This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          smzX+kcMaFDd0Vng2Jwhr4vkI0CAp0b8jpvSEgFqWr4=
Subject key identifier:   06:9E:3E:92:D6:48:4B:34:11:7B:10:4F:3D:1B:0C:4F:AE:DB:70:5A
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       019C4322C68B1BA9ADF518A562B8911AC2E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 16:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:18 +0000
Files and hashes:         1: 1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa (hash: 5t3UXfHRI3FdEzMfG7EasqVmyGfPVOTBzPUk3KiG+pQ=)
                          2: 4I6IeKRFTHTfCk6P0VsgUhk8zic.roa (hash: 0XVLTIXxWYyeiCe3iIXGikBSA8t/yImgovN3r1Pbd5A=)
                          3: Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa (hash: WR8ZmHp+6ZanBZA6Ty89Up4dRZVpCdfJ23KhCqCS8TI=)
                          4: PT_eHk2Dy_Wh2XHSZ-ZM2UoqOTc.roa (hash: /7aQ7+RwkclmuJNtVK87g/73oEQXo6yAkx6IMmNGLuU=)
                          5: hjLY93sTfKVGtH04a9-qkylCHmE.roa (hash: /mrPE+eKM9yKGu2TBD1xblJ2DuTRrBr+lNyxB56PAiE=)
                          6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: OHguAOmTiePzw4xqheTOjtd33P3OB+WeBScxEStxUMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:c6:8b:1b:a9:ad:f5:18:a5:62:b8:91:1a:c2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Feb  9 16:01:18 2026 GMT
            Not After : Feb 10 16:01:18 2026 GMT
        Subject: CN=069e3e92d6484b34117b104f3d1b0c4faedb705a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:8f:91:a4:f0:66:20:37:9e:fc:95:78:6a:
                    fa:45:58:b3:51:64:4f:c2:b2:e0:e4:b9:c8:91:02:
                    6a:3f:ab:32:b8:98:5c:10:04:e8:03:39:fc:09:70:
                    2e:ad:27:48:3f:3c:f2:27:a7:60:af:3c:6a:d2:1e:
                    ff:ff:79:4f:cc:17:ab:a8:82:68:ba:9e:f9:c5:e9:
                    3a:b1:f8:e9:da:27:d9:93:2b:fe:b0:37:f4:f9:da:
                    f8:ae:f2:24:da:75:1e:fb:cc:cd:a3:32:93:fd:f0:
                    a6:19:ad:dd:5a:ed:cb:8f:0a:7b:71:a3:dc:41:9d:
                    27:7f:86:6f:3e:0f:f2:ae:a7:6d:5a:f4:2d:4a:22:
                    24:61:a1:45:e8:59:74:80:30:d4:17:36:ab:a3:10:
                    ff:5d:a8:69:e9:30:27:46:12:91:56:ea:1e:a0:eb:
                    4b:50:0c:fc:3c:0f:55:09:fe:6a:6b:cf:37:55:87:
                    bc:6a:42:c9:ea:9f:68:ff:71:7e:50:b2:34:59:10:
                    35:a8:da:ea:af:4b:b3:c4:a8:56:46:06:98:63:ae:
                    22:44:cb:18:34:b9:49:81:45:03:c1:1a:54:b3:e7:
                    ac:a7:96:f2:fc:6e:04:51:af:aa:67:91:da:ba:de:
                    2f:08:c1:7f:bf:94:4f:e0:00:65:46:85:0f:e0:1d:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9E:3E:92:D6:48:4B:34:11:7B:10:4F:3D:1B:0C:4F:AE:DB:70:5A
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:71:d9:19:4d:f0:5d:c2:e7:57:36:16:97:ea:02:43:9f:
         c9:aa:41:e6:6c:5a:dc:fb:88:97:a3:47:42:42:e8:c7:eb:46:
         ba:74:9e:e7:29:51:a7:e1:1e:8e:b2:d9:11:b0:53:87:39:2b:
         53:96:37:a3:ec:15:bc:bc:9d:7b:08:16:8a:f1:72:88:16:8e:
         6c:79:83:81:50:db:2f:0b:00:13:b0:9f:79:ab:63:12:4e:02:
         45:52:09:91:a6:38:cb:f6:e1:0e:bd:05:b1:31:11:ce:ca:b2:
         1d:ce:c5:e1:fc:82:f2:85:74:d7:11:73:04:0d:18:4e:78:2d:
         23:ff:95:21:22:cb:06:95:b1:87:e5:10:1f:0e:24:24:49:81:
         ac:bf:81:dd:f5:60:e1:50:72:3a:1f:87:99:14:db:be:14:34:
         4c:c6:10:91:96:6c:29:47:98:1b:a5:5f:96:f5:e3:c1:e1:f0:
         55:c6:0d:e8:f4:fa:81:dc:8a:c7:95:15:d3:f9:ad:6c:b7:09:
         02:16:0e:06:8e:23:30:c2:59:43:14:73:8b:5c:74:ea:f0:62:
         b1:aa:3c:6f:e9:1b:19:08:2e:7a:3b:60:64:31:47:8c:83:96:
         5b:b8:29:41:21:78:5f:16:90:b9:ce:95:d8:2e:c1:9f:ad:db:
         54:ac:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:08 2026 by rpki-client