This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File:                     RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier:          Gehr9epwm+59XJ1DEMLcIv8hX/3WO89HJ0M16TZ9ZRg=
Subject key identifier:   19:F0:9E:4C:BA:FF:4E:B2:33:47:38:1F:70:37:04:2F:20:DC:93:53
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer:       /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial:       019C42B442B68A118F81FE30F31BD42D459F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number:          1520
Signing time:             Mon 09 Feb 2026 14:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:35 +0000
Files and hashes:         1: 96uhsxBhe-FEbEFUz44UCsO9ftM.roa (hash: sX4SikCnq8N0L06GUAKXHc2cNrB1d0XvilI3V9rlkrI=)
                          2: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: MmykAXSGwFeKEQ1VGD5jF929TDOG+pM1ojN+y/fWhhs=)
                          3: hVY_dYxYhKuO3qtI4MOUcvIONF4.roa (hash: yGx/OoacbBBGFHUNn7h+o/bue//pA9bBusA+ebRU/Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:42:b6:8a:11:8f:81:fe:30:f3:1b:d4:2d:45:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
        Validity
            Not Before: Feb  9 14:00:35 2026 GMT
            Not After : Feb 10 14:00:35 2026 GMT
        Subject: CN=19f09e4cbaff4eb23347381f7037042f20dc9353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:80:65:99:6d:ef:b9:a0:e2:fb:ba:3a:db:
                    06:d8:d3:26:ac:0d:fe:f2:93:f8:68:2f:45:79:58:
                    62:ae:af:89:83:31:17:5e:2a:eb:e9:29:24:2a:76:
                    ec:42:12:60:db:05:66:43:19:d4:90:2b:78:37:ab:
                    af:35:55:d6:67:89:f8:9a:1e:31:36:39:1a:00:73:
                    a5:5c:ca:10:c5:fa:cb:cc:85:95:9b:4e:15:b5:b5:
                    a8:b6:a6:6e:f3:d4:5f:2b:59:5d:dc:19:b5:34:a5:
                    f2:76:f9:59:12:19:22:0c:16:a9:11:19:5c:af:dc:
                    99:d8:60:69:c3:87:11:1d:ec:df:d2:3c:53:c4:31:
                    16:9d:33:1f:0c:99:45:c9:0c:59:4e:a6:5b:7f:7a:
                    6a:c6:d3:96:b1:48:ec:0d:e9:df:a3:97:db:02:a6:
                    4a:68:d4:a7:e3:db:5e:24:64:34:7c:6e:5f:7c:bd:
                    38:2c:f7:22:d8:5e:7f:1c:77:2b:a8:a5:0c:66:c2:
                    b9:95:fd:b3:61:fd:83:64:b2:f1:af:00:9c:b9:91:
                    39:8d:0b:4f:12:d8:6c:c0:fc:a9:32:11:15:aa:d7:
                    47:58:e6:b7:b7:07:97:0f:60:b3:33:27:42:d0:7a:
                    6b:41:fd:6f:6e:8e:a8:c6:0a:7e:be:73:0a:c5:41:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F0:9E:4C:BA:FF:4E:B2:33:47:38:1F:70:37:04:2F:20:DC:93:53
            X509v3 Authority Key Identifier:
                keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:01:4b:89:6b:b5:44:19:1c:4e:0f:6a:37:97:86:c2:03:1b:
         1c:04:14:70:ef:90:5b:52:c6:83:9a:77:d0:7e:99:47:5c:83:
         6d:21:16:ad:0a:1d:6e:64:c9:e6:71:fc:91:ab:d3:c4:f5:95:
         77:13:e5:d4:8a:18:35:ad:43:b8:8b:ac:0e:d8:cf:e7:69:11:
         6d:59:32:e5:f9:09:d7:d9:bc:5c:a8:1b:97:bf:1c:0a:ee:2f:
         1e:a8:f6:9e:99:24:59:ea:2b:43:de:10:d5:54:f6:61:d5:9b:
         2c:90:7f:c9:bf:91:d5:2c:41:df:f7:9b:46:ef:4e:44:8c:f1:
         ce:62:2a:ed:f3:90:51:ac:a7:b5:b1:ab:0b:5a:1e:cc:08:1f:
         ed:fc:4f:e6:7b:48:8a:81:39:96:57:d4:6c:21:97:c7:15:ce:
         d9:47:2c:66:32:ff:df:ed:e6:5e:3a:15:9f:9c:7b:76:b0:8b:
         16:f9:d4:49:ce:f8:66:0a:12:b7:b3:d4:7c:1f:ef:43:0c:39:
         fa:c6:32:31:7f:67:12:ac:ee:54:52:31:cd:60:1f:69:a7:45:
         bd:89:e7:24:21:7f:dc:b5:42:d4:95:ad:4f:28:7e:b7:5d:2f:
         90:70:0c:98:ec:aa:21:2d:4c:5d:26:a1:ba:84:82:70:18:51:
         37:ec:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:39 2026 by rpki-client