This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File:                     448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier:          CeC7MPeiNqj5LHO5NwaHo6RXXdbiSBz3lJVmpJG87+Y=
Subject key identifier:   F9:86:48:BC:A3:03:4D:C0:25:8E:78:D7:95:EF:03:EC:8B:53:D9:CA
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer:       /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial:       019C43FE1A80D39E848AB9FE02DA4CEE4842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:52 +0000
Files and hashes:         1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: 8Kney99TrEXHwv5YDx1/suADqCuvlB+/pK+1M/X+86M=)
                          2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:1a:80:d3:9e:84:8a:b9:fe:02:da:4c:ee:48:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
        Validity
            Not Before: Feb  9 20:00:52 2026 GMT
            Not After : Feb 10 20:00:52 2026 GMT
        Subject: CN=f98648bca3034dc0258e78d795ef03ec8b53d9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:fd:0f:28:3d:ec:19:82:06:48:f0:62:38:
                    59:50:67:6a:28:fe:05:62:80:bb:7b:b2:0e:e7:44:
                    e2:af:69:31:2e:53:bd:90:40:2c:c4:50:8e:78:f2:
                    57:53:9b:27:1d:04:83:40:76:7d:78:3a:26:b3:c8:
                    d6:39:c0:65:d7:8f:11:5a:7d:03:cf:c5:f7:31:e0:
                    2e:61:c1:df:f0:02:0c:0e:63:27:f1:03:bf:d8:ca:
                    a5:7e:14:5f:59:18:b6:d3:ea:84:43:66:e0:a2:0c:
                    26:5d:c6:da:97:2b:1f:7c:bb:4c:3d:b0:72:4b:bb:
                    20:12:d4:e3:cb:2d:a4:28:cb:0f:59:a2:9b:e8:2e:
                    3d:26:ba:95:04:12:ae:50:1b:a6:13:0b:b6:3a:ff:
                    20:71:06:39:bb:e1:2e:b4:2c:e7:87:9b:81:83:40:
                    52:24:2e:56:ed:96:66:49:04:ad:ea:f7:80:47:69:
                    d5:86:34:c0:91:35:8c:29:48:92:0b:79:07:dd:84:
                    bd:48:16:f6:9d:9b:cf:5c:72:24:2b:13:bd:f0:0f:
                    3e:f4:62:35:e3:99:59:ab:ea:c2:8b:92:45:31:4f:
                    31:4c:ac:7c:59:1c:f8:7e:1e:26:9a:ee:dd:c2:f8:
                    48:00:ce:96:ce:d4:83:69:7f:ee:0d:8c:4d:a5:f8:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:86:48:BC:A3:03:4D:C0:25:8E:78:D7:95:EF:03:EC:8B:53:D9:CA
            X509v3 Authority Key Identifier:
                keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:91:2d:09:32:a2:67:77:88:9b:e3:ef:e7:8f:60:48:47:18:
         63:f9:1a:74:16:c6:83:a7:f5:d9:8e:9f:d9:75:bb:95:ee:44:
         d2:b2:fe:e2:26:29:39:5a:22:97:04:ab:12:1b:33:8a:e6:1a:
         43:74:52:b2:46:d5:34:6f:d6:d1:f1:4e:d6:64:da:ea:19:be:
         14:58:5c:4d:b4:4b:d0:48:fc:34:8e:1f:90:c8:3a:ec:05:46:
         f0:8f:3f:55:6f:24:d2:2a:ab:c2:0e:56:c4:f4:7d:09:d1:e2:
         3d:1c:06:4b:ec:8e:26:9b:ce:3b:88:44:9a:a8:f8:08:35:34:
         03:0c:65:28:bc:aa:9f:a8:28:52:fa:49:d6:9e:20:3d:39:24:
         7a:6d:fd:00:5d:ba:95:3f:c9:bd:84:08:22:0d:44:37:d0:d1:
         a0:2d:a6:88:5b:7a:8a:73:91:1d:ce:04:db:ee:95:d6:3f:ca:
         c4:31:ea:12:c9:7a:33:b2:35:61:5a:ae:31:c5:10:2a:96:53:
         4f:a9:39:03:3c:7c:36:7e:ba:c7:cd:2d:b5:a5:dd:a1:40:98:
         1c:5e:87:04:db:57:37:6e:ff:b2:be:61:17:41:fd:1c:41:e1:
         ed:56:87:01:33:18:bf:74:c6:0a:b0:7b:fe:2f:fe:ee:80:eb:
         32:a8:ed:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/hqA056Eirn+AtpM7khCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOGYxMGEyYzc5MmQwZDM2NTY3OGEzNmNhN2Y3ZjE0MDlj
YTNhZmQwHhcNMjYwMjA5MjAwMDUyWhcNMjYwMjEwMjAwMDUyWjAzMTEwLwYDVQQD
EyhmOTg2NDhiY2EzMDM0ZGMwMjU4ZTc4ZDc5NWVmMDNlYzhiNTNkOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFT9Dyg97BmCBkjwYjhZUGdqKP4F
YoC7e7IO50Tir2kxLlO9kEAsxFCOePJXU5snHQSDQHZ9eDoms8jWOcBl148RWn0D
z8X3MeAuYcHf8AIMDmMn8QO/2MqlfhRfWRi20+qEQ2bgogwmXcbalysffLtMPbBy
S7sgEtTjyy2kKMsPWaKb6C49JrqVBBKuUBumEwu2Ov8gcQY5u+EutCznh5uBg0BS
JC5W7ZZmSQSt6veAR2nVhjTAkTWMKUiSC3kH3YS9SBb2nZvPXHIkKxO98A8+9GI1
45lZq+rCi5JFMU8xTKx8WRz4fh4mmu7dwvhIAM6WztSDaX/uDYxNpfiHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmGSLyjA03AJY5415XvA+yLU9nKMB8GA1UdIwQY
MBaAFOOPEKLHktDTZWeKNsp/fxQJyjr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjct
ODM1M2FhNDBiYWViLzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjctODM1M2FhNDBiYWVi
LzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZEtCTKi
Z3eIm+Pv549gSEcYY/kadBbGg6f12Y6f2XW7le5E0rL+4iYpOVoilwSrEhsziuYa
Q3RSskbVNG/W0fFO1mTa6hm+FFhcTbRL0Ej8NI4fkMg67AVG8I8/VW8k0iqrwg5W
xPR9CdHiPRwGS+yOJpvOO4hEmqj4CDU0AwxlKLyqn6goUvpJ1p4gPTkkem39AF26
lT/JvYQIIg1EN9DRoC2miFt6inORHc4E2+6V1j/KxDHqEsl6M7I1YVquMcUQKpZT
T6k5Azx8Nn66x80ttaXdoUCYHF6HBNtXN27/sr5hF0H9HEHh7VaHATMYv3TGCrB7
/i/+7oDrMqjtGw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:51 2026 by rpki-client