This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File:                     AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier:          CFPaalJc54AwyuQ4r32DJE5MtlKY6LQC7zYS1gfs/SU=
Subject key identifier:   E7:EF:F0:18:F5:7F:B9:CE:E2:B0:1F:E4:95:42:FB:5C:29:7A:79:A3
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer:       /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial:       019C427D68E49B3D47DC16FE89D3BB161BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number:          0D4C
Signing time:             Mon 09 Feb 2026 13:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:40 +0000
Files and hashes:         1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: 5Q6OpBHHYfLn/N9ISJmtKuJUimfJpDTT90YETfWENlA=)
                          2: OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa (hash: Tm9hWa2oiDIAZqLLnYyHl8n9xWir4VblcdnhJ8WlcHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:68:e4:9b:3d:47:dc:16:fe:89:d3:bb:16:1b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
        Validity
            Not Before: Feb  9 13:00:40 2026 GMT
            Not After : Feb 10 13:00:40 2026 GMT
        Subject: CN=e7eff018f57fb9cee2b01fe49542fb5c297a79a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:cd:bd:bd:15:e2:8c:8c:42:9a:53:06:21:
                    34:77:8d:8c:51:c5:43:97:79:30:15:e9:d7:68:96:
                    f9:00:b8:5e:60:be:00:b4:7d:6a:1f:66:33:b0:42:
                    c1:50:04:d9:0b:cd:52:8c:e5:f1:8b:8d:a0:fb:6b:
                    7a:c1:4c:d2:23:4a:73:88:3c:5e:9f:72:53:63:fd:
                    0e:32:f5:18:22:6f:1c:03:5c:a6:8a:50:16:86:86:
                    e5:29:7d:2b:d6:b5:14:b3:9f:77:a9:6e:b3:fb:a8:
                    4a:37:12:70:93:2d:e9:70:94:c9:c1:b2:01:c9:de:
                    41:77:cc:96:70:be:6b:5b:c8:ea:65:13:53:f5:3e:
                    79:91:5b:1d:47:a6:c2:b4:48:29:74:0e:65:f5:b0:
                    53:94:ed:8c:f5:34:2d:54:dc:03:a5:01:24:3a:4a:
                    82:3c:c4:21:8b:cd:7a:ae:91:08:bc:35:06:53:54:
                    82:70:81:ce:f4:ae:55:fd:48:46:b0:5d:c5:76:4a:
                    b4:16:a1:ea:ec:53:50:e7:36:b3:d4:15:ec:c7:d3:
                    23:4e:e1:ba:05:dd:a7:87:95:eb:2e:8d:80:59:62:
                    3f:2b:8f:d7:a4:95:bb:11:61:91:83:bd:38:8c:1f:
                    ab:35:3f:51:92:68:c7:d9:8e:d2:0a:fe:59:dc:65:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EF:F0:18:F5:7F:B9:CE:E2:B0:1F:E4:95:42:FB:5C:29:7A:79:A3
            X509v3 Authority Key Identifier:
                keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:c8:0d:c9:81:54:62:ac:55:11:21:e6:9f:40:60:3f:de:
         54:52:52:4e:7b:8e:01:57:8f:36:51:2e:e9:7b:1f:c7:33:7d:
         c1:47:39:d8:80:87:7a:45:95:9d:9f:19:85:1e:bc:6b:23:25:
         c5:4d:4e:ba:a0:25:33:4d:a1:eb:2b:ff:cf:a8:db:0c:28:17:
         55:a9:fb:40:f0:d4:36:29:38:03:13:78:0e:30:f1:58:9f:b8:
         10:0c:21:90:32:1b:d1:be:b4:10:1a:0c:0c:82:5f:20:a4:7f:
         5a:34:35:14:61:23:ba:3a:35:db:ab:f1:09:67:1f:90:16:0d:
         c4:e2:83:00:22:33:7f:45:d3:69:db:4b:f1:07:d7:e6:81:14:
         c3:04:46:17:98:5b:4e:be:07:00:ac:b8:33:6a:ae:a6:bc:09:
         7e:b9:04:4e:e7:97:b7:76:dc:f8:ba:2a:39:1a:15:c1:5a:7a:
         08:bf:4e:f4:8d:1b:59:84:78:1a:12:7e:bd:10:72:22:42:a9:
         ea:ab:8f:a6:40:18:1b:df:ee:a7:72:c0:9f:71:af:b1:dc:cb:
         f2:9b:b0:d0:aa:be:66:c3:f0:c8:7f:14:19:7d:2d:50:2d:3d:
         a1:da:6d:78:34:38:20:78:5c:c7:f8:da:89:62:ea:e8:48:a4:
         18:93:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:30 2026 by rpki-client