This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File:                     1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier:          O5EBi0d6oGsZOCxhP/fHsEMBXVf81uCtW8Z18BtRo6Y=
Subject key identifier:   52:D5:75:F4:95:41:B7:E9:55:BE:9D:94:C8:3F:04:7F:15:E3:DA:2D
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer:       /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial:       019C438FB96C47ACE86247B26DDBECCC4437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:18 +0000
Files and hashes:         1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: uACkVWlQe0+qvtTdPuE5OPP/Jj1ZEqj+ZnEF2ZMZqLQ=)
                          2: 1uX0D5LWNKsugIOiHmXXeEX9QKk.roa (hash: gvHTkDV5ycG/B3qdH64yHwOTQievfqOngQJwMYqbC/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:b9:6c:47:ac:e8:62:47:b2:6d:db:ec:cc:44:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
        Validity
            Not Before: Feb  9 18:00:18 2026 GMT
            Not After : Feb 10 18:00:18 2026 GMT
        Subject: CN=52d575f49541b7e955be9d94c83f047f15e3da2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:ab:c7:e3:31:71:c6:a5:83:a6:4f:77:a2:
                    53:b3:4e:fd:5f:55:96:9b:18:55:c9:72:cc:0b:0f:
                    8d:68:5e:46:ed:8c:68:4a:cb:94:26:b2:77:54:26:
                    4e:00:10:19:1e:1d:ae:9b:60:ee:ea:d6:43:41:b6:
                    78:ad:bd:4a:61:ae:16:3b:01:d0:9b:cf:82:a5:d0:
                    4a:ec:9e:31:25:53:01:ca:d0:4e:53:b3:ca:48:c5:
                    91:7c:ff:16:8a:1b:05:c1:89:77:64:76:fc:1d:17:
                    8f:f4:ac:7a:b1:cf:45:16:b0:73:74:48:76:1b:36:
                    a4:3a:f4:8f:2d:97:6b:04:64:bf:38:8f:ce:25:b8:
                    17:ea:5c:03:f2:58:a4:c4:b2:93:46:72:24:72:eb:
                    be:47:8d:0f:a5:d9:dd:59:c5:1d:0e:72:e9:01:05:
                    cc:95:fb:97:72:10:dd:c8:bb:f6:0d:df:33:50:7f:
                    40:0a:dd:10:03:cc:62:b4:ec:72:f9:24:64:4f:5b:
                    ac:9c:cf:91:b4:62:77:66:14:2c:54:8f:3a:82:0b:
                    46:60:b2:ef:15:a6:13:90:52:66:10:41:98:04:52:
                    bf:83:1c:58:f5:36:69:d3:0c:66:aa:2e:30:8a:40:
                    c8:d1:0e:a9:67:c2:8a:6e:5a:22:ed:41:0b:f6:ae:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D5:75:F4:95:41:B7:E9:55:BE:9D:94:C8:3F:04:7F:15:E3:DA:2D
            X509v3 Authority Key Identifier:
                keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:7f:13:92:8b:da:97:51:5b:9f:09:d6:62:78:dd:7c:58:
         bc:c4:4b:ff:94:f6:c2:c2:d9:84:e1:85:90:30:e9:f0:50:62:
         49:72:d9:16:b4:05:0e:b3:3c:78:9f:55:c7:02:89:99:ff:b5:
         93:cb:89:c6:06:39:f2:79:44:98:97:75:ab:19:97:94:0b:94:
         be:38:c9:36:41:fc:06:09:9a:e9:e1:f8:53:c0:2f:0f:43:cf:
         42:09:44:7b:6c:c0:9b:1e:77:76:fa:45:09:e7:01:97:be:1c:
         82:87:05:1a:0f:87:e0:8b:f4:a1:33:76:83:c7:11:18:a1:d1:
         4b:07:ff:18:c6:6f:55:18:22:60:16:19:dd:82:e9:9a:ad:79:
         df:fd:64:b2:4f:d3:14:90:cc:6c:06:e8:f3:b8:2f:4e:2f:0f:
         8f:bd:40:f0:da:6e:ba:4c:e6:98:af:17:1a:0a:15:b6:5a:17:
         77:28:57:e4:3a:a2:30:1d:a2:92:50:c7:bd:25:37:e2:48:17:
         4e:44:f4:84:b7:2f:e7:65:f6:fd:23:a4:aa:01:cb:23:e1:a7:
         85:79:dc:36:ca:f9:a3:70:87:97:a9:1a:4d:33:31:f0:c7:36:
         f0:66:86:ab:1d:e5:f4:d1:dd:5b:39:d9:00:f6:58:cc:15:87:
         e2:81:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:27 2026 by rpki-client