This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File:                     Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier:          8EJIjTNuPtfuCC1KQo1euWHNN0t6ohS40rW7q7BlIPI=
Subject key identifier:   5C:18:13:A2:BE:97:A7:27:33:DF:41:F4:2D:D3:9D:38:33:E8:CA:B1
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer:       /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial:       019C424672A29E078EF6DD7F1BEF4D457E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number:          1549
Signing time:             Mon 09 Feb 2026 12:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:38 +0000
Files and hashes:         1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: 6nKjXimyJNzq0P5Lut6xlgnjzO6u3tPMFKYMV7tUSNU=)
                          2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:72:a2:9e:07:8e:f6:dd:7f:1b:ef:4d:45:7e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
        Validity
            Not Before: Feb  9 12:00:38 2026 GMT
            Not After : Feb 10 12:00:38 2026 GMT
        Subject: CN=5c1813a2be97a72733df41f42dd39d3833e8cab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:e7:d2:f5:ea:70:61:63:1c:d7:2c:22:f1:
                    cd:82:83:66:b1:7a:b9:0e:b5:02:14:ec:2c:1d:df:
                    d2:ab:29:85:7a:83:3f:f5:00:1f:54:29:c2:94:08:
                    61:06:b4:7d:f4:cf:f6:46:0f:6b:22:5f:32:b0:23:
                    ed:25:d8:47:3c:bb:63:9b:8f:cc:d3:e7:ec:3f:20:
                    f8:6b:b6:fc:55:af:9c:79:63:95:50:a9:39:2f:7d:
                    07:df:d0:4e:23:ce:ab:59:5f:ec:54:8d:91:63:0d:
                    39:d2:6b:ee:ab:08:01:af:06:eb:95:3b:fc:5f:e3:
                    bb:63:9f:bc:cb:39:cd:ad:1f:a2:aa:92:a4:9b:32:
                    12:1c:ef:22:bc:64:b0:df:09:5c:2b:9d:43:ae:94:
                    05:81:32:49:7c:f7:75:48:1c:d9:3a:6a:ff:b7:37:
                    d2:c7:22:51:15:54:87:d8:16:be:3d:8d:77:b6:c8:
                    b0:af:28:b7:b0:d9:a3:ff:49:8d:87:8b:f2:d1:65:
                    07:f7:78:15:4a:71:c9:ac:74:41:d9:d5:f6:57:63:
                    17:ce:48:35:55:70:a0:0a:c8:2c:df:cb:06:3f:95:
                    77:8b:bb:f0:31:ae:f8:61:ce:1b:89:1b:9c:5f:b4:
                    db:50:e6:f9:39:44:62:31:32:59:9e:a3:32:70:20:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:18:13:A2:BE:97:A7:27:33:DF:41:F4:2D:D3:9D:38:33:E8:CA:B1
            X509v3 Authority Key Identifier:
                keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4a:2c:f6:7d:a1:c9:67:14:00:c7:34:eb:57:af:86:82:a5:
         29:82:16:3e:26:1a:c1:47:48:e3:08:b7:e9:e9:8a:a8:2d:6e:
         02:6b:a8:b5:65:7d:ed:2e:54:cf:45:b9:59:25:73:f2:85:cb:
         5b:1a:d3:3d:6d:d4:a7:b9:b7:43:be:bf:6a:dd:c3:a4:ce:54:
         e6:42:f0:55:9f:03:37:44:30:d6:6a:f0:e5:9b:84:f7:0f:ac:
         8d:b1:d3:9d:72:64:62:e0:21:24:04:9f:4b:e8:c3:ac:48:f9:
         b4:03:09:7c:12:02:4d:1a:19:80:4e:fb:51:c9:68:62:a9:d3:
         d6:ef:93:68:6b:a9:d7:8f:07:e2:34:2e:58:36:ea:be:2b:51:
         16:72:b1:3b:f8:b0:30:cd:a1:03:15:0f:14:ef:53:af:7c:46:
         c9:57:77:30:55:4d:81:39:37:3b:39:b6:92:f5:93:2f:1a:a7:
         4d:f8:92:10:99:64:a3:fa:4b:d9:86:73:fc:bf:d0:a5:57:a5:
         5c:ec:ec:be:ed:d8:41:03:4c:40:31:82:89:a3:6f:71:4b:e0:
         c6:37:38:72:14:01:ad:e1:2b:1c:a5:80:56:4e:99:86:71:b9:
         8d:e3:86:3b:70:be:f9:71:2d:2d:f2:21:ee:2a:e6:1c:79:1f:
         82:95:35:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:27 2026 by rpki-client