This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File:                     StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier:          6EGBZhC4qemtoMgJlM60nyF52CjwmyPmFSNEev0Ynxo=
Subject key identifier:   3B:1F:1B:0E:FF:51:3A:F0:E5:DA:AD:15:E9:07:79:4C:84:19:7D:49
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer:       /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial:       019C420F6BB82BCEC8511177B1811998FF89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:32 +0000
Files and hashes:         1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=)
                          2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: 9Wi0JYVmwhgNcqj16rPa86M/HeLQz6Nj3IBMnMyoEPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:6b:b8:2b:ce:c8:51:11:77:b1:81:19:98:ff:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
        Validity
            Not Before: Feb  9 11:00:32 2026 GMT
            Not After : Feb 10 11:00:32 2026 GMT
        Subject: CN=3b1f1b0eff513af0e5daad15e907794c84197d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:d7:82:43:95:d2:64:71:37:0f:c7:0c:2d:
                    92:d5:fc:99:ff:0e:64:76:5e:7c:a7:1a:d1:eb:5a:
                    41:f4:8e:59:8b:45:e9:01:54:83:e6:d4:2b:de:a6:
                    ae:d1:b8:ab:f4:f4:b6:3b:23:86:c0:fd:07:aa:b9:
                    88:25:82:1f:80:c8:5d:3d:c7:83:0e:20:32:a8:85:
                    7d:8d:84:ea:10:fc:09:06:ec:37:51:57:a1:a6:6e:
                    8c:81:d1:df:01:5e:54:94:67:65:9a:df:4a:29:97:
                    db:48:2b:ba:d2:48:55:a1:b3:49:17:55:f1:aa:fd:
                    3c:27:2d:10:fe:1d:73:ee:28:78:b2:ff:4c:bc:9e:
                    e3:44:e2:f9:25:1f:8d:ad:59:09:09:f5:a6:4a:42:
                    8b:2e:b5:5a:a9:36:73:00:b0:6e:f6:0b:67:80:71:
                    09:f6:d4:42:6e:99:0c:9c:bf:c7:e8:a8:6a:52:b0:
                    fe:bf:f0:13:62:18:a2:68:f3:66:41:2c:47:40:4a:
                    d7:05:ff:6f:f4:65:f9:37:ab:8d:7c:5b:bf:79:81:
                    4b:6e:06:4e:ff:84:3c:67:e6:fb:8a:f6:d5:18:76:
                    40:54:67:15:8f:43:2b:3d:0a:96:c3:1c:0c:49:ab:
                    0b:ec:2b:ff:e3:fd:49:82:84:66:de:6d:b8:b5:89:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:1B:0E:FF:51:3A:F0:E5:DA:AD:15:E9:07:79:4C:84:19:7D:49
            X509v3 Authority Key Identifier:
                keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:73:4f:89:11:fe:69:ae:2b:69:81:cc:a6:a5:0e:e7:1e:f9:
         e6:b5:8a:44:d0:07:25:9f:b9:b1:ab:b2:37:6e:8c:0b:94:ee:
         b3:ec:c3:4f:69:c7:83:8f:4c:d0:2f:1a:ee:b2:71:56:13:94:
         66:0c:ac:30:84:a8:c2:d0:50:35:ea:b9:d9:ee:55:e3:ce:b7:
         08:c1:3f:02:d7:74:22:3b:09:87:ec:a4:2c:86:61:8a:60:a1:
         7d:9f:6d:9e:07:18:45:8d:df:dc:cd:ba:31:d3:a3:af:fa:80:
         12:b8:dd:0e:91:78:e5:bf:77:fe:e1:94:aa:f9:fa:13:cf:65:
         ef:6c:2c:5d:42:ad:04:37:f0:ea:00:7a:33:d9:9f:eb:f4:d8:
         93:6c:2f:8c:0e:83:eb:e4:1b:2b:a8:df:9b:9d:e3:12:cc:87:
         6a:60:6c:89:d0:a6:4b:30:7d:09:79:c6:81:ee:cb:48:3a:7e:
         b9:2d:12:f7:d6:22:e0:f4:7c:78:3a:a6:e7:8d:f8:95:bf:c3:
         1f:17:e2:d3:13:87:61:d6:83:17:60:a1:79:74:d3:ff:54:b2:
         ac:8c:6a:25:5d:8c:c3:bd:3c:d3:ff:d9:85:e1:f3:5c:26:72:
         50:93:91:a4:97:47:99:f2:15:c2:90:43:fc:03:7b:14:a0:a0:
         8f:f7:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:47 2026 by rpki-client