This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File:                     s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier:          uDvq1ptbIqESW3c3Bod0dAk6/ft5iS3eLDsla26hGcE=
Subject key identifier:   75:FA:B7:BB:DE:16:B4:0E:45:07:5D:62:F6:76:47:DB:76:5D:5E:9F
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer:       /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial:       019C420F3EF562D49D3247B241BD91EB0D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:21 +0000
Files and hashes:         1: VjDmi08eDkQNqosAIn5lUGAfZIA.roa (hash: jWrWoSFJKct0v+ZoZpemlOK9O+tbs5TMpb0HP64364w=)
                          2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: V+kUmxr3WQc/aH07Mwhmw0iwuBLc+5fVT6RPpLujv3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:3e:f5:62:d4:9d:32:47:b2:41:bd:91:eb:0d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
        Validity
            Not Before: Feb  9 11:00:21 2026 GMT
            Not After : Feb 10 11:00:21 2026 GMT
        Subject: CN=75fab7bbde16b40e45075d62f67647db765d5e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:c9:c9:e2:68:bf:a3:af:53:9b:72:d7:2b:
                    d2:f1:fb:80:5b:8a:95:55:b8:4d:5d:09:43:b3:cc:
                    30:b2:61:0a:75:b5:c5:83:63:f9:c1:a6:be:67:fa:
                    73:21:e8:43:3a:d4:49:c5:c1:3e:ae:7e:44:64:d3:
                    fc:96:60:ac:d5:fc:d8:3a:13:6a:38:5f:37:b5:d9:
                    21:67:21:e0:23:34:97:c6:00:fd:ce:fd:e6:24:8e:
                    c3:fc:35:44:2a:7c:5a:fa:24:b8:cc:e9:c7:76:62:
                    47:9d:8c:b1:7e:f4:8d:3d:06:0a:08:29:81:b9:a1:
                    8d:30:1a:cc:98:18:d7:58:d3:ab:70:78:a3:e0:b2:
                    ac:7d:5b:fa:39:0d:66:e3:77:e3:de:74:78:1d:f2:
                    bc:18:d6:92:7d:8b:22:b9:88:59:d0:ad:62:1c:08:
                    c4:63:49:1a:7d:55:28:bd:de:ca:a3:7f:7f:bd:25:
                    23:a3:f1:3f:06:3c:10:e6:6b:de:bb:19:21:28:41:
                    50:74:f2:4b:1b:45:d3:80:8b:00:b0:9b:2b:e1:b5:
                    dc:92:5a:43:47:66:91:f7:58:d1:fe:1b:f7:59:b1:
                    14:8c:7f:15:ee:44:5e:98:b1:22:87:39:da:51:77:
                    6f:6d:29:37:58:9d:ed:23:43:24:aa:a8:60:31:f4:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:B7:BB:DE:16:B4:0E:45:07:5D:62:F6:76:47:DB:76:5D:5E:9F
            X509v3 Authority Key Identifier:
                keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ad:28:ae:85:49:8b:5a:19:5d:02:bf:22:63:06:ff:5d:c9:
         49:46:a9:95:54:c8:23:48:33:01:8e:c9:7d:0f:d3:16:70:93:
         44:ce:bb:47:d0:d4:c8:35:06:6a:25:81:3b:11:33:46:f0:f2:
         b1:75:ed:9c:f6:83:cf:9e:8d:cd:c2:43:19:ca:ef:11:89:5f:
         4b:da:96:d1:89:87:af:eb:b9:d7:ad:59:e5:cb:5a:df:19:61:
         d5:d0:f6:6c:51:7a:25:20:78:50:39:23:51:93:25:1e:34:96:
         45:2d:ea:ea:83:c1:84:f1:0f:d3:67:73:7f:28:08:3d:24:19:
         bc:0c:b5:7e:48:9e:d2:86:d2:f3:a1:62:7e:51:5c:9a:ac:0b:
         c5:9a:ba:60:ba:dd:ed:26:b4:cc:83:61:a9:18:f2:c7:59:05:
         14:87:88:01:9d:6f:0b:ce:e0:3a:83:ae:e3:52:fa:de:1b:f2:
         88:9d:47:dd:8c:8f:2b:58:21:9d:e8:b6:4b:d1:de:47:6a:18:
         d1:c4:c6:33:ab:3f:b2:af:bd:2f:b3:05:09:d4:dd:e8:ab:e3:
         b1:99:9d:aa:77:85:98:55:0c:ea:81:9d:bb:ab:5f:88:bd:13:
         ff:17:66:e2:7a:6e:ae:35:28:ad:4b:f7:bb:24:8b:41:e6:2b:
         08:49:71:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDz71YtSdMkeyQb2R6w09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGIyNWFkN2M5NjU4OWU0YThjYWE1ZmE0ODkyY2M0ZGZj
YzdiNTMwHhcNMjYwMjA5MTEwMDIxWhcNMjYwMjEwMTEwMDIxWjAzMTEwLwYDVQQD
Eyg3NWZhYjdiYmRlMTZiNDBlNDUwNzVkNjJmNjc2NDdkYjc2NWQ1ZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIrJyeJov6OvU5ty1yvS8fuAW4qV
VbhNXQlDs8wwsmEKdbXFg2P5waa+Z/pzIehDOtRJxcE+rn5EZNP8lmCs1fzYOhNq
OF83tdkhZyHgIzSXxgD9zv3mJI7D/DVEKnxa+iS4zOnHdmJHnYyxfvSNPQYKCCmB
uaGNMBrMmBjXWNOrcHij4LKsfVv6OQ1m43fj3nR4HfK8GNaSfYsiuYhZ0K1iHAjE
Y0kafVUovd7Ko39/vSUjo/E/BjwQ5mveuxkhKEFQdPJLG0XTgIsAsJsr4bXcklpD
R2aR91jR/hv3WbEUjH8V7kRemLEihznaUXdvbSk3WJ3tI0MkqqhgMfTepQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX6t7veFrQORQddYvZ2R9t2XV6fMB8GA1UdIwQY
MBaAFLOLJa18llieSoyqX6SJLMTfzHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTct
M2Y0MDU0N2U1MmQxLzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTctM2Y0MDU0N2U1MmQx
LzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYq0oroVJ
i1oZXQK/ImMG/13JSUaplVTII0gzAY7JfQ/TFnCTRM67R9DUyDUGaiWBOxEzRvDy
sXXtnPaDz56NzcJDGcrvEYlfS9qW0YmHr+u5161Z5cta3xlh1dD2bFF6JSB4UDkj
UZMlHjSWRS3q6oPBhPEP02dzfygIPSQZvAy1fkie0obS86FiflFcmqwLxZq6YLrd
7Sa0zINhqRjyx1kFFIeIAZ1vC87gOoOu41L63hvyiJ1H3YyPK1ghnei2S9HeR2oY
0cTGM6s/sq+9L7MFCdTd6KvjsZmdqneFmFUM6oGdu6tfiL0T/xdm4npurjUorUv3
uySLQeYrCElxjw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:50 2026 by rpki-client