This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File:                     1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier:          m8XMOn3S4jnh9vL80OBpAcfRjmgHBmWa74KC04m9VW8=
Subject key identifier:   71:7D:F5:00:22:D6:6C:7F:7D:E5:34:3B:9A:39:3C:60:6F:A3:35:6A
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer:       /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial:       019C42EAE4FCBA6D4484A206DDBAC061E514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:16 +0000
Files and hashes:         1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: Ai3BBBp/vBwIH/5VTL1qwiSurCpMZuZ2LztXMLvXCZ4=)
                          2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:e4:fc:ba:6d:44:84:a2:06:dd:ba:c0:61:e5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
        Validity
            Not Before: Feb  9 15:00:16 2026 GMT
            Not After : Feb 10 15:00:16 2026 GMT
        Subject: CN=717df50022d66c7f7de5343b9a393c606fa3356a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:39:f6:83:f2:e5:1a:ea:b7:fe:83:69:96:
                    90:e1:69:1d:7e:e6:cf:32:65:ae:87:9e:9b:b1:8b:
                    eb:24:7d:7e:8e:92:99:ff:06:b8:c0:85:8f:7c:31:
                    8f:77:2b:4b:3c:3f:78:2e:bd:1d:c6:5f:99:3d:19:
                    5a:9a:5c:c7:cc:5f:23:cd:87:ab:8e:f0:99:63:b9:
                    ad:b3:db:ef:fb:96:d1:4d:d8:b0:63:da:fa:b9:a1:
                    a5:4b:96:06:87:21:59:d5:87:52:9e:b5:a7:c7:7d:
                    48:85:ef:df:7f:11:ba:ed:8d:fd:da:81:9b:90:18:
                    87:04:ac:a9:d0:34:96:9e:ac:d2:24:5e:54:cc:56:
                    59:ce:46:73:fa:90:0e:0d:91:66:29:85:a9:76:90:
                    c0:23:52:fd:50:55:41:f7:97:42:bc:4f:af:ba:e5:
                    33:3b:0c:4a:4e:2d:ed:93:00:35:6a:79:4c:3a:81:
                    c9:7a:07:e4:f8:aa:71:e7:a1:28:06:4c:f0:a9:b4:
                    0b:ac:22:d9:45:ae:83:cc:fc:86:49:c6:97:cd:bc:
                    9a:3a:8b:8d:73:c5:90:a2:8b:41:74:bc:3e:00:e4:
                    40:d1:86:3c:6a:de:bf:c3:7c:fc:31:f8:4f:c0:10:
                    fd:6d:8f:ac:2e:13:fe:2d:50:57:4a:74:71:1a:12:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7D:F5:00:22:D6:6C:7F:7D:E5:34:3B:9A:39:3C:60:6F:A3:35:6A
            X509v3 Authority Key Identifier:
                keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:14:cd:05:2d:a4:8b:2f:e9:25:bd:90:09:35:87:fc:da:
         bb:65:3c:26:25:e9:61:30:31:57:ee:e7:c6:5d:02:9c:31:6e:
         5a:f6:36:59:f2:ea:b6:1a:3a:ee:30:48:12:a9:75:9a:61:38:
         70:e5:6a:0c:c8:9a:63:63:21:ec:3f:f0:a7:a9:a6:81:ea:25:
         ac:05:aa:e5:df:d0:b3:61:13:7f:50:ac:b7:44:fb:64:c5:48:
         ef:5d:98:f6:0d:fb:4e:fc:3f:fb:e1:13:6c:60:32:69:0d:d5:
         00:cf:0e:39:88:ea:ca:7a:11:fe:b6:42:78:a6:a4:69:f6:d1:
         84:57:9b:30:88:91:d8:15:a1:18:2c:b4:3b:95:e8:af:62:f9:
         fc:c4:94:73:9f:b7:f3:74:ca:9e:fc:44:cb:a8:c9:51:4e:e6:
         c5:40:11:28:17:0a:88:87:16:ca:43:c7:85:ea:0e:7b:ba:43:
         de:7a:f6:df:0f:cf:7b:37:93:fd:10:99:aa:1f:0b:35:60:7d:
         3d:b4:e2:68:28:ef:0e:f8:5a:09:c7:7a:ec:bb:72:d9:d8:d5:
         38:46:1c:99:9f:38:31:f9:2d:c1:7c:61:52:eb:92:be:c5:8e:
         44:29:b1:71:35:92:24:48:92:60:9e:fb:07:95:8b:83:79:77:
         70:0a:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:00 2026 by rpki-client