This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File:                     M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier:          mIqczS0UY0xOz3Jv6n4ATRv1idr6gYPDn29X9gzfv2M=
Subject key identifier:   74:04:54:F3:49:96:69:FE:86:23:0C:01:A7:00:88:C9:9C:10:F2:11
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer:       /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial:       019C44DA34734A57D3BEE46CAB3C5AC30E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number:          1127
Signing time:             Tue 10 Feb 2026 00:01:16 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:16 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:16 +0000
Files and hashes:         1: JY_xv27BSE0PmJzxtxeH3ELGERo.roa (hash: 7ZqKA1QkpMvfCfkiUQ38tlesyzt3GalUpSbgM/pSlcA=)
                          2: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: xi3fDuH3mrWS68Wx/M+yRtZcBtY3VZeh/LpDwiORKis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:34:73:4a:57:d3:be:e4:6c:ab:3c:5a:c3:0e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
        Validity
            Not Before: Feb 10 00:01:16 2026 GMT
            Not After : Feb 11 00:01:16 2026 GMT
        Subject: CN=740454f3499669fe86230c01a70088c99c10f211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:3d:98:b2:5a:37:fc:7f:a7:be:89:3e:9d:
                    1e:e9:c3:24:58:f2:fe:7b:6e:01:7d:14:c2:32:ae:
                    0a:3f:62:47:11:f9:30:07:3a:2c:ec:58:a8:49:ee:
                    94:fb:33:8a:f7:4e:75:28:f2:9a:e3:44:84:19:7e:
                    e9:2f:bf:f5:6b:20:e1:cd:b2:38:63:32:f8:50:ac:
                    d7:c2:3f:8a:91:7b:05:1d:f8:c6:ef:8c:58:83:f5:
                    71:8d:71:ad:a8:55:26:03:eb:68:cb:6c:5c:82:c8:
                    00:77:56:3c:41:d3:44:16:10:1a:b0:46:73:a9:86:
                    be:d2:19:b3:5f:41:40:20:44:70:8a:c2:0a:00:ce:
                    49:bf:de:86:20:c5:00:4c:98:0d:36:ea:68:cd:33:
                    54:f8:68:7b:16:f0:6c:6e:b6:98:36:95:56:ea:0f:
                    2f:5d:c4:c5:2a:97:27:f9:a7:9a:f8:0f:67:52:d0:
                    79:9c:65:c2:e0:17:1a:d9:bf:1f:23:0e:77:87:a5:
                    4e:a3:54:4b:31:fe:e6:12:1e:c4:7b:7b:f1:f0:7a:
                    2f:58:38:30:06:04:dc:a6:a5:98:84:45:2d:fc:2b:
                    32:a2:67:79:d9:d5:04:cb:5b:3c:bf:56:78:73:93:
                    61:4d:a3:42:f0:06:30:8a:54:e7:d4:5b:81:ef:8e:
                    d3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:04:54:F3:49:96:69:FE:86:23:0C:01:A7:00:88:C9:9C:10:F2:11
            X509v3 Authority Key Identifier:
                keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:62:fc:d6:fb:7d:86:b6:2c:a0:26:a1:af:ae:3e:77:b0:bb:
         4f:3b:41:15:94:8c:aa:4e:a6:a0:86:80:0d:a5:f4:a5:a6:2e:
         64:6d:06:91:73:83:01:5f:1d:a8:b4:68:f1:fb:b5:1d:88:a7:
         0b:fc:29:8d:05:62:93:75:6b:78:30:d9:0a:12:c9:b4:13:19:
         d0:d3:f8:2d:1c:d0:51:1c:47:12:95:89:b8:36:5e:10:64:71:
         80:0e:73:24:cd:bd:24:3f:c1:c1:77:80:f6:aa:24:3a:4f:0b:
         0e:74:cd:ef:44:4d:e4:d6:37:33:c0:a4:b6:a0:f1:20:8e:e6:
         5d:db:98:10:6b:b4:d1:a6:55:65:90:4d:84:cd:c0:62:42:4c:
         f0:7c:e8:69:c5:05:b5:ca:be:66:0e:be:9a:ed:5a:ac:bd:cc:
         c9:0e:ce:07:43:25:fa:71:e8:b6:67:36:7b:da:4a:a0:65:7b:
         5c:34:9e:56:06:98:c1:4d:52:00:59:33:28:38:26:60:89:4a:
         87:33:ce:00:c5:a0:bf:04:ec:84:b3:97:ae:c1:c0:22:bd:dc:
         62:1e:0a:ed:d1:eb:d4:3a:31:e8:14:f4:78:f6:ac:53:28:ab:
         28:3c:8c:1c:d8:5a:87:d4:d8:4d:df:c4:36:e0:f6:b7:1e:31:
         b4:74:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:39:31 2026 by rpki-client