This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File:                     1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier:          naXAjerB5/ZuCWFfR837hQW9rWHgWvyVHxMSMU3Ple0=
Subject key identifier:   0A:18:66:32:7C:C6:E4:05:2C:68:76:A7:3F:65:DA:21:74:F0:7A:9E
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       019C4D6F0F50A34320518803BBCB054ABC67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number:          10A3
Signing time:             Wed 11 Feb 2026 16:00:49 +0000
Manifest this update:     Wed 11 Feb 2026 16:00:49 +0000
Manifest next update:     Thu 12 Feb 2026 16:00:49 +0000
Files and hashes:         1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: LbseFXs12r3RGY5dG0xjQAeIuDhNidRl3in/5BYIZs8=)
                          2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
                          3: 6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa (hash: 7jvO+7DiigtIMsr2CKWo896+gSiIAOMeoyBPHjSRSp0=)
                          4: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=)
                          5: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
                          6: SJqCby9bRcz81zQZO1TeT-stBH8.asa (hash: zdlq1QtWJPDwU8pcUXTI4wu8J85849xwOKfqaDypeVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 15:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4d:6f:0f:50:a3:43:20:51:88:03:bb:cb:05:4a:bc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Feb 11 16:00:49 2026 GMT
            Not After : Feb 12 16:00:49 2026 GMT
        Subject: CN=0a1866327cc6e4052c6876a73f65da2174f07a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:d4:8b:bc:fa:6e:10:83:3f:aa:2d:07:cb:
                    fd:58:4d:a7:60:39:c6:45:18:49:54:7d:fb:f2:ca:
                    24:ef:b6:54:fc:8b:ff:b9:31:72:88:58:64:47:6c:
                    6a:e8:f6:bc:af:04:03:58:6e:f8:d0:e9:92:bb:44:
                    b7:a3:67:d9:de:c3:ab:8b:d5:2c:9c:ec:65:96:41:
                    03:bc:91:c4:7b:ca:e0:e6:43:fe:1f:64:dc:e6:20:
                    82:c0:7b:2d:b1:73:51:0e:9e:24:76:2c:85:be:93:
                    b5:11:40:3d:7d:0a:95:07:c4:1a:4b:63:ad:e2:fe:
                    36:37:e7:74:c3:e7:29:41:34:97:37:ba:6f:34:d8:
                    1f:58:91:0b:f4:69:5f:d4:83:0b:02:b1:f4:89:d9:
                    eb:03:95:c3:ef:9e:54:39:37:16:18:80:00:9e:fd:
                    16:d3:a8:c6:69:d6:93:8e:a2:59:98:57:e5:bc:d6:
                    08:ec:cd:c6:57:f7:e0:6c:38:4b:f5:43:27:c3:0e:
                    00:c2:16:98:bc:24:82:59:d7:98:2a:f3:7a:91:6c:
                    bd:dc:ba:0d:c8:8f:c3:c6:ef:57:64:a0:45:f0:75:
                    7f:39:5b:45:fa:1c:2a:9e:ce:64:98:1f:27:6c:69:
                    a0:0d:f8:0d:10:9f:4c:f1:f6:59:6c:59:eb:63:7b:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:18:66:32:7C:C6:E4:05:2C:68:76:A7:3F:65:DA:21:74:F0:7A:9E
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9d:c8:64:5e:43:18:ed:13:3e:c2:e8:3e:13:34:a8:45:fb:
         b1:62:d4:36:74:4e:10:53:0b:88:7c:a9:00:a4:09:1a:ca:08:
         47:13:89:90:59:a1:74:9b:36:11:f8:73:ab:1d:e2:4f:66:55:
         ef:86:c2:23:6b:09:78:57:54:d4:84:55:96:ad:0e:e3:1b:34:
         df:44:01:06:6e:20:2a:7d:b9:de:e7:66:38:a0:03:7f:e4:6c:
         13:49:64:37:2b:4a:f6:39:c4:b2:27:a6:68:9c:6f:2b:32:87:
         fa:78:24:ed:fb:67:68:32:4e:ba:d6:fe:c4:84:cb:01:a4:c5:
         52:02:ed:00:9b:b9:32:71:ec:18:5f:79:03:ab:7f:97:71:5f:
         47:f7:90:b6:7a:11:0a:fd:e5:25:d1:70:04:11:cb:41:c2:ed:
         2a:6e:18:90:8d:dc:e2:00:7d:9d:20:3c:68:8e:49:99:7d:b0:
         15:3c:93:c8:b6:ad:ec:b5:82:6b:fa:62:ec:48:47:d4:14:d8:
         36:69:c0:b5:94:51:ab:6a:b1:29:56:14:b0:d8:aa:1f:e5:b3:
         aa:c4:ae:b9:20:44:a9:34:25:01:bd:e8:bd:5b:4c:57:84:38:
         78:db:43:20:61:b3:74:87:86:1a:b9:33:bd:88:a9:33:60:68:
         fe:94:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 17:55:54 2026 by rpki-client