This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File:                     458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier:          avh8IL6cL19ONWKWHlQOPe323qkQvBn3HDcTY2S4t3U=
Subject key identifier:   85:A7:6B:AE:5A:D5:92:76:4A:16:2E:41:B2:D9:E3:5F:47:14:79:19
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer:       /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial:       019C42B4744DD5FD7F9C903F220864668E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 14:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:48 +0000
Files and hashes:         1: 458aboTAJ378tW2UKw615FZHESk.crl (hash: txh6acNEWM3csk2d0umblzP3cgQahUXfrY6WADkIngI=)
                          2: oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa (hash: kW23YRINjjPil+PnE7QgBUdKf6Li2ZuNouz/Gf0yezE=)
                          3: q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa (hash: MIH8GtLHKwDBxta0prsle3vWb5PxVdZjd+6vSDHesjk=)
                          4: zhvANJOvIZUMm3XZ4zAx_z-cOFc.roa (hash: ra8TIJdqXnbc9kZExeXfpCuOK6FblyvfQ8K4O5SfJHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:74:4d:d5:fd:7f:9c:90:3f:22:08:64:66:8e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
        Validity
            Not Before: Feb  9 14:00:48 2026 GMT
            Not After : Feb 10 14:00:48 2026 GMT
        Subject: CN=85a76bae5ad592764a162e41b2d9e35f47147919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:b8:30:2c:b8:82:67:50:68:db:34:29:74:
                    65:1c:b1:12:c2:8c:6b:a1:ae:97:2d:d8:d5:de:5f:
                    38:c6:05:32:4e:db:53:6f:d5:41:0f:b0:eb:1a:b1:
                    1f:fc:a6:ee:30:fb:5e:a1:ae:86:83:2a:b7:7d:72:
                    9e:1e:58:75:ad:b6:68:38:40:c6:30:16:ce:87:8a:
                    4e:05:01:d4:97:4c:2b:6b:e1:60:ee:4e:6d:08:56:
                    ce:02:03:30:30:5a:a2:45:aa:69:cf:36:40:95:6d:
                    73:19:34:7b:39:2d:ca:17:f1:64:4a:b3:27:bb:dd:
                    bb:32:cd:fa:63:41:ad:8e:13:a0:7c:09:32:97:0b:
                    35:c0:91:7d:e2:1a:fa:8b:21:9d:cb:51:20:2a:a0:
                    40:d9:94:49:6d:23:a7:12:49:43:c1:4e:97:23:71:
                    2c:2d:ae:f7:e6:a7:ee:04:88:5e:91:73:ce:05:3f:
                    0d:a2:16:f0:bf:08:aa:aa:59:42:7f:70:38:19:4e:
                    49:04:9c:ed:33:cc:3e:39:3f:57:35:96:3f:60:f6:
                    ed:4e:c5:63:cd:06:24:df:c6:bc:d4:1d:7a:c5:52:
                    85:37:e9:b6:a4:ca:3d:16:45:de:22:4f:e9:ab:76:
                    bf:72:ec:99:e6:4d:4a:fc:42:86:cb:af:22:0f:8a:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A7:6B:AE:5A:D5:92:76:4A:16:2E:41:B2:D9:E3:5F:47:14:79:19
            X509v3 Authority Key Identifier:
                keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:d3:0f:af:66:a8:5e:9e:eb:c4:40:34:0c:69:28:90:67:
         22:a4:2e:54:b1:15:df:2a:59:33:90:90:f4:d1:29:97:fc:56:
         ec:f7:e9:46:48:b0:e7:b3:b7:98:29:24:4a:0c:9e:bf:ab:80:
         95:a4:e9:da:67:57:44:f0:9e:70:63:82:a7:4f:9e:b1:3b:e9:
         07:99:4e:0e:d9:6c:3e:7f:96:81:38:56:4e:9e:a4:4f:16:41:
         57:ec:b2:01:6b:58:58:6f:af:b5:8b:e6:63:1b:54:6c:01:e1:
         ac:db:63:e4:c0:ba:2f:92:42:8f:fc:1e:ee:5f:8f:5d:2c:12:
         20:0a:17:bc:ab:bb:ed:0e:3d:58:a3:2f:d6:36:08:f6:33:3b:
         51:c8:8d:de:6e:61:01:98:03:8a:ff:5f:84:56:26:48:48:8d:
         e9:a8:b8:66:5f:e5:f7:2b:eb:d5:05:21:6f:1e:34:3e:d5:47:
         3c:c2:36:59:2c:f8:7b:e3:dd:22:07:6d:52:fc:75:eb:b6:9b:
         11:80:a2:d5:03:92:a8:d4:c1:1a:72:15:ba:60:f4:41:75:96:
         98:5f:61:cb:a6:f9:fe:21:56:a6:03:12:c2:91:75:93:cf:c1:
         e6:15:e7:c6:0e:b3:e0:0c:c2:c9:1d:75:03:d1:da:93:64:0d:
         da:fd:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:39 2026 by rpki-client