This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File:                     _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier:          XwttLIwg8rhyw5QeaO3t0UWHeyd2LXZbyaLmuDvhOVI=
Subject key identifier:   65:45:F9:51:A5:17:D1:C6:4E:68:71:82:7D:59:78:AF:F9:2A:A7:97
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer:       /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial:       019C439025A221FE3A6CB6FB438AB5E26C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number:          052E
Signing time:             Mon 09 Feb 2026 18:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:46 +0000
Files and hashes:         1: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: QjWVzqKlZtigxXiu3R8bScX15a1v0zfc/UX4vXDoyU8=)
                          2: zwsKXVVMmv0-EwryV2b3Xyq5PW4.roa (hash: 5ydnlDVv4t0zmXg2O1tzQDXDv+ERwDuwKHdXunX5QqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:25:a2:21:fe:3a:6c:b6:fb:43:8a:b5:e2:6c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
        Validity
            Not Before: Feb  9 18:00:46 2026 GMT
            Not After : Feb 10 18:00:46 2026 GMT
        Subject: CN=6545f951a517d1c64e6871827d5978aff92aa797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:35:dd:13:52:75:9e:c6:d8:ff:65:83:58:
                    f2:39:56:0d:63:70:99:d5:1c:04:fc:38:cc:04:f4:
                    cc:4b:a9:1e:b0:f8:b4:ed:0d:fb:f1:8b:2e:7a:c5:
                    d9:fb:35:08:a8:97:82:7c:e8:0c:6d:21:a8:a3:66:
                    68:6b:b6:5a:7e:67:a7:f9:d9:da:b4:ba:9d:01:09:
                    6b:33:8f:49:17:78:2c:b0:7d:01:cd:55:bc:41:7c:
                    f0:1c:88:49:c0:4a:a8:c2:e4:b9:d6:cf:da:be:71:
                    42:0b:b4:c8:59:b8:08:06:6f:fc:be:06:9a:33:72:
                    be:c4:2f:57:5d:29:a7:5a:c1:d6:61:87:07:06:90:
                    63:23:60:e2:95:b7:bc:2f:99:62:50:5b:56:49:2f:
                    aa:00:53:c5:a2:c8:a1:98:be:67:6c:61:96:9d:49:
                    ba:6a:ac:0c:9c:52:e3:36:cb:86:84:de:93:2c:96:
                    15:ee:4e:ed:2f:20:c4:e2:15:38:ff:19:ce:f1:27:
                    20:97:35:b8:8c:53:41:40:59:3e:d0:77:6c:e7:db:
                    be:31:fa:7d:9e:19:47:7d:4b:60:e9:e2:7b:c0:0a:
                    66:25:70:b4:d9:22:73:fd:e7:25:c4:ce:b5:fc:b2:
                    fe:fd:8c:9c:c1:98:76:3d:d1:73:ee:75:53:1d:6b:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:45:F9:51:A5:17:D1:C6:4E:68:71:82:7D:59:78:AF:F9:2A:A7:97
            X509v3 Authority Key Identifier:
                keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:13:d1:35:ff:69:bb:ee:50:0c:62:35:cb:2e:51:f1:c8:8b:
         41:88:86:04:16:93:df:f2:d6:b4:34:37:11:2c:c6:41:6b:de:
         7a:af:2f:f0:de:79:af:b7:d6:26:39:50:66:6c:72:08:5f:9b:
         11:14:5e:9f:6b:8c:ad:d9:bc:db:75:f1:ce:1d:95:0a:05:74:
         ce:89:e5:5f:03:b9:8d:3e:cf:53:78:17:44:58:89:78:2d:94:
         37:ba:ee:27:94:c9:f2:f8:52:a1:6a:84:8e:f4:b6:9b:43:d0:
         b6:3a:ed:43:76:50:72:4f:de:5e:0e:75:42:2f:f0:86:96:74:
         47:db:c8:c5:67:1d:79:f6:03:5d:8d:59:17:ac:53:17:38:f9:
         40:0c:18:77:4f:2b:0d:e5:1d:d6:bb:bc:79:93:1e:1c:b6:1d:
         46:92:fe:53:50:bb:fb:9e:41:72:98:19:6a:c8:92:74:df:6b:
         6e:82:b8:fc:48:34:57:35:92:80:52:4c:7e:ff:ad:fa:b4:31:
         af:65:f6:d3:13:8f:e7:49:9a:4b:47:5e:06:fc:e2:98:47:d2:
         77:4e:ec:05:05:a0:47:e6:df:b8:6e:66:0c:07:c1:ea:4c:99:
         6f:f1:f4:84:9c:6b:e3:d8:7c:5d:d9:62:64:58:6d:7c:3a:f6:
         8d:b5:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:49 2026 by rpki-client