This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          5D2jAwIWvcL/58RrdgMkCR8eyzFpmwo7TeOf4NoeYpE=
Subject key identifier:   00:F1:E5:51:1B:A7:6D:47:9F:9E:76:EC:E0:24:D6:06:89:F9:6C:6E
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       019C435950E891B118941B97C419A27F40D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          1512
Signing time:             Mon 09 Feb 2026 17:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:52 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: MSPCGrnKdBaM3haqIlwimBwuHwr3ZWDTigvU+NdVS9s=)
                          2: htjYZ9JBO2eJvDfIw7akHdbswEA.roa (hash: i2ODfKpZOto1cBGwXz5NxaTX+a6SvokP9Jli5HlOhng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:50:e8:91:b1:18:94:1b:97:c4:19:a2:7f:40:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: Feb  9 17:00:52 2026 GMT
            Not After : Feb 10 17:00:52 2026 GMT
        Subject: CN=00f1e5511ba76d479f9e76ece024d60689f96c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:19:f0:cb:0b:c9:a5:4a:a3:76:0b:d4:4e:
                    4d:12:ad:c1:2d:c7:ed:a3:e9:cf:50:af:3c:e2:54:
                    11:f1:63:ce:ce:87:09:bd:7c:e8:dd:6b:70:01:3d:
                    ef:ba:be:c7:c2:38:73:4a:4f:ff:25:da:e5:fb:7f:
                    1d:d5:20:ed:d4:48:3b:bf:d8:60:c6:dd:3f:cd:7b:
                    b3:7a:89:6e:5a:bc:ce:33:c9:66:be:54:48:13:2f:
                    6c:a4:cf:0c:29:be:b6:17:a7:cb:13:ae:99:de:74:
                    9b:3f:c7:e6:9b:b5:e3:59:26:c6:92:f7:9e:9f:46:
                    98:7b:b7:f4:be:5f:fb:88:61:dc:fc:d2:a8:45:eb:
                    4a:62:2c:54:b5:7c:d7:27:b3:20:20:85:a3:67:1e:
                    26:93:f4:51:48:8d:c9:ae:14:bc:b5:40:02:89:8e:
                    13:1c:0b:91:6b:d4:d2:11:31:a3:14:86:13:00:39:
                    86:b6:ca:d0:9b:b4:ec:5e:4c:1a:ab:8b:c7:95:aa:
                    a9:2c:80:f0:cf:59:e4:c7:b1:0f:93:90:e7:0d:94:
                    47:0f:90:e3:7e:3d:f0:c7:df:bd:7b:b8:3c:f2:dc:
                    ae:0c:e6:e9:4d:85:ea:de:01:95:37:b9:8f:1d:c1:
                    5a:38:77:80:47:ca:07:e6:11:23:88:ca:86:5e:43:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F1:E5:51:1B:A7:6D:47:9F:9E:76:EC:E0:24:D6:06:89:F9:6C:6E
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:18:20:07:03:65:1d:48:aa:95:83:f9:66:04:18:18:7d:
         f4:1c:a1:a1:48:05:d0:89:ab:87:15:df:56:db:f5:17:a4:be:
         03:84:30:d8:54:a1:ab:23:cd:8f:5d:5d:bb:7b:2f:b0:cb:b6:
         99:3d:44:24:eb:17:7b:54:1f:16:c4:6e:16:64:99:8f:f5:f7:
         00:c0:7d:27:cc:3f:71:c9:42:96:4d:cc:f6:8f:fb:16:03:1d:
         12:25:79:95:4d:ff:38:98:14:81:e5:89:6f:2d:d7:e2:a1:54:
         c9:ec:5f:fa:b3:fd:fb:cc:d1:6e:b0:68:e3:0b:50:7a:fd:d8:
         ce:52:85:9b:68:4f:9d:e4:a3:5a:00:8a:1e:3d:86:2f:01:84:
         3a:b5:cd:07:02:62:c0:43:a8:32:b9:96:9f:d8:bf:ec:07:92:
         88:d4:8a:73:af:d8:33:6b:ba:3c:db:29:48:1b:dd:48:79:07:
         d3:9e:0d:46:03:73:ac:76:90:b4:08:c7:38:78:47:1f:e1:67:
         f6:1b:08:56:9c:6a:14:67:71:06:c5:23:1a:0a:b2:3f:9d:22:
         d7:ad:be:cb:56:b0:ae:c6:70:8a:8c:d3:e7:c0:44:90:ba:b1:
         3e:8b:05:fb:b0:ea:4f:ca:40:e4:af:4a:ef:4b:39:9e:76:5a:
         cd:8c:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:54 2026 by rpki-client