This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File:                     se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier:          8FS3x1ipNZ2qfnMSs7qO9mnW5FumeYjS5Ui0VqYPi+0=
Subject key identifier:   99:B4:91:F0:00:3D:5C:23:73:5C:20:26:78:40:F9:25:CE:03:EA:28
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer:       /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial:       019C427DA9091CF984BFCA069F3C090BCDD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number:          0D6B
Signing time:             Mon 09 Feb 2026 13:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:57 +0000
Files and hashes:         1: Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa (hash: UBZQn4YtqRGaTXDZC6SHIOianNxT0DmdDIUesthKpiY=)
                          2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: nphff+kC3L3+MkwhT/E4BhXlF96uBwy2d9AFTYDEork=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:a9:09:1c:f9:84:bf:ca:06:9f:3c:09:0b:cd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
        Validity
            Not Before: Feb  9 13:00:57 2026 GMT
            Not After : Feb 10 13:00:57 2026 GMT
        Subject: CN=99b491f0003d5c23735c20267840f925ce03ea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:be:fb:2f:d2:30:13:8c:6e:27:66:45:ab:
                    33:ae:4c:52:0e:19:2d:f5:8a:22:ad:2e:07:a9:03:
                    97:ad:59:b4:88:1a:5e:8e:0c:d2:75:d3:b2:da:f1:
                    54:d6:1d:86:3a:58:cb:49:1c:7d:aa:c8:4f:25:ac:
                    3b:ef:ee:24:f5:f8:56:4e:4d:e8:28:61:5c:75:75:
                    ce:0a:83:4b:25:8f:f8:5a:30:4d:df:79:f3:9d:19:
                    1e:b3:34:a5:7e:0b:e1:09:61:b8:29:5e:01:7b:a3:
                    a2:07:17:cf:c8:57:12:23:c8:62:37:f2:35:96:be:
                    10:d2:93:16:b2:1a:26:d8:c4:5c:e5:55:75:ff:e7:
                    da:45:21:95:b0:cc:2a:98:4a:12:d2:ca:e1:af:46:
                    df:b3:26:29:32:31:97:03:35:20:1f:fb:0c:fc:32:
                    5e:04:30:b0:1a:8c:06:0a:ea:25:e0:55:43:6c:ef:
                    d0:78:fd:ca:ef:a5:fd:02:eb:a2:ab:94:22:59:44:
                    8a:62:0d:49:10:9c:69:f9:67:5b:37:0d:b0:96:03:
                    2d:f2:57:d6:77:da:76:bf:67:6d:0d:bd:a8:a4:84:
                    2d:d8:16:ac:a7:19:72:7c:b2:f1:49:1e:9f:b1:5f:
                    78:b9:98:e6:e2:ee:3b:5a:87:e1:d7:6e:a9:bc:33:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:91:F0:00:3D:5C:23:73:5C:20:26:78:40:F9:25:CE:03:EA:28
            X509v3 Authority Key Identifier:
                keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:18:ea:8e:5d:c1:11:80:13:cf:78:b8:ac:b4:00:ec:64:15:
         81:e3:70:0c:55:53:15:0b:ec:82:8c:70:ea:6c:87:2f:11:6c:
         0f:a0:53:2d:3f:f6:22:d5:b5:be:0b:41:60:46:b0:d4:ed:88:
         f6:18:c7:80:1a:3a:e3:23:d7:c2:e0:89:88:ca:79:e5:8c:2d:
         67:11:e7:53:7c:35:74:dc:80:9d:47:b0:30:5b:c2:45:d7:ec:
         af:0f:4e:86:fe:5b:23:60:18:e4:0b:db:a3:4d:53:d9:be:21:
         53:59:74:00:ae:ad:4c:4a:d2:8f:37:f4:d4:bc:58:d1:1c:3a:
         4a:81:34:4d:92:5e:d2:69:f0:2b:cc:a6:a0:61:21:57:33:f7:
         94:d5:3e:4e:03:8b:00:1e:93:ac:82:50:32:20:71:34:2b:a5:
         6a:e5:02:41:ad:7c:e0:db:f2:10:90:1d:62:ce:09:3c:59:b4:
         05:fc:ca:7d:6a:12:9e:e5:2f:0b:4b:9c:75:e6:4f:74:6f:d0:
         c6:74:20:a5:60:32:90:4e:f1:fd:f3:b0:9f:11:7a:4b:2e:d4:
         05:d0:3d:ce:f5:af:f2:e9:47:4f:71:71:f2:d0:f4:6c:17:6d:
         a8:01:b1:9b:9b:a2:6b:05:1d:c9:6e:21:0c:25:9a:0e:6d:a9:
         4d:86:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:02 2026 by rpki-client