This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File:                     p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier:          FBW1IRj4uy+mR4b2mtosUXBaB8chS+NQ7g0ncjtlmYM=
Subject key identifier:   9E:2E:AE:FC:55:DB:E5:E2:12:97:A3:41:0E:D7:9A:7C:83:EA:73:DE
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer:       /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial:       019C446BBE4ADFE062EDDC6C4E40F6E36A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number:          0F73
Signing time:             Mon 09 Feb 2026 22:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:37 +0000
Files and hashes:         1: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: 7xGi6FCyNUYSm8RkaRzdvr016viZSW8p71+m85RpAI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:be:4a:df:e0:62:ed:dc:6c:4e:40:f6:e3:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
        Validity
            Not Before: Feb  9 22:00:37 2026 GMT
            Not After : Feb 10 22:00:37 2026 GMT
        Subject: CN=9e2eaefc55dbe5e21297a3410ed79a7c83ea73de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:78:ae:d2:e2:c5:b4:33:66:05:3a:69:dd:
                    b5:9b:b2:a5:9f:99:12:74:90:85:29:86:74:df:28:
                    53:85:4a:be:5f:ce:8f:65:89:b0:ba:d6:6c:8a:48:
                    f1:6d:e3:69:b2:90:4d:dc:43:07:a3:af:ff:46:62:
                    d7:7a:1c:3b:00:8e:4d:a1:2a:86:20:75:c4:5c:b4:
                    7a:25:1a:eb:ba:3b:97:5c:96:9b:e4:f7:71:45:e9:
                    d6:2a:d7:0b:9e:3a:e7:93:88:46:ea:84:ad:d2:a3:
                    8f:13:b3:24:16:c0:81:4b:87:0b:6c:ba:7e:a8:d6:
                    d1:1d:a6:45:9f:28:ae:1b:22:24:47:22:4b:cf:e8:
                    24:44:ce:c6:cc:2d:27:08:f1:83:93:62:85:19:45:
                    40:59:34:d3:99:35:e4:11:1a:04:3a:21:1b:a9:a3:
                    75:64:25:ff:c0:59:22:83:5e:c1:99:3a:a3:6a:1a:
                    2a:e3:c5:99:ec:d9:df:a6:09:b2:1f:89:5c:32:5d:
                    38:95:4d:be:88:5d:dc:27:a5:ce:44:f2:c6:5e:ac:
                    2c:ea:a1:05:14:1b:a9:a3:1a:1a:47:2b:64:fc:15:
                    be:74:a4:26:af:e1:1b:82:04:94:89:30:d9:38:3c:
                    f2:d4:d8:22:06:ed:f2:d3:f1:f0:ba:3f:00:20:af:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2E:AE:FC:55:DB:E5:E2:12:97:A3:41:0E:D7:9A:7C:83:EA:73:DE
            X509v3 Authority Key Identifier:
                keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:13:0f:4c:4b:2b:3a:67:96:9d:49:b3:0c:e5:b5:11:1e:97:
         dc:29:32:b3:e1:7f:5c:68:e3:af:fd:97:41:16:75:59:22:55:
         87:71:3d:f8:a9:68:a2:a6:19:96:eb:bb:84:0d:d4:b7:e2:58:
         07:d2:99:ea:79:b3:f2:68:f0:de:70:1d:f8:05:6a:09:e3:03:
         7a:54:f1:c5:1a:b4:66:83:31:c7:33:2b:e3:c4:e1:6a:12:00:
         74:4f:e9:ed:2c:38:7b:9b:f8:c5:cc:eb:19:f3:af:fe:b7:b2:
         21:3d:fa:ac:dc:d9:a6:4b:21:cd:2f:9b:f7:42:5e:15:c7:39:
         7f:93:0b:13:e2:09:19:7a:94:20:73:d3:cd:79:a1:6f:d8:39:
         8f:29:e3:16:e3:cd:1d:4b:ed:81:62:c2:0e:0b:b9:f1:77:40:
         d6:55:90:55:63:e7:6f:a3:83:ad:6b:7c:08:fc:15:aa:ee:92:
         78:2c:c3:95:0a:03:8a:c7:7e:77:f1:ed:3e:76:4d:e3:ff:08:
         11:f9:d2:d0:cc:19:6f:92:3a:89:ef:ca:81:c3:72:9b:f4:33:
         30:18:7a:b9:d7:a6:95:e5:9d:2c:37:0a:aa:81:b5:cc:86:2f:
         79:7b:12:69:61:f8:5a:5c:37:d6:90:00:e1:05:e9:ee:f8:00:
         b4:59:3a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEa75K3+Bi7dxsTkD242ofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NTBhOWIxZDQ1NDk0OWYwYjE5MzAzNTI0ZDU1ZTYyNWRm
MGJhNGIwHhcNMjYwMjA5MjIwMDM3WhcNMjYwMjEwMjIwMDM3WjAzMTEwLwYDVQQD
Eyg5ZTJlYWVmYzU1ZGJlNWUyMTI5N2EzNDEwZWQ3OWE3YzgzZWE3M2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIN4rtLixbQzZgU6ad21m7Kln5kS
dJCFKYZ03yhThUq+X86PZYmwutZsikjxbeNpspBN3EMHo6//RmLXehw7AI5NoSqG
IHXEXLR6JRrrujuXXJab5PdxRenWKtcLnjrnk4hG6oSt0qOPE7MkFsCBS4cLbLp+
qNbRHaZFnyiuGyIkRyJLz+gkRM7GzC0nCPGDk2KFGUVAWTTTmTXkERoEOiEbqaN1
ZCX/wFkig17BmTqjahoq48WZ7NnfpgmyH4lcMl04lU2+iF3cJ6XORPLGXqws6qEF
FBupoxoaRytk/BW+dKQmr+EbggSUiTDZODzy1NgiBu3y0/Hwuj8AIK+5mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4urvxV2+XiEpejQQ7XmnyD6nPeMB8GA1UdIwQY
MBaAFKdQqbHUVJSfCxkwNSTVXmJd8LpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81YjQ4MzAtN2MwZi00M2QyLWJjMWYt
NzQwMTYwMzFjMjM4LzEvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81YjQ4MzAtN2MwZi00M2QyLWJjMWYtNzQwMTYwMzFjMjM4
LzEvcDFDcHNkUlVsSjhMR1RBMUpOVmVZbDN3dWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthMPTEsr
OmeWnUmzDOW1ER6X3Ckys+F/XGjjr/2XQRZ1WSJVh3E9+KlooqYZluu7hA3Ut+JY
B9KZ6nmz8mjw3nAd+AVqCeMDelTxxRq0ZoMxxzMr48ThahIAdE/p7Sw4e5v4xczr
GfOv/reyIT36rNzZpkshzS+b90JeFcc5f5MLE+IJGXqUIHPTzXmhb9g5jynjFuPN
HUvtgWLCDgu58XdA1lWQVWPnb6ODrWt8CPwVqu6SeCzDlQoDisd+d/HtPnZN4/8I
EfnS0MwZb5I6ie/KgcNym/QzMBh6udemleWdLDcKqoG1zIYveXsSaWH4Wlw31pAA
4QXp7vgAtFk6Iw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:25 2026 by rpki-client