This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File:                     1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier:          GCf0Yodei1CKL+G5WGVsE1HOMpLFk6xfQto31D6YjZI=
Subject key identifier:   51:AA:26:8E:A1:21:0B:0E:50:56:A5:39:B7:E3:2F:D5:41:A2:CB:02
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer:       /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial:       019C427D91206BDE206C651EF0C36AB23669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number:          0334
Signing time:             Mon 09 Feb 2026 13:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:51 +0000
Files and hashes:         1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: 7UTtOe6hhrtcGY49ZhaWW/nOcZ8skNPuIgPp0HdBsng=)
                          2: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (hash: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc=)
                          3: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (hash: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4=)
                          4: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (hash: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI=)
                          5: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (hash: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:91:20:6b:de:20:6c:65:1e:f0:c3:6a:b2:36:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
        Validity
            Not Before: Feb  9 13:00:51 2026 GMT
            Not After : Feb 10 13:00:51 2026 GMT
        Subject: CN=51aa268ea1210b0e5056a539b7e32fd541a2cb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:4c:61:03:03:9f:01:50:0f:5e:57:a1:cf:
                    ca:93:44:21:7a:cf:ee:25:a4:df:80:cc:0e:96:00:
                    a4:53:8c:7f:d2:99:dd:dc:bc:eb:10:28:e8:7a:95:
                    cd:92:5c:e7:9c:7f:66:7b:ce:14:ae:66:e5:b5:01:
                    9f:36:32:77:02:1c:34:ef:b8:12:c5:6a:fe:88:0f:
                    9e:3e:c1:1d:18:09:9a:45:88:3a:09:87:fc:f9:7f:
                    f5:3e:68:5b:f6:29:1b:c5:11:4d:5a:8d:fb:d5:9b:
                    62:25:a2:eb:4c:95:e1:04:69:a3:87:a9:1e:8b:ed:
                    07:16:d4:2e:b9:db:3b:83:5a:56:3d:a5:5f:c4:f2:
                    d7:7b:3e:bf:8c:14:cb:47:fd:b3:45:d7:93:3b:0b:
                    dc:13:f1:7a:ea:59:cb:c0:8f:5b:2b:34:73:70:8c:
                    70:91:55:15:fc:be:7c:e9:ba:0b:d3:d3:32:53:c9:
                    06:08:b5:0c:e1:b7:80:cd:dc:1e:ee:f3:92:b1:6e:
                    35:f7:ee:53:0f:23:c7:45:f1:c3:26:a5:72:7f:93:
                    77:4c:28:63:63:d2:e9:b2:aa:2f:31:d0:69:d5:ea:
                    9b:ea:76:1c:8e:d4:39:26:4f:ba:43:80:6a:a4:e9:
                    e8:04:c3:54:61:ad:8a:22:b5:4d:fe:89:cf:a4:2a:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:26:8E:A1:21:0B:0E:50:56:A5:39:B7:E3:2F:D5:41:A2:CB:02
            X509v3 Authority Key Identifier:
                keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:16:37:a9:30:fd:45:eb:51:b5:af:96:89:f7:6a:d0:ed:0a:
         62:33:c0:8b:17:fd:1a:da:78:7f:c9:f1:4a:64:e8:41:78:37:
         c3:5c:37:65:e6:fc:ba:5c:65:19:f0:52:63:d8:e6:88:c5:11:
         41:e0:bb:14:2c:2c:83:fc:89:20:49:a5:57:c2:95:b8:98:51:
         5b:84:e9:1c:03:6b:60:27:5a:16:78:f0:60:af:2e:08:be:ca:
         ad:f2:82:a7:13:25:95:27:be:ce:e9:e6:aa:de:bb:62:1a:4c:
         b2:e7:78:8b:ce:3c:1b:4d:c5:33:4f:26:4b:e9:0e:1d:8e:07:
         0a:84:15:c2:dc:21:f3:27:e6:dc:5b:df:b5:af:43:9c:11:5b:
         6b:24:93:e0:e3:cd:55:cd:1c:e4:29:e9:18:e9:b1:1b:e4:45:
         97:56:98:ac:5d:c6:01:3b:25:fc:e6:f9:aa:b3:aa:8c:b2:c3:
         1e:bc:77:dd:ab:6f:85:c1:5a:c5:37:6d:34:b7:4e:8b:c6:5e:
         ab:bc:9b:dc:3e:57:4d:84:0d:d0:aa:ed:c1:5e:94:42:42:88:
         a8:a2:ef:a9:30:39:0b:4e:66:9c:c2:d0:9f:57:6b:78:9a:c6:
         73:e8:d2:2c:ed:65:fb:c3:d8:60:42:d1:e5:b6:b8:3b:f6:a5:
         73:87:91:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:06 2026 by rpki-client