This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File:                     cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier:          5KnsSNytFKoMn37BoUZx1TDx6TgbcwiVwG0M6gMgv30=
Subject key identifier:   EE:F4:3E:9C:8A:63:7C:7F:9B:D5:94:30:4B:3C:C8:E5:1F:88:EB:DA
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer:       /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial:       019C42B4443A92BFE01794C106DEFC84BA96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number:          1521
Signing time:             Mon 09 Feb 2026 14:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:35 +0000
Files and hashes:         1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
                          2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
                          3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: D67U8CjKOgO3li9R2wmNKBL5jhn3nGKbJM3G1LFMYXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:44:3a:92:bf:e0:17:94:c1:06:de:fc:84:ba:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
        Validity
            Not Before: Feb  9 14:00:35 2026 GMT
            Not After : Feb 10 14:00:35 2026 GMT
        Subject: CN=eef43e9c8a637c7f9bd594304b3cc8e51f88ebda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:42:6e:68:7f:82:c2:b7:b6:80:44:66:96:
                    fb:b1:65:09:ec:4e:73:a7:9a:61:b9:35:3a:90:2a:
                    7a:00:4d:e4:87:37:73:17:b3:0f:8d:83:a6:ec:dd:
                    8d:ef:5d:7c:97:f6:ac:17:4e:48:c1:aa:62:d5:7f:
                    86:26:4d:af:44:0c:a3:4e:5a:55:4a:3e:fe:94:db:
                    bd:13:3c:6c:18:5d:e5:7c:69:5b:eb:57:43:6c:83:
                    38:a0:c3:4d:28:ce:50:b0:78:96:70:8b:6d:f7:28:
                    a8:33:51:85:f3:a3:c5:46:32:98:69:cc:92:11:ab:
                    26:e3:5a:12:cc:8f:e3:89:25:48:f5:d8:fc:3a:0e:
                    1a:c6:49:0c:21:96:50:6c:5f:3d:48:1f:0b:09:bc:
                    be:33:ee:08:6e:c6:1a:91:8d:ab:50:86:1e:98:27:
                    14:f1:7c:84:02:31:48:d5:53:72:e4:1e:25:41:d4:
                    3e:9e:b5:79:4e:96:ae:d7:6c:7b:7d:ad:56:c2:ca:
                    07:6e:92:ec:eb:41:d6:3e:15:11:7a:bf:11:34:8b:
                    c5:6d:15:10:7f:bb:fc:d2:0f:f6:3a:94:0e:b2:b7:
                    a6:c2:19:b8:a3:1c:b7:25:6c:fe:f0:47:cf:e3:e0:
                    0b:1b:5a:be:6b:2f:a2:df:2f:ba:e9:06:3f:b1:3d:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:3E:9C:8A:63:7C:7F:9B:D5:94:30:4B:3C:C8:E5:1F:88:EB:DA
            X509v3 Authority Key Identifier:
                keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3d:bc:3f:b3:22:9e:07:08:9c:92:bb:9e:38:86:e3:aa:a5:
         b0:42:c1:10:0b:94:84:d2:f9:f8:60:8e:f7:c0:f2:52:e3:5d:
         d4:f0:3a:e2:16:95:c7:7b:c9:1c:54:91:6a:05:1b:e4:bd:94:
         ef:db:66:34:dc:8f:55:e4:15:b1:ab:c2:11:6d:bf:8f:47:89:
         ab:fd:e3:75:ba:0f:0f:d1:78:5e:8b:e2:7d:95:e2:53:aa:66:
         cd:ad:72:60:03:e1:7d:1a:a0:02:05:19:89:88:a6:62:50:e5:
         70:ac:e1:89:00:d0:71:d2:32:56:7e:48:ce:c3:31:f0:32:42:
         81:47:07:73:75:d3:a8:35:ab:b9:c8:49:38:4f:5a:3f:ab:fb:
         72:e7:1c:b7:8b:b5:11:1f:63:35:e8:8d:fd:93:66:f7:5b:65:
         3b:66:92:05:7d:f3:1c:42:db:c9:91:30:08:9f:2d:c2:ac:26:
         a9:7d:69:a4:ea:18:c0:d4:53:ff:42:61:fd:84:53:46:7d:ac:
         3f:69:30:3d:7c:4a:fd:ab:a0:c8:54:8b:6a:91:5c:8a:03:14:
         5f:38:3c:22:03:58:bf:9c:04:75:1f:a7:ea:72:25:01:31:9a:
         2e:16:e8:37:99:91:43:a7:b3:ea:8b:02:90:b3:f1:3f:c9:3b:
         66:25:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:35 2026 by rpki-client