This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File:                     AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier:          XgiRvLuSUX7sNejSgXxIj1xkVvx+qPpKMenBrnItI0k=
Subject key identifier:   FF:7E:10:24:05:6F:A2:B8:3E:19:BD:ED:1D:0E:9D:81:65:8D:26:E3
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer:       /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial:       019C438FE2B0C23A4295B4058A033824574F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 18:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:29 +0000
Files and hashes:         1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: y7a4zmMeKQhLocUFA22W+4aR3fUKu4hT4sHvpT8syaA=)
                          2: WAWNpiY2vwMuD_j8ek6kZ6L9jDw.roa (hash: Aqg/w+ScPNsoJT+d0QU5LliDLOZxPSYw1XwmYdmE6pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:e2:b0:c2:3a:42:95:b4:05:8a:03:38:24:57:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
        Validity
            Not Before: Feb  9 18:00:29 2026 GMT
            Not After : Feb 10 18:00:29 2026 GMT
        Subject: CN=ff7e1024056fa2b83e19bded1d0e9d81658d26e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:3a:2d:b3:4e:bb:c5:97:94:cb:47:28:3d:
                    78:20:c6:a1:2f:d4:c3:03:17:2c:7b:f1:ca:b3:93:
                    ca:38:92:78:5d:9d:fc:da:09:3d:d9:19:8b:c1:fc:
                    95:e3:f9:70:13:06:d2:05:24:27:bb:f3:03:0c:c1:
                    39:01:cd:05:34:a6:14:b8:a8:6e:31:12:9e:eb:66:
                    9d:5c:af:65:7c:9f:c3:00:4d:eb:f3:5f:70:c1:c4:
                    91:f7:df:8f:1a:cb:c1:91:7f:07:c7:7d:97:5f:8f:
                    b1:5d:22:3c:53:92:34:6b:4a:b5:73:3e:cf:5b:84:
                    63:e8:f9:15:fd:13:c3:c4:8f:82:6b:4b:02:dd:95:
                    dd:1d:e4:e4:23:68:31:59:6b:16:ef:f7:bf:a0:56:
                    76:30:4a:8f:7e:84:fc:df:67:34:2e:8a:5c:9a:50:
                    2e:8f:ce:f5:fd:59:8d:5e:40:98:89:6e:3f:3e:e0:
                    ef:65:d8:fb:20:6d:b0:36:77:c1:35:d9:f7:7a:15:
                    4c:a7:66:61:91:b8:7e:ff:92:25:8a:d9:7d:01:d6:
                    e2:84:6d:37:cb:fd:0d:c7:2d:15:d7:69:13:39:11:
                    c2:ba:b0:dc:3f:6e:eb:e8:61:0b:1a:47:98:3b:8a:
                    e7:c7:96:e3:bb:46:c7:4c:7d:d6:43:56:fc:a2:21:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7E:10:24:05:6F:A2:B8:3E:19:BD:ED:1D:0E:9D:81:65:8D:26:E3
            X509v3 Authority Key Identifier:
                keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:18:8a:1e:f6:d1:3e:e6:05:20:74:aa:db:e5:6d:06:7b:a8:
         f4:c2:99:1d:6f:35:e8:fb:ab:26:98:dd:5e:79:14:30:c3:e2:
         bd:4a:30:2f:c1:62:f1:36:ca:13:63:a3:6d:0a:87:fd:54:4e:
         a6:87:41:22:8e:84:ef:88:bb:e3:78:06:34:48:a5:45:34:89:
         f2:c8:aa:d9:4b:e3:30:a7:94:06:db:9b:c3:06:76:50:ce:26:
         59:fa:99:b4:f4:43:9c:08:e4:28:f6:f9:bf:d4:16:e2:c6:ea:
         15:d3:20:d5:58:a6:41:68:0f:13:86:5a:82:13:d0:5b:fe:c0:
         20:03:40:87:b3:05:e6:a2:72:b4:ec:e7:2c:1d:d8:20:99:20:
         0f:f5:b0:b5:6d:50:a3:4d:9d:42:cd:8d:53:9f:30:70:6d:91:
         cc:9b:f8:cd:82:39:c5:4b:79:8c:81:3a:0b:92:f0:38:dc:2b:
         f5:8c:db:91:7b:b6:23:43:d6:5e:ca:73:f6:92:81:5d:5a:43:
         81:53:ac:84:fe:e0:9e:96:3b:28:de:04:4f:dd:79:23:40:76:
         e5:93:b7:c9:c7:73:25:01:91:e3:32:d5:13:f2:1d:d7:ce:84:
         f4:34:8b:6c:98:ac:b8:31:5f:2f:2a:00:c0:62:3a:5e:e6:5b:
         4b:b5:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:57 2026 by rpki-client