM8yIF5WNJQ4XmrxJ8RiDMB8GA1UdIwQY
MBaAFJnKmKErttjauC83TPCieKWmG3jnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEt
MjhjM2MxZTJhMzcwLzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEtMjhjM2MxZTJhMzcw
LzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNkiK6SH
KXEVZYozZCUlAqSgnVYOJJVX7SOw5nJRLzveEaFGmEBkBLxNxiQa0GVY75Gk0cya
oHC6+jRfLSjRYMloyUigeczDKUUnf9BYVIRwMWBXRp9bWgtGwt6GWUDagbaIonx8
PLLva+psAfU4GI7krkL5pcQSGafQEb2/iJOydOzNnlaj5a7iGUZQrIW3qBINp1/R
fWlemLChVdsCqoVFUmsodQMj840/MDNmktEuW1IkOpItGciCrCaAE/En4d5peU7y
iDB+VVtvi7tJuE59nzzJ5qQboB0L9q3Sm12hu9rtaFFtCFB7xHTSYHEVfP5CIEKL
v8Ee4Mt6csT9aA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:45 2026 by rpki-client