This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File:                     RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier:          Xc26oxmGlj2M3F1cy/EP/vzlo/JETZV5poeCJw3n36c=
Subject key identifier:   4E:44:1C:F9:CD:CD:4C:89:68:E0:F2:CF:84:FC:07:80:44:11:2A:1A
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer:       /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial:       019C420FF5C402B8ECE16FFDFA462D3CA8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number:          0C00
Signing time:             Mon 09 Feb 2026 11:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:08 +0000
Files and hashes:         1: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (hash: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I=)
                          2: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: CVsf0iZRXWP2yyp1ZHQ+pE52xX65hBmgIsZEQOO1AYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:f5:c4:02:b8:ec:e1:6f:fd:fa:46:2d:3c:a8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
        Validity
            Not Before: Feb  9 11:01:08 2026 GMT
            Not After : Feb 10 11:01:08 2026 GMT
        Subject: CN=4e441cf9cdcd4c8968e0f2cf84fc078044112a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:24:ce:a4:6e:7c:27:ce:2f:8d:ed:02:48:
                    c7:92:a9:da:d0:b8:55:6b:02:1c:54:fd:9f:b8:8a:
                    7c:aa:18:6a:61:41:e1:d5:1e:b0:de:8f:c0:c9:23:
                    6b:e3:c7:df:60:fa:c3:04:09:38:3c:2a:79:45:34:
                    0d:92:ae:54:cd:a8:08:c5:ba:fe:2f:c2:d8:7f:5a:
                    e4:9d:5a:d7:7b:58:78:a3:5e:71:70:58:39:da:7a:
                    77:86:7b:f7:50:a2:b7:c2:54:76:45:89:40:7c:d7:
                    2e:72:1f:13:d5:fc:6f:c6:b6:d6:84:6a:00:ad:ac:
                    32:c6:4c:1a:16:32:16:a8:bd:2d:4e:ef:9a:f8:da:
                    94:a5:61:14:a3:15:d8:b5:80:b8:5b:d1:40:af:55:
                    7c:2b:40:8e:b1:d1:dc:ef:1a:45:1d:3f:15:55:b5:
                    9b:f5:09:2c:3b:8e:9d:96:48:a7:5d:f5:59:19:b4:
                    26:f0:ab:99:59:e5:50:c5:7a:96:03:ec:dc:80:1c:
                    05:5e:a2:87:22:18:e9:fe:64:ca:de:49:20:55:01:
                    8e:e2:90:32:18:c9:cf:52:77:d2:b4:51:65:cb:44:
                    f1:c5:d1:ab:9e:ec:72:da:42:75:49:b1:08:3c:e7:
                    d7:f6:5d:a7:75:45:85:8e:fd:2d:00:99:a5:28:9c:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:44:1C:F9:CD:CD:4C:89:68:E0:F2:CF:84:FC:07:80:44:11:2A:1A
            X509v3 Authority Key Identifier:
                keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:28:21:83:ab:78:38:06:0c:51:7a:66:f9:a8:0f:97:12:4c:
         a0:7f:87:f9:1e:71:be:60:b2:7e:58:4d:fb:7e:77:8b:d7:09:
         98:16:13:b6:a7:88:61:78:2e:5a:d6:98:a9:c6:ef:66:af:8c:
         f2:42:02:d1:5f:8b:45:db:b8:32:c3:b9:66:1e:b8:7b:55:81:
         46:4d:c9:a7:49:e8:50:85:03:db:f6:a1:0e:37:72:0a:68:d7:
         3f:c3:e4:b4:5e:b6:8d:b9:11:e4:b0:23:01:93:82:45:08:24:
         35:1d:25:5f:cd:7c:2e:0e:a3:9f:bf:bf:f5:59:c5:bc:5e:f2:
         12:51:14:e4:a9:d5:cc:33:88:82:41:ae:c8:9b:c2:aa:4c:08:
         8a:ee:f4:9e:b1:80:5d:95:d2:56:71:4f:a3:d0:1b:71:c7:4b:
         9b:c9:07:ec:bd:7e:7a:fc:0f:77:dd:76:5e:63:11:51:8e:3a:
         ce:14:3d:80:8b:63:bc:36:00:3b:35:c8:9c:a3:9e:48:25:98:
         b7:5d:72:b8:dd:9f:9a:86:4d:4b:ed:96:20:00:03:7a:9f:c8:
         9d:6c:62:21:e8:27:57:0c:fb:63:0c:f6:ca:2b:b6:98:b3:43:
         6e:0e:46:37:3b:e3:84:1f:a9:d4:dd:97:55:09:e8:8c:e5:9b:
         f8:6a:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:31 2026 by rpki-client