This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File:                     aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier:          scgAbs9xOpO3nEIbKWJP9wGRoLuxGfh97JJD7IhDiGg=
Subject key identifier:   F8:AA:02:06:D0:0E:38:22:19:A0:D2:4F:A3:46:85:D1:2C:AB:0D:58
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer:       /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial:       019C44A2A2DF9995DEA044F424F069301481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 23:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:34 +0000
Files and hashes:         1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
                          2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
                          3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: Qu4PzRSk4VzlaXcb4Ol8JZRs4TfyrkTi6/8KYW8Anrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:a2:df:99:95:de:a0:44:f4:24:f0:69:30:14:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
        Validity
            Not Before: Feb  9 23:00:34 2026 GMT
            Not After : Feb 10 23:00:34 2026 GMT
        Subject: CN=f8aa0206d00e382219a0d24fa34685d12cab0d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:98:80:0d:61:d5:4d:df:b1:35:08:e3:0d:
                    4e:42:a9:6b:46:a0:1b:86:cf:a3:40:0c:71:17:9b:
                    2c:d5:8a:c1:19:50:b1:96:8a:32:8b:05:6a:9f:e7:
                    2e:c6:a6:83:56:6f:c7:d4:eb:e9:7c:03:5a:c7:bb:
                    7c:57:0b:a7:de:e2:d6:30:af:e8:3e:21:db:10:c1:
                    a8:2b:1a:68:5a:f2:1c:38:6a:7a:b2:87:f5:c2:48:
                    88:45:5a:b1:1d:ed:41:a3:13:4e:b8:3b:c6:b4:33:
                    16:9e:2b:9e:61:fe:cf:87:1c:1b:9f:3f:4d:65:0f:
                    28:2e:16:e5:16:cc:02:86:a6:fe:3c:52:3a:1b:45:
                    fb:ad:17:9e:bf:91:5e:8e:24:f1:87:a5:e2:1d:0a:
                    81:f4:71:4e:0d:eb:10:b2:5f:8d:66:3f:81:8d:00:
                    76:2a:2d:96:25:06:b3:21:f5:7c:16:c8:cd:d0:24:
                    75:5a:e6:d6:ee:66:29:ad:7c:40:60:47:bc:3f:0a:
                    53:38:43:0c:f0:96:7c:73:a6:8d:19:bf:92:29:d7:
                    9f:d0:f6:8a:6d:dd:d8:06:5f:61:db:ee:0b:5b:ac:
                    3a:66:f8:50:7c:7a:d6:eb:ac:b5:3e:ec:30:b1:36:
                    da:0f:90:02:d4:9d:2c:fe:0c:a7:8e:6f:50:08:76:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AA:02:06:D0:0E:38:22:19:A0:D2:4F:A3:46:85:D1:2C:AB:0D:58
            X509v3 Authority Key Identifier:
                keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:fe:13:46:fd:47:40:9c:d1:80:5a:ad:f2:29:af:b9:2b:
         c2:df:e2:25:7d:bf:b9:47:fc:74:fa:e8:64:e2:dd:92:bd:8f:
         42:82:a5:15:f1:5b:51:5c:84:fc:b0:a0:5d:7c:94:03:86:90:
         69:91:08:ea:70:7c:1b:03:5e:89:de:fd:5c:c4:8c:af:89:55:
         aa:51:bf:4c:98:32:b8:78:78:57:f8:51:ac:8a:31:64:ea:c5:
         52:6c:6e:f5:45:7e:22:00:19:a3:79:b4:f8:dd:5f:7a:d4:1f:
         00:b7:e0:bf:f1:3b:34:4e:30:9e:33:4f:26:59:d9:a8:12:17:
         ee:69:9d:36:25:63:21:af:42:a6:42:11:eb:8c:75:fe:14:29:
         23:3b:9e:09:1b:86:d0:e1:85:2d:5d:04:c6:00:0a:ac:16:16:
         ce:0b:2e:fc:eb:be:67:40:29:72:47:12:42:df:94:c0:e6:ac:
         ac:31:57:72:fa:53:82:28:2c:5b:05:c7:2c:74:44:95:13:21:
         b6:f3:f4:dd:30:74:85:d4:53:b9:ff:67:b5:42:53:1e:08:18:
         bd:46:f3:39:88:54:5c:44:c0:5f:a5:7a:e8:ce:60:20:77:80:
         70:78:b1:32:3f:72:d2:8c:25:72:96:fc:cb:8f:0d:65:01:a3:
         4c:e9:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:53 2026 by rpki-client