This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File:                     txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier:          VkvKwq6lPiyORMLCnR36FXCtvn6vfKNL2nIputH4qk4=
Subject key identifier:   1B:6D:25:CB:18:AF:5F:46:39:04:45:86:5C:7E:A3:DF:69:FF:08:97
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer:       /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial:       019C43FE05B8AE750F58684295218A6DA000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 20:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:46 +0000
Files and hashes:         1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
                          2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: FAyvkfLpxJD5sitUMFJUfVjQS6EXMy0zBkRF7fJt3r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:05:b8:ae:75:0f:58:68:42:95:21:8a:6d:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
        Validity
            Not Before: Feb  9 20:00:46 2026 GMT
            Not After : Feb 10 20:00:46 2026 GMT
        Subject: CN=1b6d25cb18af5f46390445865c7ea3df69ff0897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:20:87:02:dc:b7:72:70:e4:25:5f:b6:62:
                    41:87:03:72:4b:8a:2f:f7:79:a7:55:33:ad:ad:c2:
                    6b:59:97:5c:0c:dd:08:a0:09:43:9c:36:1d:27:8f:
                    2e:d4:27:1a:77:9c:17:42:8f:93:9b:6e:54:d4:e7:
                    04:46:7d:e6:9c:22:ae:35:80:95:da:48:bb:05:e7:
                    96:5d:13:1b:34:2f:b3:41:85:17:98:1c:5c:81:33:
                    f1:34:b2:64:3a:15:37:d7:8e:e5:50:00:35:5d:5f:
                    be:a5:c6:57:b3:46:40:7e:36:83:06:98:e0:fe:46:
                    4b:f5:4b:7f:9b:03:75:f2:41:e8:bc:34:98:2e:8d:
                    cd:db:5e:80:eb:d6:02:5a:d7:9b:c9:d4:35:42:fc:
                    ea:91:7c:1b:04:2e:22:30:75:29:ad:1b:3a:5d:8e:
                    30:28:d6:fb:ec:b6:29:2a:6f:1e:11:74:04:b7:0c:
                    39:63:f1:73:80:60:bf:04:aa:d4:9f:10:94:3b:25:
                    a1:07:ed:2e:ad:60:81:23:dd:d7:ff:42:a0:73:37:
                    52:a2:c7:9b:1f:f0:2e:98:d9:3c:ae:9a:b3:f7:db:
                    2f:8e:44:62:02:9a:62:8a:6e:81:ff:70:a1:f3:82:
                    45:29:7e:be:c9:db:52:63:76:3d:12:9f:17:4a:59:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6D:25:CB:18:AF:5F:46:39:04:45:86:5C:7E:A3:DF:69:FF:08:97
            X509v3 Authority Key Identifier:
                keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:72:4d:05:8f:6a:52:36:26:d8:2c:20:69:e7:80:78:8b:1e:
         46:52:24:86:7f:57:7c:1d:2c:58:d1:f5:f1:67:b3:da:35:ad:
         cb:d3:da:f8:77:c5:24:89:f4:c9:8c:37:0c:c3:f7:21:01:f5:
         97:fd:2e:e4:6c:aa:7d:32:c1:e1:b1:81:cc:ad:86:ec:cd:f2:
         d5:70:b9:21:20:c0:9b:36:8d:7e:69:f6:31:6c:c1:2b:2b:3b:
         91:32:a3:1e:ce:b0:7a:67:80:4e:69:bc:e1:ba:9f:c4:de:66:
         c2:ec:db:d0:f8:02:44:1c:b4:27:be:32:35:f8:57:77:7c:ab:
         e7:7e:82:ea:15:f8:d9:f6:78:b4:37:e7:b6:d4:7e:e5:96:eb:
         72:02:94:07:27:ee:2b:78:ae:16:81:59:4b:6a:47:f9:1d:d5:
         71:df:31:47:43:58:1c:47:cf:aa:96:3c:e5:5b:e3:f7:48:8d:
         08:b4:6e:2c:67:67:b7:b4:97:e9:43:12:ac:24:e8:ec:f9:d9:
         bc:fe:2e:30:93:49:03:23:e8:1f:68:92:8d:7b:6a:63:22:64:
         19:c2:03:0a:ae:87:c2:71:99:d2:4d:9b:96:18:bb:65:fa:93:
         d6:06:64:83:c4:85:cd:e8:cd:53:c2:bb:b6:3b:3b:6e:10:f1:
         9e:08:71:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/gW4rnUPWGhClSGKbaAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1
MmI0ZTcwHhcNMjYwMjA5MjAwMDQ2WhcNMjYwMjEwMjAwMDQ2WjAzMTEwLwYDVQQD
EygxYjZkMjVjYjE4YWY1ZjQ2MzkwNDQ1ODY1YzdlYTNkZjY5ZmYwODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EwghwLct3Jw5CVftmJBhwNyS4ov
93mnVTOtrcJrWZdcDN0IoAlDnDYdJ48u1Ccad5wXQo+Tm25U1OcERn3mnCKuNYCV
2ki7BeeWXRMbNC+zQYUXmBxcgTPxNLJkOhU3147lUAA1XV++pcZXs0ZAfjaDBpjg
/kZL9Ut/mwN18kHovDSYLo3N216A69YCWtebydQ1QvzqkXwbBC4iMHUprRs6XY4w
KNb77LYpKm8eEXQEtww5Y/FzgGC/BKrUnxCUOyWhB+0urWCBI93X/0KgczdSoseb
H/AumNk8rpqz99svjkRiAppiim6B/3Ch84JFKX6+ydtSY3Y9Ep8XSlm9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBttJcsYr19GOQRFhlx+o99p/wiXMB8GA1UdIwQY
MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt
MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh
LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3JNBY9q
UjYm2CwgaeeAeIseRlIkhn9XfB0sWNH18Wez2jWty9Pa+HfFJIn0yYw3DMP3IQH1
l/0u5GyqfTLB4bGBzK2G7M3y1XC5ISDAmzaNfmn2MWzBKys7kTKjHs6wemeATmm8
4bqfxN5mwuzb0PgCRBy0J74yNfhXd3yr536C6hX42fZ4tDfnttR+5ZbrcgKUByfu
K3iuFoFZS2pH+R3Vcd8xR0NYHEfPqpY85Vvj90iNCLRuLGdnt7SX6UMSrCTo7PnZ
vP4uMJNJAyPoH2iSjXtqYyJkGcIDCq6HwnGZ0k2blhi7ZfqT1gZkg8SFzejNU8K7
tjs7bhDxnghxZA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:16 2026 by rpki-client