This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File:                     564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier:          cqaPQvYnZy64/SjYoDR7n/wzUI05iVATyPnIxvypS0k=
Subject key identifier:   AF:F0:88:5E:82:2A:E1:D9:18:70:16:42:DF:ED:7D:C8:F8:BC:43:97
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer:       /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial:       019C42B3F3C260FEFD465F1567387672B882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 14:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:15 +0000
Files and hashes:         1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: zIigaWET+hwtzMPIuZ1NI3FvUDRLHfcWe3p9jFIF+Bo=)
                          2: MpJSn9TWRwhS5zTd8KOd_dUj3X8.roa (hash: 3l8Y3glur9khayrgDEUAxZoVQurQKRMAgC985VKxnJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:f3:c2:60:fe:fd:46:5f:15:67:38:76:72:b8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
        Validity
            Not Before: Feb  9 14:00:15 2026 GMT
            Not After : Feb 10 14:00:15 2026 GMT
        Subject: CN=aff0885e822ae1d918701642dfed7dc8f8bc4397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:fc:b0:48:08:a6:e6:32:da:6f:14:3c:a1:
                    fd:8a:2c:da:3f:40:dd:66:6d:ae:08:4a:d3:84:f4:
                    1d:7b:b1:e8:ad:6d:a1:55:38:ff:1a:97:97:31:6b:
                    d6:0c:46:a5:40:8d:16:90:d6:54:8b:6d:fe:a8:14:
                    e5:e3:e3:3c:1e:ac:54:e4:22:2c:20:e2:f9:2a:a0:
                    5d:a4:ba:04:78:8f:c3:bc:0e:7f:c0:c7:41:43:47:
                    c0:d4:0d:27:64:af:10:63:c3:3d:69:ed:76:37:fc:
                    64:a4:1e:84:1f:b4:87:b8:ad:af:d9:ea:a4:ad:6b:
                    ac:b7:f5:dd:00:4e:41:f0:23:8f:41:74:e9:9c:e4:
                    16:ee:17:8d:29:d5:65:8e:e1:a2:c1:5c:2d:6d:73:
                    dd:9a:cf:b4:a0:6f:1f:13:0f:77:cb:2a:60:b6:2e:
                    54:b8:0c:81:1c:6a:53:2e:72:26:1b:7d:de:7c:31:
                    4d:45:76:b2:8d:79:a6:8e:39:4f:9f:ae:94:58:9c:
                    a3:bf:b1:d3:91:ec:1d:c8:96:87:cd:fd:ff:47:03:
                    08:09:de:2f:74:11:12:f7:5d:7e:fa:a1:64:98:e7:
                    2a:98:69:9e:94:82:7a:7c:b5:40:dd:22:40:f9:d6:
                    5d:40:fd:e6:18:47:7a:23:54:ab:8f:67:5c:25:da:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F0:88:5E:82:2A:E1:D9:18:70:16:42:DF:ED:7D:C8:F8:BC:43:97
            X509v3 Authority Key Identifier:
                keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:49:e4:d9:44:ed:bf:5a:e4:0d:a3:b6:f4:93:2a:b8:30:
         f0:fe:c4:65:80:59:8d:75:62:61:d5:f7:99:17:a6:c6:8b:ec:
         2f:7e:1f:0a:37:f0:5a:38:65:e9:b0:a2:5a:50:eb:2c:7a:bc:
         5b:04:7c:0a:ec:5c:ad:00:1f:30:39:8b:ce:9b:04:d0:64:c8:
         2d:6c:20:30:5c:b2:4c:42:7b:ad:cb:98:ff:92:e3:36:fe:f5:
         ca:9e:68:de:cf:0e:c2:dd:02:8f:cf:8a:8d:7d:bd:3d:51:ed:
         04:fc:dc:2a:e1:df:39:3a:ad:fa:dc:f7:73:0e:08:b6:b1:c0:
         86:19:77:c1:d4:6d:cb:80:cf:99:2b:c3:42:7b:47:22:73:1f:
         a5:8d:e9:d6:d6:20:fe:c1:67:80:3e:62:c6:4e:49:40:df:72:
         83:59:72:7c:9c:8d:96:41:08:6e:1e:4f:ac:aa:e8:17:14:da:
         88:7a:97:25:76:08:54:d5:3b:df:2a:be:db:52:cc:7f:aa:a7:
         57:fc:6b:5a:25:2f:a4:d7:14:45:fd:ba:ac:dc:2a:29:84:dd:
         fc:0b:76:0d:14:eb:ca:ed:8c:ec:d1:6e:cd:b0:4b:4b:f7:f2:
         08:44:30:1a:3a:cf:32:ec:6d:df:9d:93:79:ac:aa:d3:11:49:
         85:65:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:13 2026 by rpki-client