This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File:                     1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier:          z1czFOvnsX+YIdBfm1SDRDfFE2K4KY0wbclFYhQJneQ=
Subject key identifier:   DA:ED:14:9C:04:4C:0A:19:93:4E:5E:7D:A5:AE:B2:F3:9C:AF:65:B6
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer:       /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial:       019C43591366513AE36BE7ADA0DEF65F6585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number:          14B2
Signing time:             Mon 09 Feb 2026 17:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:37 +0000
Files and hashes:         1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: FRaXlZrIb46FsnS3lI5+thUYWT0XcMCEXz8+7NkcTVk=)
                          2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=)
                          3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:13:66:51:3a:e3:6b:e7:ad:a0:de:f6:5f:65:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
        Validity
            Not Before: Feb  9 17:00:37 2026 GMT
            Not After : Feb 10 17:00:37 2026 GMT
        Subject: CN=daed149c044c0a19934e5e7da5aeb2f39caf65b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c9:8a:ac:6e:30:f2:a8:e1:0c:24:f7:38:eb:
                    b2:8f:24:67:21:39:2a:69:82:63:1a:60:4e:b8:db:
                    b8:86:3d:1b:d7:ee:95:7f:55:e8:45:35:0d:24:74:
                    af:17:6c:a4:9d:0c:fd:7a:fd:50:76:9a:1a:d5:02:
                    f1:0f:9f:0e:41:a3:a4:8a:2c:14:cc:47:20:38:2f:
                    5e:cb:de:65:a9:35:a5:33:a2:d6:c1:90:5d:57:ef:
                    f6:25:28:ca:4e:57:55:f8:66:e1:76:64:a2:56:2e:
                    de:c8:21:72:d8:8c:97:12:75:96:49:11:c9:3e:a3:
                    3e:92:b3:c7:19:2d:99:18:85:29:41:8a:43:e0:18:
                    95:1b:d8:5e:32:ac:26:62:f8:69:9a:da:ab:e4:55:
                    73:d7:14:33:88:1b:d4:e8:c7:dc:52:c7:43:73:62:
                    3b:6a:c2:4b:6c:22:36:d8:78:58:2c:14:d9:22:5d:
                    27:ad:24:f6:32:89:6b:b8:98:12:81:10:57:9b:3d:
                    d3:b4:1e:4c:7f:9a:31:50:c6:3a:0a:01:04:a8:23:
                    e0:1c:13:a0:05:ff:6e:12:ef:6d:10:8b:9b:b0:0e:
                    4c:d1:cf:20:4e:8c:22:14:65:b4:f2:29:6d:36:c5:
                    f2:96:79:7e:48:62:fc:ce:5b:03:85:63:14:ca:1b:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:ED:14:9C:04:4C:0A:19:93:4E:5E:7D:A5:AE:B2:F3:9C:AF:65:B6
            X509v3 Authority Key Identifier:
                keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:55:68:44:6d:01:21:4d:e0:f3:1d:5f:0b:bb:d2:11:33:
         70:04:d0:05:00:a0:e6:3f:c2:e9:0b:f2:9c:2b:e0:95:08:b5:
         b0:5b:24:8c:46:f4:9d:56:50:e5:86:0b:b3:13:3f:c7:8e:bc:
         b5:32:31:e2:c1:04:46:51:5d:36:5c:07:65:c0:6b:e9:c8:c8:
         97:53:4d:f0:a1:b6:9f:77:a5:2b:f1:60:71:11:92:31:7d:b6:
         82:e0:df:3e:96:28:19:df:06:0e:65:a5:40:ce:17:d6:13:59:
         9f:7f:b1:87:87:cc:3f:d6:61:10:f4:ac:05:4d:b5:fc:ee:1e:
         9f:4b:1d:2c:69:9f:c0:7a:ea:d6:ba:f2:41:07:f7:6e:d0:b9:
         e9:81:6f:25:c0:8f:bc:a6:a6:0a:58:c8:10:d6:a8:be:2f:2a:
         85:31:3a:e1:49:5f:98:91:03:2d:46:bf:52:d5:2f:28:8c:3b:
         1a:8a:db:8e:08:cf:af:e6:c3:21:89:52:d8:6d:62:d8:c0:c3:
         cb:8b:99:0a:c5:ce:e4:1e:76:f9:9f:36:d8:b7:f2:f3:56:49:
         1b:f2:1a:44:a0:4f:7d:47:a6:75:21:17:f3:f9:df:74:31:ee:
         35:c8:52:8b:d2:14:a1:17:0f:fc:ca:1f:4b:41:4d:fe:15:3d:
         aa:ce:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:56 2026 by rpki-client