This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
File:                     SEQEnTlhdqG16ziFSNm-PrPn1lE.mft (raw, json)
Hash identifier:          2EjoVBN9ErAdNRuxq1PxZXx+gUqOdevfHBostCpVVBA=
Subject key identifier:   93:29:00:8E:85:A5:DF:07:AD:D7:27:D2:53:1D:89:83:BC:29:EE:B1
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Certificate issuer:       /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial:       019C4359656029ABB9EF836D3705F35BF116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
Manifest number:          0DDD
Signing time:             Mon 09 Feb 2026 17:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:57 +0000
Files and hashes:         1: SEQEnTlhdqG16ziFSNm-PrPn1lE.crl (hash: czzTy8G/uqIHPydgG9BMFSZXW2EPD4QIXn3CXP8QkVg=)
                          2: gCpCVs1T1erTsFoVeoh9sbu_thg.roa (hash: Qe0McZ/Bp+ZUevE8P6m/6/dQfu+aUz3X+I25k8OWJbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:65:60:29:ab:b9:ef:83:6d:37:05:f3:5b:f1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
        Validity
            Not Before: Feb  9 17:00:57 2026 GMT
            Not After : Feb 10 17:00:57 2026 GMT
        Subject: CN=9329008e85a5df07add727d2531d8983bc29eeb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:84:7c:4b:d5:f7:56:75:92:60:80:c4:71:
                    96:01:78:64:38:d8:02:82:93:22:be:23:a5:64:7c:
                    a1:3d:2c:07:d9:7b:1c:14:60:3d:bb:7d:97:fc:9f:
                    6a:3d:f5:b4:46:ca:ec:e7:5d:53:32:13:40:da:2e:
                    bf:9e:cd:52:54:46:5d:f4:13:c8:ff:0c:4e:95:61:
                    1d:f9:62:a5:37:27:e1:c4:54:ab:60:5e:a4:8d:a4:
                    b7:3a:c5:38:51:03:61:3d:9d:77:26:f9:3f:c2:a9:
                    f6:83:ec:d7:38:8f:db:c1:71:5d:fc:b1:15:61:90:
                    c2:9e:13:71:07:5d:c3:9d:53:d2:7b:5d:3f:a6:07:
                    bd:f1:06:b6:54:a2:bc:37:e1:0a:0f:44:5d:41:aa:
                    05:6c:6f:0c:3f:93:3d:e5:6b:27:5b:8b:a8:12:93:
                    7e:b9:5d:9a:bc:a6:d3:95:94:c2:c7:ee:38:79:8c:
                    59:b5:fd:b6:ed:d3:f9:4d:1f:84:56:0a:88:f3:bd:
                    c1:71:f0:b7:bb:7c:72:a1:68:07:61:8c:d9:fc:78:
                    1c:c0:76:4b:2b:41:4b:32:59:63:c2:78:72:98:94:
                    4c:54:b0:31:34:da:95:86:a7:59:fb:9f:5f:8f:b7:
                    3f:9a:13:66:99:73:e0:13:0e:38:7a:74:7e:4c:83:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:29:00:8E:85:A5:DF:07:AD:D7:27:D2:53:1D:89:83:BC:29:EE:B1
            X509v3 Authority Key Identifier:
                keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:21:f5:95:85:24:a6:cd:60:5d:be:f3:e5:4d:be:9b:c4:7e:
         4e:71:b0:c1:71:03:27:38:67:3c:e6:0f:b8:c5:8e:d2:fb:f9:
         bf:cd:1f:45:8d:e5:d2:c2:97:c5:a8:ab:b7:91:95:b6:58:74:
         d5:d8:c8:19:3b:de:b9:02:30:66:4e:16:ef:6f:f4:95:18:c1:
         96:c4:d7:98:33:54:cd:2a:6e:97:b6:52:70:09:14:6d:99:29:
         04:e2:6b:35:f3:4c:93:a9:6d:d6:03:44:7b:fc:cb:11:c4:56:
         ed:79:48:09:ce:f0:1c:9d:06:5f:da:0e:c6:e7:88:c0:f9:3d:
         da:f3:ca:72:65:ce:cc:8e:c1:df:10:1b:fb:76:97:4a:8d:57:
         4a:cb:57:69:50:8e:93:5c:89:b4:34:ba:5c:bf:a9:75:f3:9b:
         a0:a5:30:a4:1d:f2:78:08:ad:27:89:99:9e:de:98:41:4f:e3:
         7e:fb:c8:da:62:87:36:58:d5:38:29:52:9d:56:96:8f:5b:57:
         32:57:09:d0:f5:4f:66:6e:b3:b7:96:df:ee:bd:72:19:15:7b:
         07:56:66:a4:6f:f6:c6:d0:a6:6e:90:42:1a:5c:34:18:e1:83:
         52:a0:70:76:c5:7e:da:88:f4:9f:2a:b4:bf:cb:4b:ba:51:c5:
         97:14:c5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:08 2026 by rpki-client