This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File:                     swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier:          SVxV6jPEZ9iLVVOpn9CfcLelTi1OzK5C6DDXG55j1wk=
Subject key identifier:   4A:A3:2C:28:F9:2C:12:E2:F6:61:42:EB:27:EC:07:AA:D4:15:9B:02
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer:       /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial:       019C45ECC6AC48E4C074438ADB8A1B899D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number:          0482
Signing time:             Tue 10 Feb 2026 05:01:11 +0000
Manifest this update:     Tue 10 Feb 2026 05:01:11 +0000
Manifest next update:     Wed 11 Feb 2026 05:01:11 +0000
Files and hashes:         1: GH-U3lzB4LZDFyVG2bUd3n4SBfE.roa (hash: sTn8rRWu0dVA+yyqQLOUoU8NLea1KDmgRn4CRX9pCbE=)
                          2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: 2uru7YgzsDjy7jOx0J1TlmP1zLbc4SxJABCqXVSCks0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:ec:c6:ac:48:e4:c0:74:43:8a:db:8a:1b:89:9d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
        Validity
            Not Before: Feb 10 05:01:11 2026 GMT
            Not After : Feb 11 05:01:11 2026 GMT
        Subject: CN=4aa32c28f92c12e2f66142eb27ec07aad4159b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:8a:4f:2f:f9:10:7c:d3:ae:09:ac:00:3a:
                    cf:b7:73:f5:b7:f1:0e:74:87:d8:f6:df:f7:77:5c:
                    48:9a:21:d1:6f:15:e7:cb:26:ea:01:a4:ff:b9:d5:
                    fb:c6:9f:95:e9:19:58:61:ac:d3:42:84:41:58:3b:
                    06:9c:59:0b:b0:7c:0b:38:7e:64:d0:c7:95:b4:c9:
                    5d:ed:8f:df:17:c5:4f:70:7b:b4:3a:c0:72:0c:1d:
                    c8:33:40:a8:e9:80:2b:18:1a:64:af:01:dd:c1:9d:
                    1e:c2:0c:67:5b:9d:3d:ea:ad:81:74:df:77:19:a2:
                    92:bd:6d:16:b6:05:27:7a:a6:07:30:05:c5:40:8f:
                    2c:24:1f:4e:8f:36:78:88:f5:f6:9a:db:d3:21:f9:
                    50:bd:5b:e9:4e:24:67:78:a7:84:26:db:5f:01:2c:
                    3e:11:1e:7b:a1:ce:c3:93:c5:8f:be:72:e9:5a:76:
                    ad:4a:9c:6a:36:d2:69:6e:22:1a:8d:75:1d:7b:c8:
                    5d:7e:d5:f1:3a:20:04:9c:67:d5:d6:6c:d3:77:47:
                    88:d1:93:d9:0e:2d:66:66:b7:5f:b9:0b:e5:2c:64:
                    ed:d5:3e:49:63:c0:ee:9f:2f:25:69:92:b5:3e:57:
                    23:6d:68:e0:4e:d9:7b:d4:f7:0b:48:a2:9c:2b:ad:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A3:2C:28:F9:2C:12:E2:F6:61:42:EB:27:EC:07:AA:D4:15:9B:02
            X509v3 Authority Key Identifier:
                keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a6:98:77:29:49:84:8d:cc:81:af:c0:cc:0d:4f:10:16:6a:
         48:ff:32:94:0b:7a:2c:f3:68:c3:10:ab:5b:d0:7b:cc:9e:c5:
         67:cc:69:67:68:f9:e5:b7:d0:f2:ab:95:15:b4:c6:2e:1c:37:
         e7:b8:48:9b:c9:cc:ef:91:b8:bc:69:68:6a:ad:54:1f:1d:ea:
         22:08:6d:08:a4:34:84:bc:6f:c7:e1:01:2a:74:59:ea:f8:97:
         6d:88:a8:0e:67:b2:99:40:d5:56:fb:e4:34:f4:e2:0a:0a:51:
         8d:a4:df:39:5f:ab:6d:20:1b:5b:f9:7d:3b:4d:e7:af:50:b3:
         e5:f7:4d:0a:28:5f:50:06:67:70:2c:33:c9:ed:f6:a0:b6:70:
         90:59:76:1e:bd:83:11:3a:7f:93:76:cd:e7:b1:c9:8a:6f:a0:
         3e:71:bb:22:b7:74:8c:fb:32:ca:c4:d8:72:44:42:68:65:cc:
         44:47:64:e4:64:14:79:fe:66:36:4d:a4:77:ae:d5:96:35:35:
         14:df:46:7a:f9:60:1b:ea:ad:c3:71:23:79:71:68:19:61:5e:
         82:da:79:66:12:bf:dd:ca:d8:f0:a5:03:da:97:4c:e8:3b:00:
         2d:1a:f2:a1:5a:4a:3b:7e:57:41:06:ff:7f:16:38:a4:7a:22:
         82:6e:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 10:14:10 2026 by rpki-client