This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File:                     k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier:          21Ju0f6urr2jlQ0HYlLsR4SKHVqn2LHL/Sx117V8j14=
Subject key identifier:   5E:61:8E:ED:8E:33:FF:82:5D:80:AE:96:EC:8B:D5:FF:05:E4:77:D9
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer:       /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial:       019C435934448BDDE169DF9AE5941CA4E13F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number:          181A
Signing time:             Mon 09 Feb 2026 17:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:45 +0000
Files and hashes:         1: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
                          2: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
                          3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: sZVy0mwOU8lAZaY4VRTsZi0AeGBQZgzIgTbT8S9iymc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:34:44:8b:dd:e1:69:df:9a:e5:94:1c:a4:e1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
        Validity
            Not Before: Feb  9 17:00:45 2026 GMT
            Not After : Feb 10 17:00:45 2026 GMT
        Subject: CN=5e618eed8e33ff825d80ae96ec8bd5ff05e477d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:dd:9e:74:9d:32:42:eb:76:a8:72:31:06:
                    d2:95:be:88:b9:b2:ff:d5:81:8f:86:92:69:9b:56:
                    a1:64:4e:07:66:ed:ba:a8:17:e0:22:df:89:5b:d8:
                    74:4e:38:20:2d:ca:f7:7a:25:b8:b3:ef:fa:d0:97:
                    2a:5c:31:40:13:62:03:3f:e2:1b:cf:5b:9e:c6:d2:
                    1b:57:da:4f:ab:1d:47:81:c3:98:02:cd:09:45:9c:
                    5b:53:33:8f:51:42:e7:d9:c4:60:68:c8:7c:74:24:
                    0a:60:a8:65:ce:9d:87:5b:4a:45:b9:66:b4:b1:e4:
                    2a:2f:24:0d:15:88:34:48:d3:ca:4e:28:55:78:f1:
                    f8:a5:23:00:9c:21:79:61:93:ec:b8:ca:05:02:5e:
                    70:d6:ba:f5:5a:ff:12:57:e1:73:8e:16:a3:43:c8:
                    99:27:8c:63:71:43:ff:d5:80:69:e5:2d:87:ee:95:
                    04:a7:d6:45:af:bf:90:79:44:2d:48:1a:13:0c:dc:
                    e6:1f:64:6d:3f:1d:e1:28:ee:ce:46:96:ef:7b:e7:
                    bd:22:8d:92:7f:02:29:c2:e7:bc:c1:02:ea:fe:29:
                    5d:20:b5:a2:3c:ac:32:02:e5:a5:ce:41:a2:55:7f:
                    17:94:6c:f9:71:9e:93:74:36:76:41:cd:8d:14:af:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:8E:ED:8E:33:FF:82:5D:80:AE:96:EC:8B:D5:FF:05:E4:77:D9
            X509v3 Authority Key Identifier:
                keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:8b:71:1f:9e:b3:77:b0:a9:d9:c9:8e:b0:50:3e:5b:f3:18:
         84:3b:d6:a2:f6:30:04:2b:5d:79:86:ed:90:03:ab:c9:3f:da:
         d3:c3:41:e4:07:2c:cd:37:b3:8f:20:10:c1:fb:fc:51:28:93:
         c6:08:a7:93:5c:8e:e6:a9:00:ec:7e:30:52:53:fa:d7:d7:1b:
         d8:89:b5:9d:a1:e7:11:f4:df:39:aa:0a:7d:f0:f5:8a:d6:af:
         98:f2:da:a7:f7:08:d1:7b:63:13:21:b2:c5:bf:29:76:4f:10:
         7a:6f:da:79:3a:86:11:58:77:af:fe:b4:2d:06:20:26:8e:cb:
         fe:8b:f1:52:bc:13:6b:d5:c4:7c:e0:d1:20:23:6d:12:79:cd:
         40:cd:e9:da:d3:64:90:9f:62:c5:66:d6:40:ee:dc:17:e5:a5:
         76:40:f1:ba:2e:5a:0b:b0:16:f5:97:91:8b:99:56:83:ce:8d:
         df:ed:e1:2a:32:49:75:4c:8f:6e:b8:b2:01:f4:7e:af:cb:8d:
         72:c8:20:e5:0b:65:da:ce:d3:db:dc:cd:da:e8:58:b8:83:1c:
         b6:6e:e7:a1:0d:ab:5a:90:9d:e1:5e:b1:a6:60:63:82:89:9e:
         c0:94:bc:27:ae:82:cc:b1:90:0c:1f:02:64:86:3f:cc:01:45:
         19:39:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:38 2026 by rpki-client