This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File:                     _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier:          hX6TDi+rUurr32653yoCbgq5l8lRYrCWj0HizoYY0vo=
Subject key identifier:   1F:1C:D1:63:F5:B3:85:77:92:19:2F:94:69:7E:1F:4C:0C:B3:2F:12
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer:       /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial:       019C424632E8B3F8B569C68ACEEB3E7C22C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 12:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:22 +0000
Files and hashes:         1: 5vpEBDoytppmUG_e9rj_C25Xyl8.roa (hash: WBDmOCdQ0a30XWFeqB9R0DXCUU5WmVW9tSy74+sYoEQ=)
                          2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: EWIj/KZ4LPnoautJp8X1X0w7mi1L2bCRY6J79djj2Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:32:e8:b3:f8:b5:69:c6:8a:ce:eb:3e:7c:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
        Validity
            Not Before: Feb  9 12:00:22 2026 GMT
            Not After : Feb 10 12:00:22 2026 GMT
        Subject: CN=1f1cd163f5b3857792192f94697e1f4c0cb32f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:b9:0b:36:32:55:55:61:8e:07:17:cc:c1:
                    08:28:06:e4:99:c8:ab:89:d0:01:14:bd:cd:78:09:
                    c3:73:2b:db:c2:17:81:ee:ef:af:6b:c3:ef:f7:3d:
                    0c:41:3c:6e:08:07:92:aa:c2:57:32:c0:b4:75:a7:
                    a6:1d:d2:a3:f5:2a:9e:df:8f:11:95:31:3a:07:c0:
                    43:88:49:be:3e:72:47:1d:2f:b2:18:67:4f:36:0c:
                    e2:68:9b:d1:b1:56:ee:5f:39:3d:59:11:6f:8b:4b:
                    6c:e1:d9:c3:5f:b7:31:d8:d8:25:e5:f1:f2:f3:91:
                    34:22:67:a9:ef:d0:d8:be:16:0d:ed:b7:eb:ae:b7:
                    e2:48:9e:d9:fa:87:f1:fc:98:fb:bf:65:03:3d:45:
                    33:18:4b:25:03:e6:32:f0:93:d2:dd:d8:e8:fe:e2:
                    46:52:94:c1:5b:1d:fb:c0:5e:eb:da:5a:98:80:e5:
                    58:d1:87:a9:ed:7d:0c:4a:f0:d6:4d:0c:26:74:d7:
                    ef:80:eb:02:12:be:f3:99:e6:91:bc:3e:f5:b3:17:
                    3d:3f:eb:85:23:d5:57:88:22:2b:13:64:58:1e:1e:
                    b7:77:d5:d9:f7:64:04:bb:39:a1:8e:9f:77:49:37:
                    2f:e5:2a:1b:36:e0:f0:32:a0:32:74:d3:e0:4f:ee:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1C:D1:63:F5:B3:85:77:92:19:2F:94:69:7E:1F:4C:0C:B3:2F:12
            X509v3 Authority Key Identifier:
                keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3d:95:2e:97:a0:cb:f0:f4:4d:80:e9:b8:d0:7c:aa:fd:2c:
         8b:04:d3:dc:bd:5f:5a:56:5e:cc:55:28:f2:e6:79:35:66:5c:
         b1:47:48:fb:91:08:97:a7:3e:76:4a:6d:b0:75:21:60:8e:d3:
         31:da:b6:5e:00:69:a9:7c:d2:35:4f:48:73:3e:bc:37:73:e4:
         2e:0f:60:39:04:ef:fc:b4:19:12:f8:f3:82:4e:54:22:5a:80:
         fc:98:59:ff:34:95:32:23:6b:1b:be:09:26:60:09:4b:ff:75:
         6b:d3:63:82:f4:0f:42:47:71:4f:83:ba:7a:6f:9f:83:83:1c:
         1f:6e:f5:d5:6e:cc:5d:3d:52:18:7c:f0:bd:fd:56:e9:07:77:
         1a:1e:9c:1f:48:67:41:68:2a:ad:d2:97:ce:03:f2:09:5a:7a:
         4e:29:c2:f1:40:a1:39:50:43:95:52:76:56:03:36:48:30:9e:
         c7:12:a0:65:40:c8:d7:32:4a:63:56:0f:94:96:14:aa:dd:8d:
         c4:08:57:83:13:58:f3:6d:f2:9f:86:ff:c5:70:10:1e:a2:fe:
         97:70:ff:f1:38:de:67:d7:66:0a:b6:12:f8:73:b4:30:81:58:
         a1:f6:e3:82:22:f1:9c:b0:29:dc:c5:ed:e0:fb:1b:d8:8d:65:
         1b:80:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:27 2026 by rpki-client