This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          p8ydvy5BD6KrgOseYm8FpK3EsP4853piBpH5GeV6rNo=
Subject key identifier:   96:7D:16:1F:26:DC:6E:FD:68:B9:8E:42:B8:18:49:B0:9C:79:F4:3D
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       019C4246ACA11A793548F73C5A626CC5A09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 12:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:53 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: ZaF8ZeNZBNxaLnjfr70AyyxPQiC0mM10kPB67nCMBc0=)
                          2: Zs-v1rw9g1MYTe4z_xC60lFfzak.roa (hash: gDQsejW5I6NwbA9XiA+PvZS2jChO/DirRuBkqy+plZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:ac:a1:1a:79:35:48:f7:3c:5a:62:6c:c5:a0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Feb  9 12:00:53 2026 GMT
            Not After : Feb 10 12:00:53 2026 GMT
        Subject: CN=967d161f26dc6efd68b98e42b81849b09c79f43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:be:32:48:d6:94:23:f3:6f:d3:2f:11:80:
                    01:38:a8:d2:a0:24:e3:c1:7b:e3:6c:7e:db:30:d9:
                    7c:1a:5c:00:43:25:32:00:1c:84:c1:42:62:25:45:
                    65:54:fb:f3:12:de:c3:73:9f:f2:70:f5:36:0e:8c:
                    60:7f:80:33:5e:84:5b:a8:ee:45:85:cc:4c:da:ea:
                    bc:80:7d:b4:84:2e:1d:9b:51:cc:00:78:25:64:f9:
                    e0:52:dd:ad:3e:cd:87:d5:60:ab:04:56:91:cc:80:
                    60:04:51:c7:fa:2e:f4:7c:c9:30:8e:05:8a:93:f9:
                    1f:b4:44:54:a9:87:08:fe:22:ef:02:32:a8:33:71:
                    d4:49:3d:e6:89:53:73:b9:a0:bf:d4:e6:5b:37:90:
                    2e:40:dd:2b:8d:84:84:f0:31:01:a0:69:46:d9:42:
                    a1:0d:4b:45:93:a2:d1:c6:3b:66:45:c4:3c:13:69:
                    d7:a1:a1:7e:94:8d:a4:41:e9:24:2d:81:8c:13:0a:
                    39:8c:95:35:3f:83:6e:7e:38:22:98:77:6b:be:b0:
                    36:e9:6c:19:b5:60:40:a8:6a:84:a6:df:a9:79:03:
                    92:9d:ec:36:21:5d:b1:b5:5b:be:09:fb:5d:db:34:
                    92:39:f0:4f:9b:30:4d:e2:b5:6b:91:be:57:3c:43:
                    43:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7D:16:1F:26:DC:6E:FD:68:B9:8E:42:B8:18:49:B0:9C:79:F4:3D
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:62:5e:c4:c1:f2:80:17:1b:1b:23:1f:fb:81:17:f9:2e:2a:
         d9:86:15:34:6b:4e:46:0b:32:58:f0:eb:3d:88:78:43:fd:2f:
         92:61:74:0c:b6:03:79:c8:cd:57:01:63:7c:b5:9f:7b:a1:0e:
         05:a2:7c:72:b4:28:59:8d:da:39:9a:dc:bb:c4:1d:03:21:af:
         d5:ff:89:e9:b6:7d:ce:8f:95:f3:80:c5:21:05:b2:13:e1:37:
         e1:61:31:21:ee:88:3c:9c:d2:79:d8:a2:52:86:46:da:77:97:
         3a:a0:e2:0e:7f:27:99:0a:f3:59:a4:9c:65:5d:d1:40:30:2f:
         e8:22:1f:70:ec:50:1d:99:7a:8e:ec:cc:59:5d:d3:84:9b:6f:
         cf:e2:90:d8:9a:03:ed:df:59:36:2e:0f:af:a6:38:dd:09:6f:
         c4:d0:da:ba:50:51:9f:c0:5e:f3:5f:2f:9c:d4:00:35:4c:80:
         9b:52:c3:94:ca:65:34:4c:8a:f4:30:7b:a5:b1:72:88:31:ce:
         f6:c4:18:fb:d7:2e:15:87:9c:2b:97:7a:73:67:6b:85:2d:f2:
         2f:82:fe:74:cb:46:04:63:da:8f:52:cb:dd:82:a6:91:9b:d6:
         ff:ff:7f:3c:6b:da:8b:4f:f1:ea:93:b0:ca:17:b7:cd:cb:1c:
         93:50:32:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRqyhGnk1SPc8WmJsxaCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjdkMTYzNWI0NmIzYzIyNzRiMjg3NTA1YmJiZDdkOTE1
ZGNhZjUwHhcNMjYwMjA5MTIwMDUzWhcNMjYwMjEwMTIwMDUzWjAzMTEwLwYDVQQD
Eyg5NjdkMTYxZjI2ZGM2ZWZkNjhiOThlNDJiODE4NDliMDljNzlmNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrC+MkjWlCPzb9MvEYABOKjSoCTj
wXvjbH7bMNl8GlwAQyUyAByEwUJiJUVlVPvzEt7Dc5/ycPU2Doxgf4AzXoRbqO5F
hcxM2uq8gH20hC4dm1HMAHglZPngUt2tPs2H1WCrBFaRzIBgBFHH+i70fMkwjgWK
k/kftERUqYcI/iLvAjKoM3HUST3miVNzuaC/1OZbN5AuQN0rjYSE8DEBoGlG2UKh
DUtFk6LRxjtmRcQ8E2nXoaF+lI2kQekkLYGMEwo5jJU1P4NufjgimHdrvrA26WwZ
tWBAqGqEpt+peQOSnew2IV2xtVu+Cftd2zSSOfBPmzBN4rVrkb5XPEND0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ9Fh8m3G79aLmOQrgYSbCcefQ9MB8GA1UdIwQY
MBaAFNNn0WNbRrPCJ0sodQW7vX2RXcr1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQt
NjliOGQ2YjUzZThjLzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQtNjliOGQ2YjUzZThj
LzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmJexMHy
gBcbGyMf+4EX+S4q2YYVNGtORgsyWPDrPYh4Q/0vkmF0DLYDecjNVwFjfLWfe6EO
BaJ8crQoWY3aOZrcu8QdAyGv1f+J6bZ9zo+V84DFIQWyE+E34WExIe6IPJzSedii
UoZG2neXOqDiDn8nmQrzWaScZV3RQDAv6CIfcOxQHZl6juzMWV3ThJtvz+KQ2JoD
7d9ZNi4Pr6Y43QlvxNDaulBRn8Be818vnNQANUyAm1LDlMplNEyK9DB7pbFyiDHO
9sQY+9cuFYecK5d6c2drhS3yL4L+dMtGBGPaj1LL3YKmkZvW//9/PGvai0/x6pOw
yhe3zcsck1AyHQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:26 2026 by rpki-client