This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File:                     yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier:          IwmT2jcVgVOXEhiVL3609UIzFUk+unL5OJGHKA9iPwk=
Subject key identifier:   88:4F:AE:C6:B8:C6:50:28:F5:FA:D1:6B:A2:2F:68:73:08:40:6F:06
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer:       /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial:       019C4133E16CCB5B97B41D909EB79C713968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number:          179D
Signing time:             Mon 09 Feb 2026 07:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:44 +0000
Files and hashes:         1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: 3hIe8/rHFhG4YEhIa3p9AOXTUudXXQWbikcNdQS4ucY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:e1:6c:cb:5b:97:b4:1d:90:9e:b7:9c:71:39:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
        Validity
            Not Before: Feb  9 07:00:44 2026 GMT
            Not After : Feb 10 07:00:44 2026 GMT
        Subject: CN=884faec6b8c65028f5fad16ba22f687308406f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:7c:8d:0b:50:cb:79:50:c0:f9:a6:d5:fc:
                    f8:0b:ae:12:fc:60:42:ef:cb:8d:c9:23:26:20:6c:
                    ef:4f:65:3b:97:3e:c5:26:fa:44:0f:52:31:0e:49:
                    5a:27:3e:c0:a2:6b:ed:ca:5b:24:c2:ca:6a:91:fd:
                    22:6f:f7:87:9b:73:a6:d8:af:7f:a4:08:16:68:81:
                    b1:49:e1:5a:73:5f:a2:23:a8:bc:51:5b:34:f5:d5:
                    ed:98:25:4c:2a:ec:12:e3:f7:d3:f8:95:dc:16:fc:
                    8b:f4:98:be:89:74:61:3f:82:04:cc:78:33:72:c2:
                    e8:59:2e:39:d6:87:41:75:cf:a4:67:4f:6e:7d:21:
                    d7:7d:9f:95:7d:28:a8:ca:f4:8f:a3:51:63:af:89:
                    9b:46:8d:86:e5:35:90:9e:bc:05:8d:62:13:a5:be:
                    fb:ce:23:79:8b:be:ce:7b:c4:a8:d6:68:4f:7f:62:
                    31:46:07:e5:39:9e:9f:73:0c:1e:05:b0:4f:6a:22:
                    ee:85:58:0e:25:6d:e8:5e:45:7a:3c:fc:75:56:98:
                    1c:d5:67:a7:c5:6f:53:64:94:2a:c7:a3:0b:2d:2a:
                    47:22:d8:74:2a:3f:9a:a9:c8:b3:25:af:bf:0e:90:
                    f9:7c:60:13:33:fb:69:eb:28:06:60:80:62:8d:ec:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4F:AE:C6:B8:C6:50:28:F5:FA:D1:6B:A2:2F:68:73:08:40:6F:06
            X509v3 Authority Key Identifier:
                keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7b:8a:1d:2b:c5:e9:9b:37:eb:a1:e9:4c:2a:50:a8:47:78:
         93:3f:7f:3c:7e:8e:92:c9:07:3a:06:8a:e3:4c:07:63:a4:80:
         32:e1:21:ee:7f:fe:3d:79:9e:eb:6a:8c:ba:a7:91:98:9a:09:
         de:31:bb:5e:a2:92:09:80:91:8a:54:e0:87:82:60:27:61:45:
         bd:b0:62:94:51:f2:f4:8a:4c:29:8e:f2:b0:fe:98:4f:21:fa:
         4b:10:c6:ed:3b:63:c3:6c:54:5a:e7:d8:33:8f:a0:ae:67:dd:
         40:02:07:64:85:4b:dc:06:30:a3:a0:1d:d7:79:0e:86:b6:be:
         b4:ad:10:03:a7:cc:72:8d:12:9d:c3:d7:2d:cb:5c:5e:2d:85:
         20:90:fe:e5:0e:c9:8a:66:d6:39:1e:d4:0e:bb:7f:99:6a:91:
         a9:18:e2:62:3c:40:6f:12:f9:6c:60:3d:1a:ed:95:88:4b:cd:
         c6:05:33:ab:b7:a6:55:c0:26:bc:cd:ed:50:03:9b:0c:1f:e7:
         dd:e1:8a:2c:ae:c1:a0:d8:4e:79:91:36:70:ed:bc:b2:67:47:
         e3:14:fc:a2:d9:95:17:c5:3c:b1:0f:57:57:6c:7a:81:30:5f:
         9c:17:64:fa:9a:11:c0:bc:80:5a:8b:f5:5a:4f:b1:81:ae:a0:
         15:0b:ce:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM+Fsy1uXtB2QnreccTloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMmRlZDI3NzUxZjI5MWMwYjU1Yjc5NDU3MjA3Y2IzYTI1
NTE5N2MwHhcNMjYwMjA5MDcwMDQ0WhcNMjYwMjEwMDcwMDQ0WjAzMTEwLwYDVQQD
Eyg4ODRmYWVjNmI4YzY1MDI4ZjVmYWQxNmJhMjJmNjg3MzA4NDA2ZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosJ8jQtQy3lQwPmm1fz4C64S/GBC
78uNySMmIGzvT2U7lz7FJvpED1IxDklaJz7Aomvtylskwspqkf0ib/eHm3Om2K9/
pAgWaIGxSeFac1+iI6i8UVs09dXtmCVMKuwS4/fT+JXcFvyL9Ji+iXRhP4IEzHgz
csLoWS451odBdc+kZ09ufSHXfZ+VfSioyvSPo1Fjr4mbRo2G5TWQnrwFjWITpb77
ziN5i77Oe8So1mhPf2IxRgflOZ6fcwweBbBPaiLuhVgOJW3oXkV6PPx1Vpgc1Wen
xW9TZJQqx6MLLSpHIth0Kj+aqcizJa+/DpD5fGATM/tp6ygGYIBijeycMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhPrsa4xlAo9frRa6IvaHMIQG8GMB8GA1UdIwQY
MBaAFMot7Sd1HykcC1W3lFcgfLOiVRl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wN2FkM2MtZWNhZC00ZjZkLWJjNTEt
YTU5MWVhYWNjZTRmLzEveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wN2FkM2MtZWNhZC00ZjZkLWJjNTEtYTU5MWVhYWNjZTRm
LzEveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXuKHSvF
6Zs366HpTCpQqEd4kz9/PH6OkskHOgaK40wHY6SAMuEh7n/+PXme62qMuqeRmJoJ
3jG7XqKSCYCRilTgh4JgJ2FFvbBilFHy9IpMKY7ysP6YTyH6SxDG7Ttjw2xUWufY
M4+grmfdQAIHZIVL3AYwo6Ad13kOhra+tK0QA6fMco0SncPXLctcXi2FIJD+5Q7J
imbWOR7UDrt/mWqRqRjiYjxAbxL5bGA9Gu2ViEvNxgUzq7emVcAmvM3tUAObDB/n
3eGKLK7BoNhOeZE2cO28smdH4xT8otmVF8U8sQ9XV2x6gTBfnBdk+poRwLyAWov1
Wk+xga6gFQvOFw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:23 2026 by rpki-client