This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File:                     d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier:          A+H6fVUCaBpO+0hAQcaFtaybC+1PtkMsppIWzHvkfes=
Subject key identifier:   C4:64:10:97:BE:AB:7F:37:B6:4C:39:E1:9F:5E:4B:19:47:C3:08:3D
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer:       /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial:       019C41A18C6A04E6CF0079E180FEB6316859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number:          1733
Signing time:             Mon 09 Feb 2026 09:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:32 +0000
Files and hashes:         1: 2C6Ya6h31uul1QKjxJOYJtW0-Js.roa (hash: GfQhpseBFat/Xeckvhncromu6LqqPVkLS18vLbabiRM=)
                          2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: 8xCE0Q8424a1Q2JByyMc021aaiAaXyt7JhtaFrzWa78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:8c:6a:04:e6:cf:00:79:e1:80:fe:b6:31:68:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
        Validity
            Not Before: Feb  9 09:00:32 2026 GMT
            Not After : Feb 10 09:00:32 2026 GMT
        Subject: CN=c4641097beab7f37b64c39e19f5e4b1947c3083d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:2d:d4:e8:1a:d2:fb:c6:56:a8:38:aa:84:
                    d9:4b:6f:67:67:7b:0a:57:e1:57:e2:d5:74:90:9d:
                    b0:e5:2a:3a:86:f9:44:b3:19:b2:be:6f:74:1a:cf:
                    2c:e6:4b:15:8a:68:5c:44:50:06:0a:cc:cd:b4:df:
                    b2:7c:53:5d:1a:23:9c:9e:66:78:b4:8a:b1:d1:5a:
                    e0:e5:74:af:a2:c6:00:28:e2:67:df:1e:a4:51:37:
                    db:9f:8e:7f:29:01:33:d5:86:14:99:c3:d6:9d:a7:
                    26:4e:84:26:cd:db:97:cf:b1:49:87:df:28:7b:9d:
                    18:3e:90:56:1c:2e:33:49:7c:47:3e:74:bb:fe:61:
                    f4:79:f5:a5:8d:4a:5a:7f:d5:dc:83:34:10:0e:60:
                    57:0f:70:8a:2f:00:0c:c8:8c:75:b1:de:58:cb:e2:
                    55:e8:08:56:e7:36:09:9b:e0:1f:19:ba:59:aa:d1:
                    27:ed:c3:85:e3:7f:8d:95:2b:66:d9:71:24:0c:6f:
                    36:e9:bc:32:24:36:35:cd:b0:13:80:e1:55:56:ed:
                    ec:a0:85:cc:a9:4d:6a:4c:b9:98:50:e4:39:b2:e6:
                    c4:77:98:bb:ec:fe:f4:cc:4e:57:f5:3d:67:bc:72:
                    df:fd:51:64:f7:67:b8:34:e7:9e:c1:13:3e:c2:ea:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:64:10:97:BE:AB:7F:37:B6:4C:39:E1:9F:5E:4B:19:47:C3:08:3D
            X509v3 Authority Key Identifier:
                keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:21:4f:fc:43:c1:33:8a:dd:f6:88:ca:69:bf:47:17:0b:
         6b:4e:11:1a:c7:c1:f9:3c:b3:7a:e0:be:ee:e8:7e:a0:88:7f:
         5a:99:67:74:9e:a2:e3:ae:12:2c:d5:1d:c9:cf:b4:a7:25:f1:
         80:37:69:85:31:c4:68:a2:7e:34:49:15:1c:90:92:a5:e0:bc:
         7b:1c:6b:8c:97:00:84:df:35:05:63:06:14:e1:ec:66:31:6f:
         93:45:c5:1e:33:63:21:37:3b:35:87:72:6e:eb:2c:e9:bb:12:
         be:e0:56:79:78:09:b9:18:2a:44:a7:d7:72:30:00:a4:d7:10:
         c0:7a:b0:43:c4:61:61:df:7c:94:35:b8:9d:8e:cf:ab:ad:9f:
         d7:46:a0:31:57:c5:4c:e6:76:2e:af:96:3b:29:d3:f7:e0:c4:
         59:7f:91:4f:49:24:97:90:24:c4:7f:a1:e4:6d:29:cb:b4:58:
         0f:05:a1:b1:b5:09:15:7f:e0:e3:f3:4b:32:fb:12:1a:95:7c:
         cc:b1:21:bd:91:5e:d1:1f:f1:b0:2b:2f:af:bb:84:91:94:15:
         4a:26:b8:ea:f0:0c:b3:07:38:1b:45:ec:1d:f3:4b:f8:c7:56:
         30:68:a0:40:e6:04:1b:73:6e:1e:cc:6b:2c:3f:9e:fc:48:8a:
         58:a7:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:02 2026 by rpki-client