This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File:                     aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier:          EDyMEr644S/iD3DPppoLzXR/MENJ5+q78Hu4Cp90xoM=
Subject key identifier:   2E:41:5E:F6:C1:2A:43:0D:23:3A:E5:90:37:A8:F6:75:1C:C0:BF:8E
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer:       /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial:       019C40FCC03B8F4AE044B672DEE452B8727B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 06:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:31 +0000
Files and hashes:         1: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: G8GEWLkL3KRGUfCKGJYiDhFXocINN8r30GlvUZDEAdo=)
                          2: hpJdcso_n4malOGRsLM9jlcq2PA.roa (hash: fdvBY/m75V1oPyWW90Ox8zMppAT8R3oNsWGUpS0XZeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:c0:3b:8f:4a:e0:44:b6:72:de:e4:52:b8:72:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
        Validity
            Not Before: Feb  9 06:00:31 2026 GMT
            Not After : Feb 10 06:00:31 2026 GMT
        Subject: CN=2e415ef6c12a430d233ae59037a8f6751cc0bf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:0e:f2:aa:cd:2c:e0:d0:1e:23:47:29:16:
                    9e:0d:ea:e6:7e:e2:b9:1e:8f:02:32:62:90:ce:83:
                    0b:60:a1:e3:a7:93:69:89:60:af:15:cf:67:b9:fc:
                    25:56:66:a6:39:41:a7:79:5b:73:93:6c:4b:d1:7a:
                    cf:75:2b:1f:d1:73:dc:08:cd:e2:95:dd:c3:f4:06:
                    39:24:34:7a:92:69:a5:52:5b:4e:10:0d:5d:83:7f:
                    12:d3:46:c2:77:d2:de:36:0b:a2:1b:50:8f:ef:43:
                    ac:67:7d:5c:f1:55:9f:7b:1d:f7:57:aa:95:79:a7:
                    45:cd:75:76:6c:bc:98:ee:f4:b6:1e:80:ff:80:c8:
                    ea:35:cf:fc:a0:26:e1:4a:1d:04:b7:46:22:74:b2:
                    14:34:d2:d3:a0:1e:f4:3b:e2:a9:9c:62:09:15:1b:
                    29:94:ab:66:3c:3d:14:8e:40:a1:5d:d1:bf:43:49:
                    6e:74:50:2e:28:2d:d8:3f:0f:c3:76:dc:c7:2b:5f:
                    62:8f:9b:e9:bd:68:49:64:45:f8:c7:89:6c:1a:9b:
                    01:bc:5c:71:f5:1e:94:e2:89:54:07:1f:36:40:a6:
                    20:f8:c3:10:3d:4a:cf:0d:cf:b5:71:0a:db:a1:97:
                    29:e9:17:95:94:ba:7e:db:79:20:5d:92:9f:c3:d4:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:41:5E:F6:C1:2A:43:0D:23:3A:E5:90:37:A8:F6:75:1C:C0:BF:8E
            X509v3 Authority Key Identifier:
                keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:0e:1c:4b:18:7a:0e:56:b5:a8:6b:eb:9c:56:96:34:1f:
         e8:03:f7:09:1a:8d:c8:a4:b7:cc:98:90:24:df:56:60:1f:b2:
         57:f8:93:20:89:02:dd:27:86:af:de:4e:3f:09:e8:68:ac:44:
         5c:81:bc:f3:95:bb:6a:08:cd:a4:27:d9:16:b0:4b:17:47:55:
         28:bd:d5:16:6d:92:c7:44:cd:e2:34:3b:c1:b6:78:37:ee:52:
         f4:c9:7b:87:44:95:c9:97:88:e0:a4:0a:7d:eb:df:85:72:27:
         24:a6:a2:ae:67:63:f2:d6:e6:3a:0a:ca:a0:02:7c:45:3d:a2:
         b8:99:75:59:1e:f2:71:1a:4d:2e:77:fe:cb:5d:70:3c:9f:fd:
         f8:f2:aa:f4:de:d7:ba:5c:5d:0a:8d:40:bf:7e:1a:46:4e:20:
         42:e3:18:18:aa:e9:a1:97:6c:c4:30:e8:2f:98:95:99:13:4e:
         65:b9:b6:15:ab:59:db:e8:be:99:a3:d7:4d:ff:65:e3:83:fc:
         4f:38:17:63:80:1a:1b:c0:05:35:73:6c:1e:f9:74:44:fe:6c:
         b8:c6:2b:b8:80:d9:ed:7b:70:31:40:fa:b0:bb:60:f3:79:52:
         ca:6e:1e:ce:7e:5a:fb:4b:f2:da:ba:4d:a8:4a:d6:b4:35:17:
         11:b3:a3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:37 2026 by rpki-client