This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File:                     AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier:          g2r7+vmrS8g/ZtwM7mbqtzOp5TPvAMUrzW7vXBI3fYU=
Subject key identifier:   AD:D8:4B:53:74:1E:B1:64:EC:97:1A:59:3E:33:0F:90:2F:FD:21:89
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer:       /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial:       019C42B498A0B7DF65FB6578823024274DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number:          133C
Signing time:             Mon 09 Feb 2026 14:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:57 +0000
Files and hashes:         1: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (hash: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts=)
                          2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: e3gEaII30J+CngrRT8rNd3gn4O84ohM21AsET58u2yY=)
                          3: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (hash: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:98:a0:b7:df:65:fb:65:78:82:30:24:27:4d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03196c89e554dbe4774522759906e2581a174694
        Validity
            Not Before: Feb  9 14:00:57 2026 GMT
            Not After : Feb 10 14:00:57 2026 GMT
        Subject: CN=add84b53741eb164ec971a593e330f902ffd2189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:6f:a8:62:41:dc:8b:80:d6:b2:80:5c:1a:
                    30:69:01:81:4e:e3:fc:01:12:f4:e5:c4:10:28:ae:
                    bd:28:23:81:fc:f8:a3:4d:c0:af:78:9a:01:95:6a:
                    3c:c6:ea:ad:b0:4e:43:8c:7e:0c:68:a1:c0:53:f7:
                    8e:5a:73:d3:6a:68:0a:4f:c4:42:90:f7:74:d5:8b:
                    8b:d6:24:8b:4c:01:38:2d:92:30:3f:23:5a:f8:3a:
                    07:ed:11:ef:7b:f9:f6:e8:e6:b1:1e:01:73:36:74:
                    6a:f1:a3:ec:2e:7c:6d:fe:c0:fa:8c:9f:24:42:7e:
                    ac:40:ff:70:4c:8e:93:87:35:db:0b:b3:3f:b3:80:
                    ef:6f:93:ea:47:81:f6:4d:41:fd:5d:c2:db:4a:0f:
                    0a:de:25:e3:86:66:0f:5e:91:f5:b7:af:cf:5b:0f:
                    fb:3b:c6:4a:5c:fd:62:c3:96:cc:c1:ae:c6:b7:88:
                    68:ed:62:c4:aa:5d:31:1e:ed:0b:ff:d8:33:09:59:
                    fd:9b:d9:67:9e:8a:f3:54:c9:4e:d5:ae:e2:24:01:
                    71:f5:03:f0:61:f0:0f:94:1a:dc:20:2a:8d:14:77:
                    84:08:20:63:5b:8e:ae:0c:43:00:fe:f3:6f:a6:20:
                    29:53:8a:de:b2:7e:48:18:51:d6:60:53:47:1b:e6:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D8:4B:53:74:1E:B1:64:EC:97:1A:59:3E:33:0F:90:2F:FD:21:89
            X509v3 Authority Key Identifier:
                keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:82:8d:cb:24:76:a5:7a:1e:4a:f1:0c:76:e4:a4:08:10:24:
         9c:94:d5:f4:01:2d:05:f9:d6:24:f9:f0:1b:51:e2:57:80:d9:
         6c:53:e7:f9:d3:2a:d5:d2:fa:a7:47:1a:f5:14:b4:fd:27:a3:
         6a:e9:df:7c:2e:ea:18:49:e8:26:41:fb:a6:34:d7:49:20:71:
         2f:81:dc:ea:16:e0:99:c4:2e:3d:fb:f7:b3:e0:e1:d9:6b:68:
         40:45:7f:05:22:70:38:08:f3:82:1b:32:43:92:30:12:9f:a7:
         13:27:84:0c:e9:13:0a:7d:60:ff:6d:70:bc:13:61:76:cf:37:
         9e:33:92:fb:c2:12:12:a6:1b:74:59:c1:13:5c:3d:34:63:57:
         07:77:5d:30:90:49:1a:0e:d8:bd:2f:a5:80:55:27:90:48:44:
         12:15:6d:63:d6:7d:1e:02:bf:b4:f1:63:18:2b:16:26:7a:1b:
         e0:c9:85:6a:0c:d3:cb:b8:3b:f2:60:60:d4:71:96:db:12:0f:
         a0:eb:a5:5a:86:bc:64:3a:78:f5:cf:f1:c1:85:31:29:60:9a:
         a1:c6:77:13:75:67:9a:80:de:60:69:b1:c4:e4:e0:62:be:3c:
         67:b0:91:23:33:cc:3f:97:fe:d3:d6:45:91:5a:b0:d1:95:6a:
         34:76:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:35 2026 by rpki-client