This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File:                     13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier:          +KdH0tng9f1HE4r1C+fD+Tv/wbwPwmvISN/JB4QTa1M=
Subject key identifier:   63:9E:92:AA:41:CE:33:11:7E:1F:D3:FD:DC:25:1E:4D:04:B4:94:4E
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer:       /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial:       019C41D8D04AE30D6B866A7BF5D1ABDDA8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 10:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:53 +0000
Files and hashes:         1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: a14nYgcO7jpdIPATQY+LSxmolHY4OJrdi8Q3KJOZtp8=)
                          2: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (hash: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs=)
                          3: sxVjjTuZsumW0h6mF4GiRANgUvg.roa (hash: z5zoee9BxxfVBHQHis7Mo+eHgddxsrIvf3XwtD1/H80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:d0:4a:e3:0d:6b:86:6a:7b:f5:d1:ab:dd:a8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
        Validity
            Not Before: Feb  9 10:00:53 2026 GMT
            Not After : Feb 10 10:00:53 2026 GMT
        Subject: CN=639e92aa41ce33117e1fd3fddc251e4d04b4944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:c7:75:a7:96:05:60:95:a0:80:96:ac:7b:
                    ff:60:08:91:d4:d3:ef:1b:5b:47:7d:c5:77:38:e3:
                    10:18:94:55:0d:da:6a:f2:bd:0c:de:92:ad:6b:4a:
                    5c:15:45:b3:9a:44:84:fc:cf:fd:a3:e8:f8:c8:9c:
                    39:9e:88:5e:34:b4:c3:8e:8f:04:4b:39:10:2b:01:
                    20:30:d9:ad:62:ce:e1:c0:d5:f9:cc:7d:22:9d:1a:
                    f1:e3:a3:fb:f0:f2:32:28:b6:f6:f0:37:f4:d6:bb:
                    ea:7c:7e:fa:e1:29:9e:be:32:d5:b5:ba:da:12:a5:
                    54:83:dc:70:96:d5:64:fc:99:ea:2b:ff:63:e0:5e:
                    ac:1b:f7:90:13:25:a8:ff:ee:a3:a7:64:13:31:a4:
                    fe:f7:54:ed:33:0e:1d:c6:c7:63:71:f5:b2:f8:49:
                    4a:74:e2:e1:28:09:54:e3:6e:59:e5:6e:c9:f8:0f:
                    e4:f7:31:8d:c3:10:79:c0:da:cf:10:e5:a0:d8:8d:
                    45:4d:7c:8d:7a:bd:b1:eb:f7:08:3a:1a:34:f8:a6:
                    a1:2a:32:cc:5f:33:65:eb:0a:2f:eb:9a:19:94:9e:
                    e5:30:f9:d5:c2:07:4b:be:e2:84:d9:ac:ed:e9:d9:
                    8d:e5:a5:03:f2:06:fb:d6:ca:4e:ff:72:69:25:35:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9E:92:AA:41:CE:33:11:7E:1F:D3:FD:DC:25:1E:4D:04:B4:94:4E
            X509v3 Authority Key Identifier:
                keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:ca:56:69:55:de:b1:f5:f3:0f:15:9e:b1:31:58:39:a3:
         ac:18:6f:3d:11:dc:06:fd:04:34:51:87:89:f0:89:c4:2b:1a:
         a9:ad:58:16:e3:e0:20:f1:a2:f3:45:5d:d5:4e:db:d5:6b:95:
         24:f9:5e:91:9c:f4:b8:93:73:44:66:ed:15:43:ef:f5:14:45:
         e1:2a:89:ba:ce:4c:2a:9a:21:7e:b4:f8:bb:b0:c9:fd:50:94:
         55:0b:f3:af:fb:c6:e9:c1:f0:bd:8d:14:16:d7:5a:6d:d3:0a:
         e6:04:6a:f3:62:6a:b1:2c:0f:23:ad:e3:bf:57:db:2d:3d:70:
         f6:4c:02:5e:92:d1:b6:d9:55:a5:a0:91:27:a1:a0:08:2b:ae:
         53:b4:3c:25:83:ad:52:ea:37:5c:f5:61:9f:b2:2e:94:3a:2a:
         3a:01:ac:f2:d7:50:b0:cd:6f:ca:c4:07:8b:d4:ba:05:2c:b2:
         c5:2d:0b:bf:3a:02:a5:a5:30:6b:d1:5f:ce:21:34:6c:ee:f4:
         09:c2:cf:4c:1f:e5:e5:61:5f:6f:af:97:7b:bf:55:bf:fc:db:
         4c:51:32:76:14:89:6d:e1:35:31:8e:49:1e:6c:4e:47:c5:fa:
         87:b7:7e:bc:00:f8:f1:8e:79:f6:3d:ae:50:ea:91:a1:fa:75:
         8a:5e:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:23 2026 by rpki-client