This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File:                     slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier:          ce97pHcc/7dw0JLyPH/MxmGPuujROZNQR34IBbtIhNg=
Subject key identifier:   AE:B2:0E:E5:4A:FA:A1:B0:B4:C4:7A:FD:E2:2B:2F:B2:F1:C2:38:25
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer:       /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial:       019C420FB930119DC7064C5498905ACD0623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:52 +0000
Files and hashes:         1: 2MEGX0xXq-CS52TZ2rRO2bOlBks.roa (hash: /HvTwpT0Q11rSBUmASk+8crSrENE7H5BgnIrEvjimdw=)
                          2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: q0jgYuaKViOiO1+9PhKzEQHcOlnmmrHsPLvWjeYAySA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b9:30:11:9d:c7:06:4c:54:98:90:5a:cd:06:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
        Validity
            Not Before: Feb  9 11:00:52 2026 GMT
            Not After : Feb 10 11:00:52 2026 GMT
        Subject: CN=aeb20ee54afaa1b0b4c47afde22b2fb2f1c23825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:f7:f2:2a:49:9b:7c:ad:c6:40:77:ae:af:
                    cd:e9:ab:80:9b:d9:c2:fe:09:4b:a5:75:ba:46:6d:
                    f1:b4:4b:4b:df:f9:05:0f:87:05:a6:ff:2b:d1:95:
                    68:37:fc:9b:a0:1a:ca:a0:9b:aa:7d:fe:72:cc:17:
                    5a:e1:cf:ad:50:35:db:c2:8a:82:f0:1e:99:88:e9:
                    63:f4:c2:5f:35:81:63:1d:fd:01:ba:f9:33:9e:f1:
                    40:67:65:81:73:cc:ff:a4:3d:8b:0a:1a:1f:aa:1a:
                    6a:14:8d:98:09:e6:eb:af:fa:54:86:d0:62:54:ef:
                    9c:f8:4a:9b:16:a4:b4:1c:7d:1e:1d:b1:4e:fa:b0:
                    2f:88:a9:c5:45:ba:20:eb:da:f9:c0:c0:61:c7:e7:
                    10:34:c7:9d:59:11:b2:50:0a:5b:22:3c:07:8f:d8:
                    60:b3:8d:a0:7d:9f:c7:bc:bb:97:09:66:2d:6a:b8:
                    fa:c6:b0:99:58:3d:65:04:58:86:82:73:a1:f8:0d:
                    27:93:54:9f:ea:43:c1:7b:59:11:7b:71:be:a6:9d:
                    a2:bf:d6:cb:fa:60:5b:68:4c:53:ed:4b:f9:18:9c:
                    12:64:09:7b:d7:51:a0:74:93:0b:3e:d0:50:79:69:
                    33:d4:ef:d5:e0:65:f8:0f:2b:69:27:89:63:ca:c8:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B2:0E:E5:4A:FA:A1:B0:B4:C4:7A:FD:E2:2B:2F:B2:F1:C2:38:25
            X509v3 Authority Key Identifier:
                keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:0f:be:9c:0d:c6:28:7d:a1:b9:70:12:6e:10:16:ca:c6:e2:
         a5:24:39:68:22:f4:8a:5f:58:65:90:88:e9:da:91:38:fb:86:
         08:00:26:45:f2:4b:e8:26:b6:b9:00:4a:e1:97:85:c9:1e:d8:
         e0:86:22:40:15:31:d4:0d:a1:f0:76:48:74:50:c3:78:0e:2b:
         ed:d9:f5:62:4d:af:59:8c:76:87:3f:34:0b:54:68:17:93:d7:
         ed:c9:65:4c:b1:67:c0:3a:3d:1a:cf:b1:8e:dd:a3:96:49:ea:
         fb:6e:e5:20:fd:71:93:50:cc:33:9d:73:7d:b9:5f:f3:22:c7:
         fa:d3:00:60:11:c7:e4:c6:7f:56:9a:89:89:bc:94:b4:8e:08:
         4c:c0:1f:47:be:1e:f0:d8:fd:cc:2a:8c:49:a5:db:93:54:d8:
         18:54:ad:94:9e:a7:82:71:f3:c8:43:e6:08:eb:ab:85:30:99:
         42:cd:72:5f:5d:09:9b:18:91:ab:20:45:67:e0:5f:0c:de:9a:
         b0:b6:d4:8a:2d:ac:29:01:87:65:41:15:43:9b:eb:a7:1d:05:
         02:4c:16:33:17:b9:3b:dd:70:89:7d:ab:b6:df:b1:0f:aa:89:
         3f:23:3c:02:40:b1:03:b5:0a:9d:52:ec:8b:ef:9f:8e:8c:a8:
         9d:a3:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:36 2026 by rpki-client