This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File:                     pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier:          eNTa29GGfmuOulNcz0HZgVgQCZ6yAo/xBNeiSXFAAgw=
Subject key identifier:   0B:57:1E:A4:C8:52:30:A3:E3:A9:19:BE:0F:29:27:01:95:11:17:BE
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer:       /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial:       019C43FE653AD4AADFD5FEE521CDC277F2A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 20:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:11 +0000
Files and hashes:         1: C0jIgMcLTHgqOBjTV2Pk_I0UXpE.roa (hash: Vnmpnxzb5d888xy3LtJLua3mvD0ti0N+tPvmlqaYeqw=)
                          2: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: 412XZJNBwTnKQrdqnEAcO21T/7vHejWHnlvUAlZKqLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:65:3a:d4:aa:df:d5:fe:e5:21:cd:c2:77:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
        Validity
            Not Before: Feb  9 20:01:11 2026 GMT
            Not After : Feb 10 20:01:11 2026 GMT
        Subject: CN=0b571ea4c85230a3e3a919be0f292701951117be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:be:4b:39:b1:b7:3d:cb:3f:12:be:8f:a7:
                    f3:20:65:6f:bb:c5:f8:e3:66:bc:99:fb:cd:6a:12:
                    d1:7e:04:b9:95:c5:8e:8d:9a:2b:d0:78:7a:bf:17:
                    90:df:0b:5d:14:00:58:8b:4f:5a:63:4d:33:54:4b:
                    c7:08:fc:9d:a9:69:8f:57:af:ec:f3:5c:5f:a4:ca:
                    0b:76:94:61:08:d6:e8:0b:7c:f7:83:0f:9e:2d:76:
                    11:b5:55:4a:b3:02:f6:5d:e0:1c:3a:db:41:8d:8f:
                    be:b5:98:fd:48:5e:75:20:38:b6:c1:9f:4e:b8:97:
                    41:13:06:e5:db:8a:18:df:66:69:56:20:63:a9:38:
                    7d:bc:a1:f5:fd:93:ed:d1:f3:b7:dd:7d:0d:fd:61:
                    ce:31:42:4e:51:5f:b7:36:a6:f1:e0:f8:72:49:01:
                    e6:81:73:8e:40:8a:7a:88:f7:b7:f7:17:2a:6e:e9:
                    05:39:53:a8:63:c9:9b:ed:15:72:d6:40:e6:65:87:
                    8d:7e:bf:87:03:f4:93:87:70:e6:4d:d9:92:03:a9:
                    4e:5d:cf:e5:cd:a5:b2:38:9d:54:d9:d2:b6:44:a8:
                    4c:3d:66:d3:bf:c6:8a:e3:f1:eb:83:9a:46:74:9a:
                    9d:8b:1b:1f:66:6a:0e:1f:0f:7e:83:12:c7:49:5c:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:1E:A4:C8:52:30:A3:E3:A9:19:BE:0F:29:27:01:95:11:17:BE
            X509v3 Authority Key Identifier:
                keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:89:45:8b:12:0a:be:7d:f4:53:64:d9:c1:89:45:9e:7d:
         d9:e8:e2:6a:8d:4d:16:ea:1a:d5:17:6c:d5:e9:94:6b:ac:65:
         7c:2d:2c:81:82:e9:0e:0a:81:1e:d8:e7:eb:cd:3b:a8:8b:47:
         d2:d3:99:15:b4:88:3a:59:96:ba:45:24:25:eb:77:b4:9d:3b:
         4e:06:d1:29:5d:0b:48:52:04:cf:64:12:bd:e2:5e:92:18:b5:
         b6:71:cc:cf:a7:0a:48:45:b2:81:2a:c6:0f:84:cd:1b:e0:48:
         f6:3f:be:31:00:56:df:62:76:ab:72:6e:88:f5:0c:a7:1f:1f:
         97:5c:55:09:84:e5:15:76:96:fb:af:5a:ba:eb:ec:1e:16:6b:
         39:2f:ae:a9:73:06:bf:d9:a8:77:c7:e5:e4:79:39:cc:e4:26:
         f8:ea:ad:87:6b:18:e3:83:7d:1b:1f:b8:ee:19:58:f7:f8:65:
         ae:7b:c7:51:06:ce:64:06:20:e1:24:62:6d:10:89:1b:d5:22:
         17:fb:41:cf:f1:3e:37:0b:30:a6:a9:8b:fc:e5:39:1e:29:90:
         8a:a5:40:60:fc:c2:d9:bb:2c:75:87:5f:f1:fb:03:88:33:6d:
         60:8d:65:83:68:cf:91:07:5a:ea:67:a7:5a:a1:67:c9:5e:63:
         a2:88:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:21 2026 by rpki-client