This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File:                     g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier:          X1UNd6ke0xsrh1yNg8+UuUj6UsQJyfS7bG3lZGGOL4I=
Subject key identifier:   21:7B:5C:D9:07:24:8C:0C:CE:34:D8:E3:B5:91:67:B3:FD:CD:C8:6D
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer:       /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial:       019C43900409D888EE670834DB5F5DDBA723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number:          16
Signing time:             Mon 09 Feb 2026 18:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:37 +0000
Files and hashes:         1: ZCX1K491fuofD-KW-jb0pfq9nuw.asa (hash: 0g8X9qZdEwEVTUpjkYItWEgd8L4aVsf8OFtpGdhGrQI=)
                          2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: cdUPPUNGltM/ZvEP9HC0GNROpStBNehwGJUSziahq40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:04:09:d8:88:ee:67:08:34:db:5f:5d:db:a7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
        Validity
            Not Before: Feb  9 18:00:37 2026 GMT
            Not After : Feb 10 18:00:37 2026 GMT
        Subject: CN=217b5cd907248c0cce34d8e3b59167b3fdcdc86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c5:ec:0d:9f:e8:d0:f3:0f:38:3e:63:b7:89:
                    a9:98:3f:dc:b6:6d:83:d2:a3:bd:b1:21:2b:d7:42:
                    c6:c1:07:11:76:6b:e6:ed:92:d7:0c:eb:ca:fb:60:
                    20:b3:e4:5b:cb:0b:a1:94:0c:77:78:4f:86:47:90:
                    7b:b9:89:83:9e:08:55:bd:1b:bc:32:17:68:63:3c:
                    65:e3:b5:3d:41:a2:ce:9f:70:e4:3a:74:c4:3b:2f:
                    08:07:9b:bd:00:cd:97:aa:14:8f:4f:31:c2:95:42:
                    dc:50:75:88:06:11:0d:60:f9:cd:44:02:a1:66:00:
                    a5:e4:99:c9:c0:97:ce:ab:bd:87:17:a4:ef:d9:0f:
                    01:54:15:d6:2c:e2:59:71:be:37:2c:cb:a2:08:63:
                    de:5f:18:02:b0:dd:df:38:aa:7b:48:72:29:1e:5b:
                    89:b2:b3:6a:5d:f7:d4:0f:f7:96:5b:bd:e9:b4:dc:
                    69:e3:c3:39:4d:9a:ab:53:8d:7b:1d:f0:4d:fb:e4:
                    33:fb:d8:95:b6:88:86:a5:b4:19:c4:6d:0f:40:a0:
                    b5:6f:a6:1d:bc:df:72:d4:3d:b5:26:7d:6b:08:b6:
                    25:bc:47:09:71:08:d7:2e:2f:f9:9d:6b:16:3b:97:
                    fb:d8:67:55:a9:76:8c:b5:f0:27:c2:84:50:e9:fc:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7B:5C:D9:07:24:8C:0C:CE:34:D8:E3:B5:91:67:B3:FD:CD:C8:6D
            X509v3 Authority Key Identifier:
                keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:12:77:7a:8d:d2:27:60:fb:82:0f:aa:42:e3:1e:e7:cc:
         e3:e8:c6:cd:be:1b:bd:80:ec:9f:c8:89:e3:e7:ff:38:b8:3f:
         3a:c6:2e:4a:8b:22:e5:91:4c:c4:be:34:08:15:8d:26:a1:b1:
         1c:fc:ae:13:3d:66:a2:44:6c:e5:b0:90:dd:6a:63:eb:7d:e3:
         f0:f1:07:a8:1b:93:81:a2:ff:53:84:78:67:c8:55:c1:8d:64:
         91:2a:1e:e5:aa:06:72:fa:ea:3a:a8:0a:1a:56:bf:70:f2:36:
         d1:6c:8d:36:b4:4c:c0:8a:2f:70:87:4b:b5:df:2e:ce:e1:cd:
         1c:94:ba:3c:e7:96:1f:f6:46:50:61:3b:2d:70:0c:0a:a4:ab:
         98:e4:d2:17:c5:0a:a7:3a:b8:1f:c2:b1:f2:02:64:50:44:66:
         bf:48:66:7d:01:a9:61:83:e5:7e:90:ee:58:13:73:ba:26:00:
         95:9d:d4:6a:d3:2f:1d:85:c6:b6:d6:c7:00:24:94:e2:f7:16:
         aa:bc:74:8d:ad:a4:52:66:ab:22:54:5c:69:8e:ee:b5:cb:ad:
         6a:95:0f:63:ca:65:b8:d8:7f:5b:f1:d0:a9:79:47:e6:04:0b:
         16:cd:da:54:18:02:c0:85:63:fb:48:c3:e5:20:c5:c4:b4:78:
         c7:69:41:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkAQJ2IjuZwg0219d26cjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzgyOTNhOTkwMDlkM2FmOTkwMTAzMGIxODRkYWRhMDFi
MGIyOWIwHhcNMjYwMjA5MTgwMDM3WhcNMjYwMjEwMTgwMDM3WjAzMTEwLwYDVQQD
EygyMTdiNWNkOTA3MjQ4YzBjY2UzNGQ4ZTNiNTkxNjdiM2ZkY2RjODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58XsDZ/o0PMPOD5jt4mpmD/ctm2D
0qO9sSEr10LGwQcRdmvm7ZLXDOvK+2Ags+RbywuhlAx3eE+GR5B7uYmDnghVvRu8
MhdoYzxl47U9QaLOn3DkOnTEOy8IB5u9AM2XqhSPTzHClULcUHWIBhENYPnNRAKh
ZgCl5JnJwJfOq72HF6Tv2Q8BVBXWLOJZcb43LMuiCGPeXxgCsN3fOKp7SHIpHluJ
srNqXffUD/eWW73ptNxp48M5TZqrU417HfBN++Qz+9iVtoiGpbQZxG0PQKC1b6Yd
vN9y1D21Jn1rCLYlvEcJcQjXLi/5nWsWO5f72GdVqXaMtfAnwoRQ6fx4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF7XNkHJIwMzjTY47WRZ7P9zchtMB8GA1UdIwQY
MBaAFIPIKTqZAJ06+ZAQMLGE2toBsLKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mOTc1NDQtMTE3ZS00YWU5LWFlNTYt
ZWIxMTdhZWUyY2MxLzEvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mOTc1NDQtMTE3ZS00YWU5LWFlNTYtZWIxMTdhZWUyY2Mx
LzEvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFASd3qN
0idg+4IPqkLjHufM4+jGzb4bvYDsn8iJ4+f/OLg/OsYuSosi5ZFMxL40CBWNJqGx
HPyuEz1mokRs5bCQ3Wpj633j8PEHqBuTgaL/U4R4Z8hVwY1kkSoe5aoGcvrqOqgK
Gla/cPI20WyNNrRMwIovcIdLtd8uzuHNHJS6POeWH/ZGUGE7LXAMCqSrmOTSF8UK
pzq4H8Kx8gJkUERmv0hmfQGpYYPlfpDuWBNzuiYAlZ3UatMvHYXGttbHACSU4vcW
qrx0ja2kUmarIlRcaY7utcutapUPY8pluNh/W/HQqXlH5gQLFs3aVBgCwIVj+0jD
5SDFxLR4x2lB1Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:34 2026 by rpki-client