This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File:                     l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier:          ODrHBZi5SnJIm66R1pxY1cw4QR0V/H/WKOFdJ35s5Ms=
Subject key identifier:   08:94:69:3A:D5:2E:37:2B:46:39:C9:49:FA:5A:B7:A0:A0:6C:B8:65
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer:       /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial:       019C41D8BCE1B4918640DBBA4F86EAC8BD35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 10:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:48 +0000
Files and hashes:         1: BSE98FzK5j337SGXcJiqoMH_kF4.roa (hash: xTUQIPRKlSvAwXtZUqS4ipgxLNyVd2NotYhIujM5Dgk=)
                          2: IYDcWXVOin0X4eF-OQ1Vti4U54Q.roa (hash: nqLHyjeiC0RivLdIbTbmn4gjwwFAxF1g54vATpHiW9s=)
                          3: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: a8YTEW3TyZFqlRNaTs9rWn62MBGY1lauo+i42/U4mQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:bc:e1:b4:91:86:40:db:ba:4f:86:ea:c8:bd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
        Validity
            Not Before: Feb  9 10:00:48 2026 GMT
            Not After : Feb 10 10:00:48 2026 GMT
        Subject: CN=0894693ad52e372b4639c949fa5ab7a0a06cb865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:d8:46:19:ba:e6:32:61:a6:a2:fc:19:f5:
                    00:95:30:31:7d:e8:c6:e1:f9:92:a4:8f:ec:e9:35:
                    22:49:78:b1:ae:19:84:33:14:de:08:7a:01:63:f7:
                    ae:94:9e:f3:86:47:6b:94:6c:68:c3:0e:29:92:c3:
                    55:f3:f5:d9:50:b2:b9:b3:65:9e:df:89:c3:11:ed:
                    fd:f9:74:a8:19:99:c7:82:f4:fe:d8:a4:36:cc:00:
                    03:de:4f:19:06:a5:fe:e3:c8:ec:b8:cb:7f:49:94:
                    ef:e4:1a:f1:24:6c:34:43:85:a8:83:51:8a:d9:d4:
                    ed:8c:cc:cf:4f:06:c2:12:c1:8d:f2:b1:c4:d2:2e:
                    ca:49:74:73:ae:ac:68:4f:f2:69:82:f3:79:76:41:
                    52:0e:24:d6:b9:28:70:a9:86:ea:f0:61:43:d7:b8:
                    16:bd:b9:c5:9f:e8:d3:ec:52:21:62:8c:37:21:8c:
                    47:26:db:e2:6d:fd:31:0c:10:fb:ae:cf:c8:b9:5e:
                    9c:57:22:16:93:95:d9:6d:5b:80:69:e5:d9:2e:32:
                    a6:1c:a5:55:38:37:1b:d9:fc:0e:9f:aa:72:86:ff:
                    56:18:c2:0a:e1:18:9f:d0:6a:55:c9:e5:b9:6d:5d:
                    3c:9f:1d:89:85:52:fd:f1:27:17:e0:dc:ac:1f:22:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:94:69:3A:D5:2E:37:2B:46:39:C9:49:FA:5A:B7:A0:A0:6C:B8:65
            X509v3 Authority Key Identifier:
                keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:0d:51:89:9a:5c:5c:bd:f6:46:ef:f5:7f:49:a8:98:60:
         47:78:70:9e:eb:22:99:a0:27:97:ee:49:82:87:8f:7c:1c:8b:
         14:04:0c:b3:f1:12:ea:06:bb:08:21:0b:8d:b1:cc:4a:de:32:
         ee:22:9d:8d:7c:cc:b3:34:51:3f:c4:aa:7f:f4:9d:18:89:d0:
         0f:83:35:a0:58:7c:a7:38:73:16:a8:cf:52:bc:37:be:d2:4d:
         9f:c4:97:10:a8:5a:9e:f7:3e:15:29:9f:f3:c0:f5:2c:a7:eb:
         3b:cb:8e:3e:25:3e:0d:94:95:f2:eb:3d:2a:b0:3b:fb:70:bc:
         5d:f8:78:70:34:08:ec:f6:ab:1b:3f:11:48:25:d3:86:fb:6c:
         46:74:49:90:09:47:d0:4c:5c:93:8b:74:69:42:b3:42:f1:53:
         01:6c:8e:2d:3f:31:60:4c:6e:fd:ad:dc:a9:50:12:ca:6e:8e:
         3c:03:ea:25:4c:b9:74:e2:35:7d:dc:ae:b3:d5:c7:74:ac:32:
         f5:1b:95:7f:44:9d:ce:75:0d:c3:89:14:37:48:cc:db:a3:3b:
         73:f0:a3:ab:b7:4c:6e:a4:df:1d:0c:8a:19:0c:f8:ea:bd:c1:
         ec:ae:3f:4d:a4:8c:0c:a5:b3:fa:0a:ec:71:45:da:ea:a9:97:
         1b:3d:a0:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2LzhtJGGQNu6T4bqyL01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx
YjM2MmYwHhcNMjYwMjA5MTAwMDQ4WhcNMjYwMjEwMTAwMDQ4WjAzMTEwLwYDVQQD
EygwODk0NjkzYWQ1MmUzNzJiNDYzOWM5NDlmYTVhYjdhMGEwNmNiODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1bYRhm65jJhpqL8GfUAlTAxfejG
4fmSpI/s6TUiSXixrhmEMxTeCHoBY/eulJ7zhkdrlGxoww4pksNV8/XZULK5s2We
34nDEe39+XSoGZnHgvT+2KQ2zAAD3k8ZBqX+48jsuMt/SZTv5BrxJGw0Q4Wog1GK
2dTtjMzPTwbCEsGN8rHE0i7KSXRzrqxoT/JpgvN5dkFSDiTWuShwqYbq8GFD17gW
vbnFn+jT7FIhYow3IYxHJtvibf0xDBD7rs/IuV6cVyIWk5XZbVuAaeXZLjKmHKVV
ODcb2fwOn6pyhv9WGMIK4Rif0GpVyeW5bV08nx2JhVL98ScX4NysHyLxhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiUaTrVLjcrRjnJSfpat6CgbLhlMB8GA1UdIwQY
MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt
NjIzOTczM2M2MTg0LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0
LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpANUYma
XFy99kbv9X9JqJhgR3hwnusimaAnl+5JgoePfByLFAQMs/ES6ga7CCELjbHMSt4y
7iKdjXzMszRRP8Sqf/SdGInQD4M1oFh8pzhzFqjPUrw3vtJNn8SXEKhanvc+FSmf
88D1LKfrO8uOPiU+DZSV8us9KrA7+3C8Xfh4cDQI7ParGz8RSCXThvtsRnRJkAlH
0Exck4t0aUKzQvFTAWyOLT8xYExu/a3cqVASym6OPAPqJUy5dOI1fdyus9XHdKwy
9RuVf0SdznUNw4kUN0jM26M7c/Cjq7dMbqTfHQyKGQz46r3B7K4/TaSMDKWz+grs
cUXa6qmXGz2gtQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:06 2026 by rpki-client