This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File:                     _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier:          Si/RFl8ydkBWhQOw1Q9oWQ6+IHefkHhI3eAlOVxSxNg=
Subject key identifier:   B1:99:80:AD:F7:63:1C:49:E2:86:B1:B6:06:B1:79:05:9C:73:20:6E
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer:       /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial:       019C4322110E3FDED53D38CE78B4CD9BB668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 16:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:31 +0000
Files and hashes:         1: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: 6OflpfS9spcEKFG7R6CxP1FDiM6Ssz4PYHcxgZP+Cp4=)
                          2: iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa (hash: FHh78hLB/Sn5QhGNBTKNLCJHqJsr7A56qqlnpn0+FT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:11:0e:3f:de:d5:3d:38:ce:78:b4:cd:9b:b6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
        Validity
            Not Before: Feb  9 16:00:31 2026 GMT
            Not After : Feb 10 16:00:31 2026 GMT
        Subject: CN=b19980adf7631c49e286b1b606b179059c73206e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:3f:de:f4:82:1e:f7:5b:8f:e5:32:8f:32:
                    12:71:cf:23:0a:94:98:7f:c6:07:8b:b6:e2:4f:07:
                    d6:c3:3c:8d:f3:2d:d2:69:5d:78:b1:1e:d8:94:a7:
                    df:8b:2b:18:0e:ec:05:84:78:aa:ee:43:30:87:83:
                    df:a1:fc:53:7d:b2:b0:e0:2a:9a:a6:e8:ce:0c:90:
                    62:62:9c:dd:7a:7d:c4:8c:4c:dc:6e:a6:c3:58:9a:
                    60:74:62:6b:de:7e:c6:12:89:d2:cc:79:a0:5d:cc:
                    48:61:59:94:eb:0d:b1:ac:3d:fe:d2:91:0e:09:5c:
                    b4:f5:6b:0e:d8:1e:84:ba:6a:7a:11:50:1f:e1:13:
                    01:ee:c0:a0:0d:e5:83:13:84:12:30:76:ce:24:bc:
                    23:62:1c:ad:d5:2e:5c:a5:5d:90:73:f5:93:30:d3:
                    ea:a6:7e:43:b5:52:d6:5c:1d:b0:d1:3b:73:86:23:
                    a4:d9:16:36:8c:8c:56:fd:6d:3a:9b:44:1b:99:d6:
                    a3:ed:0f:c2:25:a7:fa:9a:12:f7:5a:b0:05:46:f1:
                    0e:e2:19:84:80:5e:54:79:ee:8b:15:ce:87:49:8f:
                    e3:4d:c3:7b:47:77:65:68:b7:67:95:f4:df:29:c1:
                    a1:fc:b5:30:7f:5d:11:9e:1d:43:99:07:b6:ab:5d:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:80:AD:F7:63:1C:49:E2:86:B1:B6:06:B1:79:05:9C:73:20:6E
            X509v3 Authority Key Identifier:
                keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:c2:4d:d9:a4:d6:aa:24:c4:16:86:d9:b9:48:b0:69:26:
         b5:bd:73:06:5e:25:44:75:2c:31:c2:04:3e:d5:18:a2:aa:e7:
         8c:0a:88:88:bb:e9:0b:fa:5a:94:47:cf:9e:94:2b:35:d3:be:
         e3:16:52:7f:a3:26:fa:f4:ce:ba:4a:6c:97:8d:8b:e2:fe:67:
         f1:a7:7b:41:17:06:f2:d3:d6:90:1a:0d:59:9a:ec:f7:7e:9b:
         40:cd:0e:7a:66:e3:a5:ab:6b:5c:65:4f:18:e6:f4:95:81:8c:
         5b:7d:af:dd:4c:e0:b3:3e:41:c4:85:db:5e:42:94:c0:d2:0e:
         af:aa:93:5a:90:ad:96:89:e6:60:ef:bb:31:df:9c:74:0b:56:
         6e:e2:4f:7f:db:58:79:b6:cc:f5:08:9d:95:41:b2:91:44:94:
         61:11:66:5b:b3:c2:5e:ae:3e:5f:34:2e:6c:62:f7:52:26:82:
         23:81:d5:cd:df:ae:7d:db:a8:26:a4:60:c0:1c:8f:b3:9c:93:
         28:c9:f2:0a:28:e2:cf:69:e9:c3:e6:2d:a3:2c:cb:0a:26:22:
         5a:ed:99:5b:94:44:92:19:24:42:a9:49:68:e3:28:13:c8:a4:
         63:c3:d0:96:98:37:0b:a7:2c:df:67:55:55:81:2f:2d:66:cb:
         16:75:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:05 2026 by rpki-client