This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File:                     42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier:          LjSqWKW8DUBFUgSG+LcwurH8X0CAhriCWbdTs1/xVAI=
Subject key identifier:   36:FD:90:7D:E5:3E:19:45:8B:05:4D:BB:BB:29:A8:B2:9D:2E:53:F3
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer:       /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial:       019C420F34C823C79050E6435B7588A04F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 11:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:18 +0000
Files and hashes:         1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: FDjCWzZunSTuIWESWUeeY/JRoZ/kMIs54w5Z7M79/Bc=)
                          2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:34:c8:23:c7:90:50:e6:43:5b:75:88:a0:4f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
        Validity
            Not Before: Feb  9 11:00:18 2026 GMT
            Not After : Feb 10 11:00:18 2026 GMT
        Subject: CN=36fd907de53e19458b054dbbbb29a8b29d2e53f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:2e:4e:2d:7a:2d:82:d8:e2:db:6a:78:b6:
                    50:91:33:94:7a:15:19:51:10:72:32:4e:9c:1c:06:
                    fd:34:df:7c:cd:6f:e8:30:b6:7e:c3:f2:9f:66:48:
                    e1:d6:a9:3f:8b:31:e5:e2:1a:a1:c1:07:ce:7f:00:
                    e0:13:11:ba:0c:e7:1c:fc:36:cb:2e:1b:db:fc:f2:
                    d1:2f:fd:29:a7:0e:8e:10:dd:3f:c9:ea:27:05:04:
                    3c:1f:cb:4d:52:d1:d8:e5:84:30:06:77:e1:b2:7f:
                    19:f8:2f:f4:9f:58:f5:1e:65:06:c0:5f:d5:71:90:
                    5f:26:3a:4c:e6:20:87:1f:5d:74:fa:41:90:89:44:
                    48:8b:e1:ba:93:6b:6a:b9:52:e0:d9:d7:85:73:1c:
                    64:7c:0a:c2:16:6a:11:80:2b:04:49:a1:3c:93:df:
                    65:e0:57:e4:1d:a5:27:05:a9:35:42:50:8a:d4:84:
                    fb:e7:b9:8d:81:68:db:dd:a6:df:3b:19:12:2d:8d:
                    60:8f:a1:e5:7c:48:48:71:af:ee:01:71:26:8f:1b:
                    63:77:68:3a:91:e6:b6:51:e4:e3:89:91:bf:f1:e9:
                    57:a3:2a:b6:2e:12:35:8f:cb:e5:85:72:5d:05:b4:
                    2b:36:dc:6b:8f:aa:a4:96:f8:3f:eb:81:d5:da:e1:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FD:90:7D:E5:3E:19:45:8B:05:4D:BB:BB:29:A8:B2:9D:2E:53:F3
            X509v3 Authority Key Identifier:
                keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:5c:37:22:61:47:ee:61:63:02:b5:4c:ca:42:6c:fd:5b:
         ca:35:7f:fd:0c:ea:39:bb:e4:ac:01:ec:75:e9:f7:9b:a2:f9:
         a7:6f:22:75:8f:d0:7a:d9:3f:29:45:5a:79:05:8c:ec:bd:a5:
         6f:00:51:de:21:86:f3:6a:9d:d9:8e:b3:61:ad:85:4b:e8:d1:
         e5:d4:54:af:fd:a6:77:5d:82:bb:25:e2:eb:60:fe:8b:d1:2e:
         35:4e:45:2e:50:ab:f1:63:cd:09:83:57:ff:a5:65:85:9d:3b:
         26:b6:31:d3:3d:8b:8a:dc:b6:e2:af:44:55:f9:10:cb:ea:59:
         20:dc:e5:57:5a:86:a0:b0:15:31:8b:d3:79:d4:32:db:38:c7:
         4e:f8:27:c1:f0:8e:aa:12:ba:05:3d:3e:5c:ed:c1:21:12:db:
         2a:f1:ba:f9:5a:76:4e:83:2f:3d:97:25:66:75:43:79:95:72:
         1f:12:87:96:a1:90:4e:0a:36:0a:4e:b2:dd:8d:b4:2f:8c:4b:
         e6:8c:7c:0c:95:5e:1d:5a:a3:16:c8:2f:dd:50:4b:09:e4:20:
         2d:b3:1c:08:cb:83:49:97:33:ba:69:a3:e3:59:91:fa:c3:f0:
         45:bd:31:7c:ac:8b:f3:ce:bd:62:01:93:ff:26:0b:b1:16:ca:
         1a:15:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:43 2026 by rpki-client