This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File:                     d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier:          ODdcUB1QXXN6ui0VR9zrHqXdNh8zgf+CY1w8TyEnXEc=
Subject key identifier:   3E:A3:D0:F2:81:49:6F:38:AA:E2:70:C6:B8:90:E3:70:CB:F9:52:90
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer:       /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial:       019C42EB150D6F9E2F04F941F0517F74E4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:28 +0000
Files and hashes:         1: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: huZED9jheLN50tN6jaNSmATQ4MJ5Aeq0+5GyGrFQCo0=)
                          2: heI6_nt9P_HwBy_T8oGJnHTTh5g.roa (hash: u5XqVFg6oCgpt4OHeWuXYXSoPOakGmDYPh6j3OSR1w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:15:0d:6f:9e:2f:04:f9:41:f0:51:7f:74:e4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
        Validity
            Not Before: Feb  9 15:00:28 2026 GMT
            Not After : Feb 10 15:00:28 2026 GMT
        Subject: CN=3ea3d0f281496f38aae270c6b890e370cbf95290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:9a:03:45:a9:1e:30:ec:ad:a5:c7:bb:07:
                    9b:ff:48:5f:53:02:af:a5:f1:97:f0:50:86:fa:33:
                    b5:c1:a5:ba:ac:95:30:71:e0:ae:2c:26:4d:30:5f:
                    58:91:68:da:eb:dc:6e:f1:1e:aa:80:84:b3:82:17:
                    37:b5:bd:9b:2a:81:50:f0:4f:d3:0e:05:5b:35:7e:
                    e9:eb:6d:e0:ff:89:14:29:41:0d:6d:fc:91:30:dd:
                    22:b4:ca:8c:16:18:58:73:37:68:be:07:d8:e8:89:
                    7a:0c:e7:48:5b:a4:d7:43:ef:eb:93:70:4d:53:20:
                    e1:af:d5:44:47:28:50:02:5e:48:d0:45:05:c9:70:
                    88:a0:f3:58:42:30:38:6f:a7:18:b9:a8:e2:4b:b1:
                    ed:69:f1:17:82:6f:3e:e4:1e:87:4e:8e:c8:6a:c8:
                    aa:c7:8b:df:df:a3:6f:76:45:b7:cd:54:3f:d3:9a:
                    48:45:7e:e0:68:87:bc:45:80:f9:1f:29:14:9f:f5:
                    50:86:47:e0:1f:66:fe:04:bc:2b:4a:09:b0:71:30:
                    eb:f4:78:3a:15:0d:ac:5e:e1:34:98:20:c1:90:c1:
                    45:e7:0b:11:59:3f:4c:ff:53:a0:a6:7a:3a:1e:1b:
                    e3:39:3e:26:36:8a:55:f5:30:90:b6:bb:c7:8d:41:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:D0:F2:81:49:6F:38:AA:E2:70:C6:B8:90:E3:70:CB:F9:52:90
            X509v3 Authority Key Identifier:
                keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:0f:77:8b:c4:32:31:2f:f2:b7:4d:7b:11:bc:b9:7a:c1:
         a3:46:ab:49:e0:1a:b5:f1:09:d8:ad:f8:57:ce:c9:99:0d:77:
         89:e8:cf:f9:56:7b:a6:b1:7e:6a:24:97:6c:46:17:72:39:74:
         fa:41:fe:ef:36:9e:91:e8:bf:a5:57:9c:d8:85:48:0a:2a:dc:
         22:6a:e8:44:49:05:e1:17:91:ac:c8:b9:75:ac:3b:dd:35:27:
         b3:5f:00:79:8f:49:16:cc:d9:66:5e:f6:5a:7d:d7:69:d5:86:
         f2:31:b6:63:fb:e3:aa:08:1a:5c:56:35:95:27:04:6a:85:6f:
         80:06:19:ce:bf:6f:d5:f8:8b:33:f0:e8:d9:b2:aa:e3:9f:43:
         3e:02:43:d2:b9:a9:48:d4:d4:bd:45:dd:50:53:fb:e7:90:fa:
         0a:77:5a:ca:16:ca:45:99:3f:e4:e6:ab:74:58:7f:be:e6:9c:
         c2:b6:a4:06:6b:0b:99:a5:54:16:66:31:bd:1a:8a:e6:5c:67:
         2a:9b:52:12:71:44:af:4a:3d:17:12:34:bd:09:c2:1e:8f:df:
         3b:8c:fa:e7:1a:84:69:87:95:a1:f0:38:fc:cc:47:cf:d1:0b:
         24:2e:84:b8:da:75:a1:b2:df:bf:98:40:98:05:95:5a:14:8e:
         e0:b8:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:56 2026 by rpki-client