This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File:                     1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier:          C9Y8hr/5lKdh8y3DAqyJCm8NQd+aLfnBoCe+2V0nda0=
Subject key identifier:   07:14:8C:E7:D3:9B:94:61:3B:D7:69:F7:FE:10:86:D6:CC:B6:11:5B
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer:       /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial:       019C43FE6DEDCE63D1EF59BE4554A3967359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 20:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:13 +0000
Files and hashes:         1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: W8KmbtXr94trX+kISoF84UDz9jF6hXvb480HOIM94Eo=)
                          2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:6d:ed:ce:63:d1:ef:59:be:45:54:a3:96:73:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
        Validity
            Not Before: Feb  9 20:01:13 2026 GMT
            Not After : Feb 10 20:01:13 2026 GMT
        Subject: CN=07148ce7d39b94613bd769f7fe1086d6ccb6115b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:fb:20:99:fb:d2:17:72:ef:3f:92:3c:05:
                    06:1b:08:f8:e2:0c:e2:ac:bb:93:ad:b6:7a:6d:37:
                    0a:63:6b:8d:6d:84:4f:f1:34:53:c0:c0:15:0a:5d:
                    a4:68:17:73:57:70:29:7c:0b:c8:78:95:71:2d:62:
                    88:85:06:ed:b9:e8:3e:b0:43:19:fd:2b:eb:34:c6:
                    5d:78:83:4c:93:f8:e2:49:05:89:55:7c:40:16:14:
                    f2:8f:35:3c:84:9a:52:de:32:62:d4:c7:bf:45:83:
                    a4:43:73:a2:d5:e3:80:18:b4:61:62:7c:03:f9:8d:
                    22:84:ce:83:96:9c:92:01:c9:cf:bd:da:69:7c:61:
                    4c:8f:f5:19:fc:5e:54:10:bb:71:a9:12:9c:0f:06:
                    d5:a1:fd:dc:10:5b:d7:99:cc:ff:f0:d8:13:e8:8a:
                    0f:eb:0d:ad:29:5c:4c:77:9f:54:c8:e1:be:48:1d:
                    ab:93:9b:84:f2:29:10:b8:31:08:02:e2:0b:a3:7c:
                    96:de:e7:02:d7:9c:e3:ff:79:c8:37:78:06:f7:d7:
                    2c:82:c9:41:cd:58:68:3f:a8:a6:2a:63:6a:a3:6b:
                    aa:47:c4:7c:d2:98:64:eb:02:38:59:30:d1:8b:7c:
                    9f:08:3f:df:e1:5a:72:63:f3:b4:45:b1:4c:ce:1e:
                    cb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:14:8C:E7:D3:9B:94:61:3B:D7:69:F7:FE:10:86:D6:CC:B6:11:5B
            X509v3 Authority Key Identifier:
                keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4b:4e:09:f7:3f:05:86:46:92:17:74:81:7f:11:96:41:ea:
         5c:b9:4a:44:ab:da:0f:c2:71:7d:87:d4:4f:de:06:51:b6:c8:
         6b:94:5b:05:eb:2b:b3:95:c1:9b:d9:db:49:0c:12:86:23:5a:
         49:f8:02:91:b3:b3:f0:62:49:68:b1:0c:30:30:24:ed:14:50:
         68:1a:da:f4:ab:44:a1:50:ac:ff:2f:8a:b8:9f:99:f4:e2:c0:
         f1:fe:75:67:c9:0c:fb:48:9b:15:0c:1d:78:95:7a:2c:59:bf:
         38:06:00:42:98:17:69:fb:d9:44:4d:f9:c7:f7:0b:eb:b4:78:
         c0:61:76:51:24:3d:0b:18:fd:e2:3a:f9:b2:3a:00:35:1b:bd:
         ce:b0:4b:4b:cb:0c:0f:03:42:6d:05:89:8d:b2:19:57:7d:1f:
         ce:fe:ba:27:51:eb:81:96:3d:23:bd:fa:b8:01:eb:9d:0a:ba:
         84:e5:38:83:76:8f:1d:f7:e0:c8:41:ac:1d:30:22:d7:d2:70:
         ed:d5:93:dd:ec:42:c3:1f:d3:61:17:ee:5f:0e:0c:60:c9:b2:
         a9:6e:b0:20:cf:ce:25:5d:00:1b:cc:ef:65:bb:ce:11:b7:63:
         53:2a:df:15:12:d0:ff:df:43:78:4b:fe:2b:e7:4f:d8:f3:fa:
         12:ea:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:16 2026 by rpki-client