This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File:                     SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier:          08Nxv+pjHT0orb7YKyiAuTrwxZ9MJ8HcoNRLKcCYr9s=
Subject key identifier:   0F:34:E0:17:7A:12:72:B6:90:A5:0B:F6:9F:66:2A:28:F7:92:4F:23
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer:       /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial:       019C4322715DAAA8E5CC8CD401DBF7936EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number:          1824
Signing time:             Mon 09 Feb 2026 16:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:56 +0000
Files and hashes:         1: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (hash: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA=)
                          2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: c2kfiNpR5+jw6CrxaO/cRxvLa2+vyw7OqghS03oToCI=)
                          3: nnLnTcVXO544vHFcYVwBAQxMeQo.roa (hash: SFOznpvXz/JoSjUg8z9TzNGJVZ8Y7Eg8GWV4zl8aNrY=)
                          4: v980U-h91dgOwXDSBh4k-i7QAt0.roa (hash: C5VY2sj93F7Cq2/ofd1slgZ2bbIgYdzNTiYM2XjNUXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:71:5d:aa:a8:e5:cc:8c:d4:01:db:f7:93:6e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
        Validity
            Not Before: Feb  9 16:00:56 2026 GMT
            Not After : Feb 10 16:00:56 2026 GMT
        Subject: CN=0f34e0177a1272b690a50bf69f662a28f7924f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:1f:ed:01:eb:96:a6:17:d1:f1:a8:c9:31:
                    c0:fa:bd:6b:55:c4:92:94:6a:c5:49:25:b6:5d:ed:
                    fe:28:c0:6c:3b:3d:8a:dc:77:99:ba:54:05:a8:52:
                    28:7c:b7:90:a2:91:56:c2:57:98:9a:7e:58:53:42:
                    12:94:ed:40:1e:65:26:de:da:13:03:ae:2c:be:ce:
                    6b:24:1e:9d:d9:5f:73:2d:2e:37:bd:2a:47:0a:75:
                    95:05:b8:bd:53:eb:6e:8e:20:c8:fa:71:66:9b:8c:
                    56:d8:78:7b:55:fd:3b:85:ec:c4:a3:b8:bc:30:2e:
                    82:9c:44:30:7c:7a:e4:a0:4f:fb:87:1c:d4:08:d1:
                    8f:f7:e5:b5:d9:b1:b1:36:b7:78:8d:45:3c:32:11:
                    b8:28:e1:19:03:1c:e2:a8:b2:96:83:79:72:c8:0a:
                    7b:7f:97:54:7b:e8:5f:a5:1d:b2:66:69:5d:cd:59:
                    78:61:ac:0a:6e:38:6f:c9:fd:1d:de:2c:a5:7c:af:
                    25:4f:c4:2b:10:f5:9e:2a:32:c8:7d:4c:40:f2:a0:
                    76:82:b6:24:ee:81:38:9e:be:1a:dc:8f:bd:93:1e:
                    90:30:c0:d3:a9:b0:34:c0:0e:e2:5d:30:36:99:d8:
                    ac:05:18:3f:cb:ec:da:9c:33:7a:a9:f0:a7:8c:13:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:34:E0:17:7A:12:72:B6:90:A5:0B:F6:9F:66:2A:28:F7:92:4F:23
            X509v3 Authority Key Identifier:
                keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:59:29:ea:82:04:64:15:77:f2:34:12:9f:e9:d5:4e:4e:09:
         8b:4f:93:b7:94:a2:ab:fa:84:27:22:4f:3d:87:e5:e6:74:e3:
         cc:cb:78:7b:ec:53:9d:58:89:db:93:4e:22:79:d8:19:fa:36:
         54:72:8e:e0:f1:cf:c0:4f:32:4d:b2:3f:59:00:db:9f:9d:ec:
         b8:d1:c6:5c:44:22:d1:4e:56:f2:f8:ab:92:81:65:2a:c5:a4:
         9f:e8:8b:58:de:2b:d4:00:3c:4d:54:78:c9:04:8d:5d:23:e8:
         2b:d1:1f:25:c6:41:8c:6c:6b:8a:38:c7:44:a9:16:1e:98:67:
         e2:93:61:04:c5:fa:fe:d2:51:77:fb:56:90:9b:65:f9:a9:fa:
         af:19:05:ae:dd:f0:2a:5b:b6:e8:e2:8e:ac:6e:58:96:1d:8f:
         f0:d2:cb:e3:71:a7:8a:d1:8a:b5:36:06:ad:d3:be:29:8e:d4:
         e0:f1:fe:41:d3:98:f0:c6:15:72:7a:5d:6d:70:7f:43:dd:92:
         bd:1e:8a:63:a8:e7:d6:4b:e6:ec:49:a9:46:cb:ef:c5:97:20:
         14:60:96:0e:bb:3c:ae:ed:cf:38:ba:d6:26:92:4d:e8:e3:70:
         36:0e:5f:ea:c4:14:e8:1b:a4:c5:84:13:65:f9:81:44:b6:ba:
         25:5c:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:04 2026 by rpki-client