This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File:                     sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier:          5UAPDqjjesOORnsMfUsV0GYaTogihDvAl5lmIcLyMqc=
Subject key identifier:   9C:35:0D:68:6E:3F:08:52:1A:5C:9F:A2:C1:6A:82:C7:BC:C2:8B:19
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer:       /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial:       019C40FD214B6AD30565B2E8E7960CB62671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number:          1398
Signing time:             Mon 09 Feb 2026 06:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:56 +0000
Files and hashes:         1: Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa (hash: akxM1ULNfux4cSJzKmej1AQZXAU7j1qSHqgRSQx0jHE=)
                          2: l_UYfd627TWdVQUBGDcYXolbG3M.roa (hash: jE9YZp4SwDWD4mybbL99DqobqhNeL3J/FFGbfANXQkY=)
                          3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: YcX6FmKrIWhNHdEpZGtzkRVNwRAuu10qzdlgkGiKdeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:21:4b:6a:d3:05:65:b2:e8:e7:96:0c:b6:26:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
        Validity
            Not Before: Feb  9 06:00:56 2026 GMT
            Not After : Feb 10 06:00:56 2026 GMT
        Subject: CN=9c350d686e3f08521a5c9fa2c16a82c7bcc28b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:dc:c8:08:f8:23:aa:b3:c5:03:78:02:25:
                    54:13:d5:f0:69:89:85:97:81:12:e8:ec:3a:3b:f4:
                    46:51:38:e8:fd:47:74:07:60:1a:cc:e7:d5:ee:3b:
                    30:68:58:31:2b:ea:eb:40:d6:82:fa:1d:95:52:c9:
                    1c:ca:3f:ce:ae:0a:33:dc:75:e1:a2:be:31:62:ca:
                    7e:5e:16:6b:5b:c3:f1:15:86:fc:7a:a1:b2:a6:7f:
                    ef:90:1a:d8:c7:6e:7e:94:20:c9:3d:b8:53:28:63:
                    7d:27:83:d3:b3:f0:b4:c0:b4:07:be:d6:e3:c7:9d:
                    9d:db:7b:fb:5c:e2:6d:00:f9:5f:60:e6:23:4d:28:
                    f4:62:f8:63:35:a3:59:5f:22:c9:ba:a0:01:ad:ce:
                    05:be:20:43:91:0f:56:34:5c:17:7c:31:4d:f8:cb:
                    78:aa:bf:bc:81:66:70:66:d0:e6:49:78:2c:d2:0d:
                    2d:57:dd:92:6a:cf:9b:92:42:2b:4d:05:a5:8c:97:
                    d1:15:e5:c9:ee:cb:1a:24:71:15:4e:16:69:d9:23:
                    22:02:21:87:f3:16:db:af:ab:a7:95:fa:11:3c:13:
                    56:8f:9b:63:e8:54:6b:43:d3:7b:38:b5:6c:20:bc:
                    6f:6c:f9:67:b1:57:57:3b:ad:38:09:f8:65:6b:db:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:0D:68:6E:3F:08:52:1A:5C:9F:A2:C1:6A:82:C7:BC:C2:8B:19
            X509v3 Authority Key Identifier:
                keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:98:73:48:81:04:61:59:4b:ea:bc:a5:23:29:99:e8:3e:
         fe:8f:9b:ed:34:8c:de:8a:1b:57:be:37:d5:4a:9e:53:bf:b1:
         7f:02:e3:17:5a:f6:10:89:da:78:63:fc:e2:d3:79:e1:b0:f9:
         ec:75:7c:3d:69:7f:38:cd:5b:70:23:d7:e8:b5:fd:0e:59:02:
         41:b4:78:bc:2a:2e:15:0c:11:07:e9:cf:20:9d:f2:2f:70:fc:
         8f:8b:3f:05:ea:bc:eb:23:14:36:36:c3:1a:59:0d:90:2d:1e:
         a4:2a:96:80:61:53:f9:5a:60:71:81:c9:5e:40:8e:64:31:22:
         02:f3:e2:48:c2:f2:ed:9f:55:ef:e1:f6:3f:55:29:8b:d5:80:
         20:b5:aa:1a:8e:5f:d6:7e:83:a3:b6:ba:9f:98:c6:bb:ed:90:
         dd:a5:82:71:44:33:28:3c:d3:56:ea:38:c7:60:06:34:e2:f3:
         7d:9b:5f:4f:07:fc:ff:50:8e:f0:97:3a:92:c7:de:a5:fb:bc:
         f9:25:f2:d1:4d:2b:64:8a:48:fe:29:5f:b4:89:47:77:03:62:
         05:01:b0:69:98:64:85:d2:56:28:d8:5c:78:ff:dc:31:93:01:
         37:19:4f:65:a3:0f:d5:7e:dc:60:0e:90:cb:a9:55:e7:d4:bb:
         3a:f9:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:15 2026 by rpki-client