This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
File:                     MFxE6MlhoUUNCqshLw3scX0d77Y.mft (raw, json)
Hash identifier:          CETSlUBqWBcZBPLP1XtnxxOH9lGnGMMA8Vp1XlT4kUo=
Subject key identifier:   82:DF:D4:C0:3A:05:4B:3D:B4:5C:38:41:52:76:3E:36:A1:F3:15:FD
Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
Certificate issuer:       /CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Certificate serial:       019C435956DAEA3941E61E02CA7C717DC2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:54 +0000
Files and hashes:         1: 4s2LfJgezExAwyLPh90eBZdMtsA.roa (hash: QROHTNbuhK/OLqAPPL7ZK974ElG4KehFHzzkBDXusl4=)
                          2: MFxE6MlhoUUNCqshLw3scX0d77Y.crl (hash: 1RYIiCmfAklgMroU2yCBh/QXXFYzmXttqiMWoNkloh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:56:da:ea:39:41:e6:1e:02:ca:7c:71:7d:c2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6
        Validity
            Not Before: Feb  9 17:00:54 2026 GMT
            Not After : Feb 10 17:00:54 2026 GMT
        Subject: CN=82dfd4c03a054b3db45c384152763e36a1f315fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:ae:d5:03:14:86:a4:3b:96:3f:3c:d1:da:
                    3d:6f:44:25:f2:44:9c:25:9a:8b:14:86:84:7c:fb:
                    d8:49:29:a3:60:47:ae:25:6c:1a:9c:69:50:b8:79:
                    26:00:0f:fa:0a:25:79:44:2f:56:46:eb:4e:f1:cc:
                    2c:ae:df:79:fa:45:a1:09:ee:de:7c:d9:02:9e:e5:
                    1a:b0:ad:c4:50:ba:68:1f:59:41:a9:3a:7d:db:2e:
                    54:4f:0d:ca:68:7c:19:a6:6e:33:16:2a:7d:ef:eb:
                    a7:84:8e:7d:b5:46:0f:21:00:28:94:b8:81:15:83:
                    a9:aa:67:8d:4a:12:88:b4:80:62:f8:4c:c7:26:8d:
                    c6:02:82:1b:e4:24:b3:9e:a7:1b:31:20:b9:76:4e:
                    10:c0:76:00:e1:0e:80:5a:9d:4a:95:6e:47:54:a2:
                    24:cc:9e:77:76:67:af:b1:48:c4:96:7d:79:e7:b8:
                    14:5a:79:b4:3a:64:22:f9:45:2a:cb:4a:da:d9:bd:
                    34:5f:6f:09:64:ae:a2:90:4c:3b:e6:f6:db:69:71:
                    08:7e:b8:9d:a7:d5:d9:fe:ad:b6:18:29:2c:58:95:
                    60:21:1f:37:9d:c7:4f:78:bd:32:5b:67:b6:53:e3:
                    63:ab:fb:e8:cf:04:08:27:33:80:68:40:ae:2b:0c:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DF:D4:C0:3A:05:4B:3D:B4:5C:38:41:52:76:3E:36:A1:F3:15:FD
            X509v3 Authority Key Identifier:
                keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:84:22:18:40:7b:6c:6a:65:46:73:08:e7:f1:11:5f:72:
         1e:ec:66:35:82:7f:b0:6e:f8:ba:de:e0:ea:2a:ea:15:14:0d:
         40:82:1a:9c:b5:b9:2f:75:a2:11:e5:ad:ab:cc:e5:6a:e6:1e:
         74:c4:9b:70:cd:9b:f9:61:52:c0:76:20:59:28:af:66:42:57:
         10:2b:a8:e8:06:75:7b:3b:e7:da:d4:2b:5a:2c:59:34:98:bb:
         5e:91:db:f3:52:a5:bf:0d:42:97:81:e7:83:91:94:6d:8b:60:
         59:0e:88:5e:e9:31:79:eb:d6:24:10:dc:25:89:e9:a8:46:b5:
         e7:34:bd:29:e7:dd:25:9c:e3:6b:0e:19:c4:6e:a9:e8:35:03:
         67:db:78:fb:e4:ad:7a:07:67:81:fc:4c:62:92:bb:cf:69:09:
         d4:f3:81:44:77:f3:ea:bb:bd:fc:11:61:11:66:f2:75:fe:8b:
         bb:d3:05:df:a2:9c:90:d9:5b:90:97:63:77:05:f9:90:ad:e3:
         37:62:09:76:9f:70:81:0e:71:c9:9f:f2:44:8c:1c:b5:d5:c3:
         df:04:9e:43:b9:5e:d2:54:f3:ad:10:2b:d8:d3:b2:bf:17:80:
         ec:07:fb:35:84:89:6f:7c:6d:7b:5b:08:7f:cd:00:53:10:a4:
         bb:70:f7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:42 2026 by rpki-client