This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File:                     bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier:          +6V4f+r9HLUf58acy/rfNoiVWgGYcJ9zP+Ajjw/xGhc=
Subject key identifier:   74:37:1B:DB:22:6C:D5:5A:2D:4A:B8:10:B0:C0:15:0E:18:A9:33:1C
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer:       /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial:       019C424631C9B28C60AF1FCB808342B567C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 12:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:22 +0000
Files and hashes:         1: Q9m-lfpl94RgCrGyXlKa0BCxzmU.roa (hash: OrRe/AhPIl5+vGgEIK4ZmFPH1fmm0hGO63YBADXAmg8=)
                          2: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: NNLK7B5Cidv9Xouwcu6vOoiKLY9elAj6weqeOSNqkUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:31:c9:b2:8c:60:af:1f:cb:80:83:42:b5:67:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
        Validity
            Not Before: Feb  9 12:00:22 2026 GMT
            Not After : Feb 10 12:00:22 2026 GMT
        Subject: CN=74371bdb226cd55a2d4ab810b0c0150e18a9331c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2a:5c:38:37:92:7f:76:20:b3:aa:0a:43:ff:
                    95:31:db:ff:a1:0b:b5:a5:5d:55:49:7a:40:2c:b0:
                    ed:ee:96:d0:ae:8a:a7:39:fd:da:10:47:79:27:74:
                    ee:72:cd:57:fc:33:72:9d:b1:0a:b3:d2:2e:63:3e:
                    54:e4:3a:76:66:ec:bb:b5:2d:7e:20:1a:5f:e2:02:
                    2b:7d:47:f2:19:b9:67:b8:80:d0:11:fc:03:47:68:
                    f2:95:bb:3c:d1:2a:7a:f5:50:d2:65:66:e2:5d:4c:
                    f5:2c:ab:24:ef:de:0e:21:4b:36:4e:1c:38:49:82:
                    3e:b7:e5:fa:fc:69:6f:1c:7c:2d:a7:64:36:01:29:
                    b0:3c:09:06:18:f9:e8:e8:a3:40:99:75:c1:d0:fc:
                    27:ca:21:b5:92:3f:5f:8a:48:14:ef:61:5a:86:2f:
                    79:d1:01:2d:f4:8e:11:44:1b:be:97:d4:ba:f6:11:
                    12:4e:b9:53:54:ee:e3:f7:4f:d0:c9:c2:3d:f1:30:
                    fd:b7:32:f5:d9:53:65:d3:0e:c0:a2:5d:91:56:1b:
                    cc:4f:74:e3:f9:ad:b4:75:d1:6f:79:db:11:47:be:
                    94:1e:99:32:0e:ec:8b:54:98:59:2d:1a:0b:73:f3:
                    06:22:95:af:c9:2c:33:1d:72:af:54:1e:21:41:94:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:37:1B:DB:22:6C:D5:5A:2D:4A:B8:10:B0:C0:15:0E:18:A9:33:1C
            X509v3 Authority Key Identifier:
                keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:9a:7f:73:1f:f1:9b:76:ca:10:39:06:86:f9:24:be:fc:
         bf:ad:db:b5:6f:19:48:c6:49:3f:91:95:5d:48:bc:6d:2c:ec:
         4b:2a:9e:f1:43:99:14:ad:7f:bc:a2:07:39:6d:7c:7f:dc:3f:
         3b:68:ec:e1:04:5b:e1:af:32:18:c1:6d:d9:a3:bf:9a:2a:23:
         9e:3d:53:4f:84:a4:3e:25:6c:04:9f:4a:d3:01:28:cf:4f:66:
         0e:8b:82:da:3a:e2:10:5d:d2:5a:87:1d:4e:ae:f5:9f:33:1e:
         90:95:20:01:d1:20:99:54:90:3d:89:1f:2d:4a:34:44:f3:ba:
         9c:5a:58:15:64:42:1c:dd:51:fb:89:fb:89:cc:94:38:db:1b:
         8b:e2:fe:34:5f:84:a3:96:b8:8e:7b:f9:db:bd:29:0c:22:5b:
         b2:99:70:84:d3:e0:50:e6:d1:80:cf:d1:ba:a9:3c:fe:6f:70:
         71:f6:ab:a5:59:2f:99:b6:29:a5:df:e0:4e:fb:09:c3:44:24:
         d4:70:59:df:53:15:8a:76:88:a5:7d:4b:bd:61:65:6d:18:79:
         23:4d:4c:9d:e1:ac:36:09:86:63:c7:9e:6d:d8:82:32:6d:21:
         98:77:60:e8:4d:aa:66:df:54:7d:b0:39:68:05:24:f3:ce:7a:
         f0:31:f0:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRjHJsoxgrx/LgINCtWfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODQ0YmQ2MmNiZmI1YWRjY2ZiNGRjMTZlY2EyM2NiNWM5
ZGRlYjYwHhcNMjYwMjA5MTIwMDIyWhcNMjYwMjEwMTIwMDIyWjAzMTEwLwYDVQQD
Eyg3NDM3MWJkYjIyNmNkNTVhMmQ0YWI4MTBiMGMwMTUwZTE4YTkzMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SpcODeSf3Ygs6oKQ/+VMdv/oQu1
pV1VSXpALLDt7pbQroqnOf3aEEd5J3Tucs1X/DNynbEKs9IuYz5U5Dp2Zuy7tS1+
IBpf4gIrfUfyGblnuIDQEfwDR2jylbs80Sp69VDSZWbiXUz1LKsk794OIUs2Thw4
SYI+t+X6/GlvHHwtp2Q2ASmwPAkGGPno6KNAmXXB0PwnyiG1kj9fikgU72Fahi95
0QEt9I4RRBu+l9S69hESTrlTVO7j90/QycI98TD9tzL12VNl0w7Aol2RVhvMT3Tj
+a20ddFvedsRR76UHpkyDuyLVJhZLRoLc/MGIpWvySwzHXKvVB4hQZR8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQ3G9sibNVaLUq4ELDAFQ4YqTMcMB8GA1UdIwQY
MBaAFGyES9Ysv7WtzPtNwW7KI8tcnd62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjIt
NWM5OWI2ODNkYjBkLzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjItNWM5OWI2ODNkYjBk
LzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8Gaf3Mf
8Zt2yhA5Bob5JL78v63btW8ZSMZJP5GVXUi8bSzsSyqe8UOZFK1/vKIHOW18f9w/
O2js4QRb4a8yGMFt2aO/miojnj1TT4SkPiVsBJ9K0wEoz09mDouC2jriEF3SWocd
Tq71nzMekJUgAdEgmVSQPYkfLUo0RPO6nFpYFWRCHN1R+4n7icyUONsbi+L+NF+E
o5a4jnv5270pDCJbsplwhNPgUObRgM/Ruqk8/m9wcfarpVkvmbYppd/gTvsJw0Qk
1HBZ31MVinaIpX1LvWFlbRh5I01MneGsNgmGY8eebdiCMm0hmHdg6E2qZt9UfbA5
aAUk88568DHwBg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:34 2026 by rpki-client