This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File:                     1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier:          YFsxwXyG0/Suw9eRpeH5ZthK58dks8dASEztr20eWrw=
Subject key identifier:   BE:A7:73:59:77:F6:96:2E:F4:4D:F8:CA:DB:F1:A1:13:8F:58:73:E0
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer:       /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial:       019C4390193AD0F6B428054AFECF726C9EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:42 +0000
Files and hashes:         1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: yXvvoausuIjqVYiP0PMJKsiiViUM96ZC6yAZiVHRZFI=)
                          2: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (hash: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:19:3a:d0:f6:b4:28:05:4a:fe:cf:72:6c:9e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
        Validity
            Not Before: Feb  9 18:00:42 2026 GMT
            Not After : Feb 10 18:00:42 2026 GMT
        Subject: CN=bea7735977f6962ef44df8cadbf1a1138f5873e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:2c:9b:a0:bb:68:77:4c:17:86:80:44:35:
                    ac:52:19:8b:ee:ab:8e:ec:c9:c4:08:af:04:d0:9f:
                    52:b0:0e:30:21:eb:24:bf:3d:86:08:4d:0b:df:62:
                    9f:97:52:03:81:cd:de:db:1c:89:cf:4f:ab:da:23:
                    da:a2:87:83:dd:21:6a:4e:c1:0a:ef:41:43:8e:a8:
                    a4:36:69:b2:07:b3:42:4e:36:ac:34:b5:2f:f1:be:
                    73:45:cd:c7:2c:ea:89:ac:5a:e6:77:b0:c3:cf:9c:
                    23:1f:3d:6d:c6:0c:f6:92:0f:b0:92:48:9c:46:35:
                    90:67:85:91:e1:6f:24:be:16:c3:69:d9:79:42:dc:
                    09:ad:db:f2:1f:15:0f:c0:04:f2:17:4a:7a:86:61:
                    d6:2f:52:d3:eb:71:b8:e9:27:9b:c9:a3:ca:d6:1d:
                    d6:3a:42:0b:e7:db:00:9e:dc:db:1a:4a:e0:9f:71:
                    64:e1:ca:a0:9e:22:62:7a:bb:7f:92:7b:97:7f:0c:
                    e6:8d:99:81:7c:1e:dd:f9:4d:f1:34:ca:e7:2d:34:
                    c5:4e:5b:d8:6c:6e:10:e9:27:b2:51:5c:c6:5b:34:
                    d1:dd:01:11:ad:e9:d6:a2:2d:1f:a5:ce:eb:da:92:
                    85:ab:aa:ec:09:0e:7e:fd:15:57:e8:c3:70:f1:a7:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A7:73:59:77:F6:96:2E:F4:4D:F8:CA:DB:F1:A1:13:8F:58:73:E0
            X509v3 Authority Key Identifier:
                keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:39:b5:45:6c:19:33:07:b6:10:48:25:e0:c0:31:0a:2f:
         39:58:73:fa:76:bd:f9:70:4b:cf:73:eb:b3:30:ab:bb:86:c1:
         1e:8d:35:a7:d4:a1:42:fe:07:0e:2e:e5:dc:14:b7:22:ac:4e:
         65:20:24:a7:ad:6f:95:9b:ad:01:98:ba:3f:72:bb:a3:0f:25:
         55:e0:cd:01:f5:ba:ff:c9:98:f9:d1:a6:48:31:b0:2c:9a:7c:
         35:a5:a1:fa:50:b8:61:9b:00:da:16:2a:ff:3c:e5:63:f0:0a:
         ea:bd:c7:af:a0:29:04:ec:e7:3d:fa:34:65:df:3b:2b:9a:66:
         88:58:ca:76:a5:94:1f:0e:37:69:36:e9:20:1e:b9:ae:20:4f:
         4d:12:95:44:78:83:b5:fd:f3:48:cc:14:04:c0:26:15:b2:da:
         1b:ae:0d:c6:95:34:fc:bb:77:68:4d:1d:7f:90:ce:43:40:09:
         de:9b:7f:63:c3:fb:38:cb:78:cd:7d:34:4b:fa:02:d3:a0:c0:
         c3:73:d5:74:1c:d1:99:de:92:bf:b1:36:93:69:32:5a:0a:0a:
         b3:72:d0:36:47:06:42:46:82:4a:89:12:ce:3d:99:13:b4:fd:
         eb:1a:59:5a:2b:5e:d6:93:cb:3e:3a:53:6d:e4:84:4f:88:e2:
         84:09:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:52 2026 by rpki-client