This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File:                     0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier:          jAIDQvp5tlCjRdB39JbY+V/T1klWztmGltnrhTRKxLo=
Subject key identifier:   5A:9A:D1:5B:00:37:33:F5:8F:A3:08:9A:55:7C:3D:6D:A2:2A:49:09
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer:       /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial:       019C427D458DE0A3518043B99292654DA0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:31 +0000
Files and hashes:         1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: 3gK6R1WFTOI0jJ8ImbMdXcuMkPZaCi+ICSt4X5yK2vM=)
                          2: KBLYjGsoc6I_Jnk5DngPmO4ePQU.roa (hash: XFoKkPbZxI2pK2o+bv+Ogt5LDh4mQTF9jwqVRi7HCtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:45:8d:e0:a3:51:80:43:b9:92:92:65:4d:a0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
        Validity
            Not Before: Feb  9 13:00:31 2026 GMT
            Not After : Feb 10 13:00:31 2026 GMT
        Subject: CN=5a9ad15b003733f58fa3089a557c3d6da22a4909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:46:23:c9:c5:81:c3:5b:c1:4a:b3:1f:fc:30:
                    35:c6:41:25:4d:89:7a:15:20:fb:85:b9:e3:1e:66:
                    d7:66:a5:42:71:4f:4d:46:35:19:ef:72:4e:f1:63:
                    45:9f:0c:d0:88:93:9b:d2:74:6d:05:b1:c3:5b:41:
                    ca:2c:70:ba:66:41:fd:4f:e8:aa:8d:8f:f6:d1:34:
                    11:f3:37:57:24:0a:bb:33:f8:83:5a:bf:15:22:49:
                    76:09:5f:67:50:db:b1:0e:fc:43:1c:b3:7f:2f:3d:
                    58:3e:14:3c:c2:f8:fa:83:e7:67:a9:02:4e:2f:09:
                    32:d2:ae:55:30:74:32:a9:b7:d9:f8:c3:0a:02:b0:
                    87:e5:e6:c6:96:1d:20:12:88:5c:72:a5:f5:bb:21:
                    26:76:f8:62:41:ba:04:1c:92:ec:97:58:2c:8a:04:
                    ea:02:bc:18:43:18:ad:ce:ca:40:a0:48:2e:9b:e5:
                    c2:3f:ff:6e:c5:9d:c7:7f:11:f7:91:79:39:46:2a:
                    e9:e0:0f:8c:82:09:54:d6:a6:df:94:76:a6:03:72:
                    8e:86:eb:cd:92:d7:b8:7a:85:ad:8b:15:34:2c:ed:
                    e4:9e:13:6e:4a:73:17:f2:72:f0:ef:26:c9:1d:7a:
                    58:ee:6a:80:76:8f:c4:83:e5:7b:02:a7:cd:d1:33:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9A:D1:5B:00:37:33:F5:8F:A3:08:9A:55:7C:3D:6D:A2:2A:49:09
            X509v3 Authority Key Identifier:
                keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:71:a4:a5:d3:09:5e:69:ea:72:88:3d:d4:1c:ef:7f:11:
         46:b4:8e:7e:8b:d7:0f:c2:a1:fe:dd:ec:09:ab:39:a9:9e:30:
         f7:ec:e5:4e:e5:0a:6b:75:f5:fe:e2:01:88:19:96:ef:3f:36:
         b2:1b:ed:08:47:ba:9b:80:34:af:94:3e:b0:dd:d3:7a:d5:a0:
         9c:7b:6c:d8:5c:b3:2a:91:2c:68:b6:33:2e:3b:fb:60:53:08:
         a9:64:3a:d4:ca:ca:58:2f:76:7c:eb:fa:cd:53:2c:18:8d:a7:
         0a:0a:e1:78:8d:70:e9:cc:85:7f:aa:09:a5:72:42:02:b8:e8:
         16:46:c0:63:e7:58:14:22:81:2d:45:21:bf:52:a6:f7:95:8a:
         1f:b7:2d:e4:a0:bf:54:94:5d:b8:02:38:0d:a1:ec:4e:60:9b:
         7d:8d:46:f9:4e:e3:ba:50:eb:6a:bd:00:f5:73:68:ce:5f:b4:
         40:06:38:30:2d:0c:f3:60:6d:6e:c6:e9:88:ce:53:a5:9d:f4:
         80:19:06:1b:79:ef:9d:2b:82:9b:10:12:65:61:d1:e5:d9:51:
         91:0a:f3:05:4b:bd:f1:f0:21:3c:c2:8b:14:63:c2:d8:86:13:
         c8:9c:a5:08:ac:6a:fc:17:a1:bd:69:30:62:76:a1:6c:ca:05:
         58:71:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:51 2026 by rpki-client