This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File:                     F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier:          rgHUEawYJAnytyxl0vKYQ8XIOrFgEzUFQpmW5lYxrDw=
Subject key identifier:   5C:03:B9:6D:C1:9E:D4:E7:2A:76:75:B7:9F:C2:C8:28:53:33:65:ED
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer:       /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial:       019C42103A50CC31B61C5E506868ED12294D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:25 +0000
Files and hashes:         1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: zfLbqpXyiAbHFFIDuA6eSlFrs/I3mlTz5Fib+WKuCBE=)
                          2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
                          3: SyWBqT58dPR944ENyBXecfRLiu0.roa (hash: nvOaqw1yMGl0wbibTeGVu/RnctZfAeEqTXJajqdQujk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:3a:50:cc:31:b6:1c:5e:50:68:68:ed:12:29:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
        Validity
            Not Before: Feb  9 11:01:25 2026 GMT
            Not After : Feb 10 11:01:25 2026 GMT
        Subject: CN=5c03b96dc19ed4e72a7675b79fc2c828533365ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:fb:4e:64:be:ff:49:41:76:cd:b1:d3:68:
                    d5:09:97:96:fe:7d:3f:46:a3:9a:48:9e:62:7c:c8:
                    f3:31:c3:13:8c:0e:74:ca:bd:75:c5:8a:de:53:a4:
                    67:41:ab:d6:7f:63:a4:d2:33:f8:b1:2c:e1:89:80:
                    9d:6e:da:0f:1a:77:d9:b0:9c:72:38:ca:9e:da:df:
                    ef:4a:43:9b:e1:d3:55:e1:df:a6:5e:58:80:91:79:
                    e9:d4:67:aa:ee:61:89:ad:36:ce:96:cb:e8:8b:6f:
                    8b:91:3e:8a:55:02:a1:4b:66:42:e6:47:e3:e2:60:
                    c6:67:14:0a:f4:38:ed:14:d9:d7:cf:ef:6c:d7:1f:
                    ad:ad:93:a1:b7:49:19:bb:8a:d9:6d:86:21:a6:2f:
                    be:47:c4:0d:b8:41:1f:88:72:f1:48:d4:ed:fa:f4:
                    66:45:f0:55:df:85:a4:05:85:78:9d:e4:e5:c3:6c:
                    0a:f6:f1:30:da:16:da:33:e8:05:50:ff:b8:11:6e:
                    07:05:a3:6a:46:f3:15:a5:ee:4d:9c:f8:c9:34:cf:
                    06:97:a6:97:ae:89:68:ca:49:4b:d1:34:82:3b:22:
                    9e:77:6f:8a:31:35:da:a8:5a:c2:3c:58:42:08:7f:
                    01:e0:15:b1:c0:bd:7f:ab:d7:6e:95:0d:5e:d2:a1:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:03:B9:6D:C1:9E:D4:E7:2A:76:75:B7:9F:C2:C8:28:53:33:65:ED
            X509v3 Authority Key Identifier:
                keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4a:dc:7e:09:d1:86:5e:7e:69:c3:72:8f:4c:54:03:a0:41:
         f2:2a:d5:b1:d3:78:8b:18:6a:e9:ce:22:42:1c:c8:bc:75:32:
         19:61:3d:69:60:1f:42:8c:a1:25:f9:14:70:cb:86:c0:1e:fd:
         85:52:05:0c:fe:fa:a5:5b:6b:c1:f0:57:18:11:51:82:df:44:
         36:12:50:ee:ea:62:53:05:23:d1:fa:29:32:6f:59:80:ee:c3:
         22:f1:86:71:3c:92:9c:a3:0c:c1:47:c7:90:02:f7:8f:10:34:
         79:33:a5:f5:83:3f:8d:42:da:e5:b5:13:4d:91:29:b2:f2:27:
         9a:b1:be:2c:03:3a:7b:0a:c7:e7:4e:fb:9b:36:22:70:52:32:
         19:16:fd:54:f8:d6:34:51:fd:d3:34:8b:f2:16:21:8d:ab:a3:
         88:4d:34:a8:ac:47:df:7e:23:59:fc:ea:2b:29:91:f8:e8:ba:
         04:2e:56:dd:ca:f3:29:c9:f5:68:ef:2f:3d:c1:4f:f7:f3:11:
         e6:05:4d:71:d1:b2:eb:2d:bf:c4:42:2d:f4:68:c6:96:d2:bc:
         4e:88:8a:09:39:6d:7b:d9:0f:0a:99:46:3b:de:32:bb:e1:5c:
         16:7f:cf:ce:bf:8f:ce:de:05:aa:b9:8d:6b:53:27:c4:f1:43:
         2a:b1:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:14 2026 by rpki-client