This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File:                     U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier:          j1G71wOcj3qZaa1Hf0X3jv/gop+6fo6LeG+9ItjN45Q=
Subject key identifier:   54:A1:15:B5:7D:53:EC:97:42:CA:4A:19:CD:60:7E:3F:FA:5B:F5:92
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer:       /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial:       019C4358D85691BBEB8A9B28087D678AC311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 17:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:21 +0000
Files and hashes:         1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
                          2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: GhLWRNuyT+75xL0vdc4xb+jQgUpPdq6WhozzTGL0zv8=)
                          3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d8:56:91:bb:eb:8a:9b:28:08:7d:67:8a:c3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
        Validity
            Not Before: Feb  9 17:00:21 2026 GMT
            Not After : Feb 10 17:00:21 2026 GMT
        Subject: CN=54a115b57d53ec9742ca4a19cd607e3ffa5bf592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:50:3b:79:6a:9f:15:95:d8:ae:da:5d:3a:4e:
                    39:f9:73:72:8c:d1:23:55:40:f2:41:8e:cc:7f:20:
                    4b:7a:55:1c:9c:30:db:23:17:60:31:ac:cf:24:f8:
                    14:75:e7:4f:1f:da:f8:1a:e0:c8:b7:8f:38:c2:82:
                    06:4d:30:90:5f:77:5e:1f:f2:7c:e8:f7:f9:6f:2c:
                    0e:10:a5:79:6a:5b:23:8a:17:0e:29:f0:a4:46:7f:
                    ad:f8:83:f9:ad:ae:12:e8:24:f4:83:48:cb:79:aa:
                    17:74:e8:6d:4c:78:00:41:a2:20:d9:57:66:47:8b:
                    d4:a1:dd:b3:28:0a:18:89:52:db:93:0e:b0:20:1a:
                    9e:b2:eb:57:1a:63:30:60:f7:17:44:67:dc:ab:e8:
                    4d:11:f8:ee:c2:dd:2d:63:36:5f:51:54:e5:97:ca:
                    bc:12:6c:35:b1:b8:92:c1:0e:c5:3c:e9:e8:04:9d:
                    db:5d:d1:97:76:1f:1b:f6:ea:ff:d1:06:ad:0d:61:
                    2b:52:60:66:da:5e:15:db:6a:c3:04:28:cb:e8:0f:
                    9d:01:b5:50:3b:4d:62:6d:3b:96:9b:79:8f:5e:58:
                    ff:4d:be:9e:bc:7e:32:a6:2f:62:90:26:51:4b:2e:
                    ad:1b:bb:06:32:2c:90:fb:5e:01:6e:fa:76:ef:56:
                    78:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A1:15:B5:7D:53:EC:97:42:CA:4A:19:CD:60:7E:3F:FA:5B:F5:92
            X509v3 Authority Key Identifier:
                keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:33:d0:60:9b:61:c1:9f:06:7f:3a:c7:40:76:46:52:c9:
         fd:31:92:8b:82:0e:8d:08:b5:89:5d:e3:f7:b2:35:21:6b:72:
         c7:00:0e:5f:fc:f2:c1:60:f7:f9:6f:33:72:b8:5f:69:39:d0:
         bd:5f:8d:f7:08:98:f7:c3:33:21:80:db:4e:d1:c3:24:dd:a8:
         a4:6f:1e:79:3f:2a:2a:d5:3f:f5:65:d9:3d:c7:69:31:86:b5:
         4f:48:ec:85:d0:7c:04:11:69:51:64:97:87:4c:6f:eb:dc:7a:
         1e:2e:0a:1a:8b:8a:91:44:0c:32:d6:b8:91:b6:0d:b5:7c:d2:
         03:2e:7d:1f:39:29:dd:89:7c:3f:54:56:0c:09:4b:66:64:54:
         c3:30:01:b3:4d:96:ca:81:71:a3:f4:ab:b1:b6:cd:3b:58:84:
         a9:9c:e2:dc:be:d1:23:2b:29:88:df:27:f5:b7:ab:12:21:bb:
         ef:4c:4d:50:99:14:15:57:96:b0:8f:57:ca:a5:63:c9:1a:f5:
         d8:86:cd:14:59:0a:fe:73:37:82:5b:4a:62:ff:e8:70:54:ef:
         ef:47:aa:0a:ec:8a:b4:35:cc:c7:56:20:a6:a6:e8:cd:48:17:
         5d:3e:97:f7:52:a3:2e:5d:12:9a:9c:9d:a7:01:a5:da:9c:08:
         5f:94:7c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWNhWkbvripsoCH1nisMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3
ZjAyYTIwHhcNMjYwMjA5MTcwMDIxWhcNMjYwMjEwMTcwMDIxWjAzMTEwLwYDVQQD
Eyg1NGExMTViNTdkNTNlYzk3NDJjYTRhMTljZDYwN2UzZmZhNWJmNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lA7eWqfFZXYrtpdOk45+XNyjNEj
VUDyQY7MfyBLelUcnDDbIxdgMazPJPgUdedPH9r4GuDIt484woIGTTCQX3deH/J8
6Pf5bywOEKV5alsjihcOKfCkRn+t+IP5ra4S6CT0g0jLeaoXdOhtTHgAQaIg2Vdm
R4vUod2zKAoYiVLbkw6wIBqesutXGmMwYPcXRGfcq+hNEfjuwt0tYzZfUVTll8q8
Emw1sbiSwQ7FPOnoBJ3bXdGXdh8b9ur/0QatDWErUmBm2l4V22rDBCjL6A+dAbVQ
O01ibTuWm3mPXlj/Tb6evH4ypi9ikCZRSy6tG7sGMiyQ+14Bbvp271Z4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFShFbV9U+yXQspKGc1gfj/6W/WSMB8GA1UdIwQY
MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct
MDRkZmMzNjYzZTM1LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1
LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeMz0GCb
YcGfBn86x0B2RlLJ/TGSi4IOjQi1iV3j97I1IWtyxwAOX/zywWD3+W8zcrhfaTnQ
vV+N9wiY98MzIYDbTtHDJN2opG8eeT8qKtU/9WXZPcdpMYa1T0jshdB8BBFpUWSX
h0xv69x6Hi4KGouKkUQMMta4kbYNtXzSAy59Hzkp3Yl8P1RWDAlLZmRUwzABs02W
yoFxo/SrsbbNO1iEqZzi3L7RIyspiN8n9berEiG770xNUJkUFVeWsI9XyqVjyRr1
2IbNFFkK/nM3gltKYv/ocFTv70eqCuyKtDXMx1YgpqbozUgXXT6X91KjLl0Smpyd
pwGl2pwIX5R85A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:39 2026 by rpki-client