This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
File:                     _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json)
Hash identifier:          eXR7NXLaQVfQIjHKCDZQM/fH77DtHAe85IIa5vkMoGk=
Subject key identifier:   CF:A6:E7:10:62:70:7F:43:A3:B6:28:69:8C:45:55:C9:E4:73:50:B2
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Certificate issuer:       /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial:       019C43909BC1F91FECB31439574978A8A366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:16 +0000
Files and hashes:         1: RmRjeHQ5LHoRU1fZMCv-SARJc8c.roa (hash: zv/hPQoqGigtS053rI8GEj09bwC8kZaEZlvkwBWS8G8=)
                          2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: Tpve/p384TGBmgoUY3v0P6MBYnJMNCBgcHx1dKNCszA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:9b:c1:f9:1f:ec:b3:14:39:57:49:78:a8:a3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
        Validity
            Not Before: Feb  9 18:01:16 2026 GMT
            Not After : Feb 10 18:01:16 2026 GMT
        Subject: CN=cfa6e71062707f43a3b628698c4555c9e47350b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:7e:cb:31:4c:1f:ad:86:e4:db:fa:b9:d9:
                    4e:8f:f7:ef:ee:64:0c:0e:f8:e0:5a:b6:71:a8:2f:
                    64:68:6b:8e:99:20:82:32:b2:a9:1c:57:be:1a:30:
                    0c:43:44:e3:11:17:7e:58:43:bd:90:a6:b4:f2:b0:
                    69:3c:81:c4:ae:96:a5:b5:d7:2e:86:20:6d:10:95:
                    8f:6c:17:97:40:c6:e5:38:9f:49:1f:a3:e3:da:e5:
                    18:01:65:1c:5d:95:8b:8f:cb:11:f8:f9:a3:39:f9:
                    d4:37:e2:b4:1d:12:70:ef:57:cd:3e:21:7f:97:50:
                    a8:7c:a5:81:cf:b9:fe:b7:e6:9f:3f:2b:e9:04:6d:
                    de:66:87:22:67:81:98:51:4e:66:73:09:ed:eb:db:
                    26:77:7d:99:6e:a0:30:86:ff:53:d4:e4:2f:8c:3e:
                    d5:c6:0e:3a:37:b7:76:3d:ef:d4:3b:87:a6:f1:b9:
                    4b:ba:b1:04:56:0a:4f:46:96:da:be:c0:c7:fb:62:
                    94:e3:91:a7:de:18:71:31:12:6a:43:7b:80:e0:39:
                    72:f7:79:84:cc:fd:89:bc:be:19:4e:23:f0:15:c1:
                    f4:a9:17:4d:5b:b3:f6:c5:a5:0b:77:d1:88:f3:39:
                    cb:d8:27:1f:5d:b7:5b:8e:d9:55:03:94:b9:f6:1d:
                    d7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:E7:10:62:70:7F:43:A3:B6:28:69:8C:45:55:C9:E4:73:50:B2
            X509v3 Authority Key Identifier:
                keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:10:9c:63:c1:c2:ae:06:d0:30:7d:1d:af:56:ff:29:03:
         e7:2c:7c:d2:f0:25:71:d9:59:e8:bb:a2:d9:85:7e:b8:09:79:
         79:db:1f:fb:7c:b4:12:4a:06:46:cc:f0:5e:bd:19:0a:0b:c9:
         c1:c9:86:5d:8c:3e:ae:58:d4:cc:99:db:e7:71:01:69:6a:fb:
         c2:ad:53:1b:13:27:10:64:dc:17:80:bf:dc:ac:c3:d6:c9:66:
         b9:24:70:ab:80:95:be:0e:45:8d:67:c0:0d:e6:1e:fc:db:d8:
         79:90:45:85:7c:37:d5:1b:f3:be:1a:97:8d:e1:05:f7:00:3c:
         90:22:4f:12:89:2b:69:97:47:0e:e6:5d:a4:eb:a4:17:5c:99:
         f1:65:e0:1b:36:30:74:18:a4:0f:6b:a7:b4:37:7c:ad:ba:f0:
         cd:03:20:d9:18:d4:ee:46:62:5a:36:65:6c:e6:1d:cc:89:50:
         7d:5f:e3:6c:b7:e6:45:fe:25:91:50:f9:71:e7:b6:59:b2:92:
         a9:9d:ab:a6:11:2d:03:0c:cc:ee:be:d2:e9:32:84:84:b6:47:
         47:9b:a5:32:77:c0:c9:67:f4:79:c4:5c:53:2d:e4:00:33:62:
         48:6e:d7:9c:8a:0a:f7:d9:77:92:45:7f:d3:25:22:b0:86:9e:
         92:d2:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:33 2026 by rpki-client