This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File:                     13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier:          gIZAEtG2NBhIP155f5wB17PVR4SbThvSHbhHBX1FrQg=
Subject key identifier:   D3:D7:04:00:EC:C1:6A:24:EB:DC:0A:7E:AF:E6:0C:B6:98:AC:64:9D
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer:       /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial:       019C416ADEF4F5C9CECFF9A184CCF914982F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 08:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:48 +0000
Files and hashes:         1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: 49JqSm7HyRuHyBef7m5FSV5+eSsiwoa6D3EMgmIch0c=)
                          2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:de:f4:f5:c9:ce:cf:f9:a1:84:cc:f9:14:98:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
        Validity
            Not Before: Feb  9 08:00:48 2026 GMT
            Not After : Feb 10 08:00:48 2026 GMT
        Subject: CN=d3d70400ecc16a24ebdc0a7eafe60cb698ac649d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:69:05:26:76:48:9f:0e:36:e5:81:f8:22:
                    92:e9:0c:d1:b6:d7:f2:ab:14:e8:0a:9c:dc:67:52:
                    12:30:2f:3f:fc:8c:09:2b:18:f0:67:78:de:68:c3:
                    2c:ba:c1:bb:7f:16:4f:04:3d:c6:ee:d0:6d:e0:86:
                    59:49:23:44:10:15:8b:f6:2d:df:e6:29:da:0b:75:
                    c2:89:e6:e8:8e:77:b1:41:24:e0:ac:4a:b5:53:ac:
                    11:03:7f:3a:0b:71:f0:58:65:0d:ce:29:c9:44:95:
                    9f:1b:fd:97:e7:10:b9:12:5d:f9:16:f6:3d:33:d2:
                    a8:0c:9e:83:10:fc:01:78:43:84:74:12:b5:39:e0:
                    8e:9a:23:81:8f:ac:37:56:58:d6:c7:65:63:29:6f:
                    99:1a:5e:de:87:7a:a8:a7:cc:1a:d1:7e:57:b3:8c:
                    75:aa:9a:db:de:66:ba:bf:5a:68:e9:ec:af:28:4f:
                    fa:8a:2c:9e:15:10:3e:e3:fc:40:24:4e:9b:31:57:
                    3a:b5:0a:7d:99:ff:b7:77:15:c6:1f:84:18:0b:d3:
                    b5:a4:07:9b:36:d9:7f:25:79:2d:ad:78:ee:86:e5:
                    88:44:50:55:02:b3:4f:be:a9:ac:4f:c7:79:66:df:
                    f8:fd:57:37:3f:55:a5:e4:d7:22:0b:1b:62:49:f0:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D7:04:00:EC:C1:6A:24:EB:DC:0A:7E:AF:E6:0C:B6:98:AC:64:9D
            X509v3 Authority Key Identifier:
                keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e5:0a:1a:b1:ce:96:13:9d:8b:a0:2a:33:db:d2:54:b6:7b:
         7f:82:05:e3:db:a8:09:b0:bc:89:48:ea:05:05:f5:fb:e2:46:
         b7:02:c4:81:b6:41:04:88:a9:0c:96:e3:6f:71:85:d1:ba:8e:
         27:0f:65:f2:77:16:08:ec:de:7f:0d:60:26:37:72:f0:6a:e7:
         42:47:08:7e:2b:6a:46:04:f8:86:3c:36:4f:f7:ed:76:61:cc:
         78:a6:c3:b4:04:d3:cf:fc:45:7d:59:fa:0d:80:ca:77:9f:ac:
         55:10:79:6c:25:f4:9c:53:0e:23:2e:31:95:8a:15:e5:fb:89:
         45:08:d0:d1:be:91:e4:74:7f:97:1c:f6:a3:3b:73:0d:b0:74:
         bc:84:9b:2d:4f:fe:d1:25:df:b4:db:7e:bd:94:5b:fe:b6:87:
         1e:5f:99:d7:da:b5:6a:31:b2:68:d5:8e:34:e9:f4:da:d6:74:
         17:96:c8:4e:08:b3:81:fd:51:0e:a9:62:35:9b:1f:e0:44:be:
         bb:4c:43:be:f3:2d:4f:08:5e:b3:d7:a7:ca:04:86:8e:51:52:
         b9:ac:19:52:0b:18:19:6d:9d:f5:25:9d:5e:d2:89:74:70:24:
         fe:86:70:a9:a9:5d:67:39:0c:b9:1b:85:2a:ef:fb:3a:c1:07:
         d7:51:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:00 2026 by rpki-client