This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File:                     soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier:          llXkwO9pvtr80tK6R7XFrJyYuuSES2kPUM/Jf/lyLjE=
Subject key identifier:   F8:2B:FC:95:B3:F3:40:06:50:7B:0B:72:6E:11:14:1A:68:96:4F:5E
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer:       /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial:       019C43222ADD6FDD38B47E41D49FC9CD8CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 16:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:38 +0000
Files and hashes:         1: Is5lVfkqCedDcO_OO0H8DuN4gvU.roa (hash: +NNpX2NGf5j+CvKpz8oUmEw0sfVnXlTMpDFrjNlIe5s=)
                          2: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: VyOFP1SXeTcA1paj3MfO2V4tkDc1DSGk8VjsfptKleQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:2a:dd:6f:dd:38:b4:7e:41:d4:9f:c9:cd:8c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
        Validity
            Not Before: Feb  9 16:00:38 2026 GMT
            Not After : Feb 10 16:00:38 2026 GMT
        Subject: CN=f82bfc95b3f34006507b0b726e11141a68964f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:73:df:86:0e:58:ec:f6:0b:e7:b9:ef:30:
                    20:24:c8:bf:d7:85:5f:15:78:b1:38:44:9f:3b:30:
                    13:e5:74:00:e7:bf:63:69:c9:5e:99:af:dc:dc:48:
                    d7:b0:05:5c:00:06:b1:4a:ee:20:10:93:d6:b1:39:
                    d3:91:f5:04:7d:3a:d9:ee:8a:09:2e:0c:f4:2b:cb:
                    79:9c:24:ac:fe:ef:42:1d:bb:ee:46:31:18:ed:44:
                    b5:f9:64:43:5f:b8:24:dc:54:80:e1:e2:2c:30:ed:
                    19:e0:13:84:71:38:71:1b:31:e6:f0:20:15:66:21:
                    ff:cc:11:26:e0:a8:76:f9:9a:4f:c7:92:b0:00:7b:
                    c0:b1:04:81:57:46:8d:1d:5a:8c:7e:a0:ea:fc:86:
                    f7:de:16:90:b7:e7:58:99:0f:fe:ca:1a:99:e6:8a:
                    1f:02:b6:a7:60:52:28:c7:a6:91:d3:7d:8b:09:2d:
                    41:7e:f9:19:df:2d:10:d8:97:5c:92:ea:27:06:c8:
                    a7:e1:a3:da:83:e0:71:14:7a:27:07:38:77:46:55:
                    82:00:40:ef:00:4f:0a:d8:3e:e7:b6:79:d3:ca:2a:
                    5a:1d:e9:59:cd:32:a6:f1:b8:b8:bd:02:c9:c9:bb:
                    17:2b:62:cd:c2:e8:ba:10:0d:d9:14:c2:6d:5b:bf:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2B:FC:95:B3:F3:40:06:50:7B:0B:72:6E:11:14:1A:68:96:4F:5E
            X509v3 Authority Key Identifier:
                keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:44:bf:e3:69:ea:fd:cb:bd:77:3d:cc:bc:43:2d:93:c9:
         1e:96:19:33:6a:69:1b:6e:0d:eb:4a:0f:4c:22:6c:fb:f9:3d:
         94:5b:4e:66:a5:80:21:dc:2c:d2:f9:aa:68:e9:cb:08:23:5d:
         a9:a5:3f:a7:07:a7:41:01:5f:71:a1:fa:4e:a7:d6:82:da:f1:
         e0:e5:d3:b7:e5:fc:ce:44:00:98:50:c4:44:c5:76:f5:78:46:
         ce:ef:5b:2f:18:4a:d9:fd:f6:82:a5:9b:01:e4:aa:d0:f7:b2:
         68:de:a5:79:b5:77:33:cf:99:43:12:81:de:5c:ca:7e:52:3f:
         36:2e:64:f0:25:6c:42:fe:47:30:41:f5:19:76:90:8c:44:76:
         a3:58:d7:b0:10:dd:31:f2:c1:fd:e2:f4:23:c9:c0:10:4d:bd:
         1c:8a:00:46:28:e5:08:3c:6f:f5:83:9e:0b:05:39:31:7e:84:
         e6:1f:f9:0c:af:87:9d:cf:7d:52:a5:83:01:bd:66:9f:e2:87:
         63:fb:47:b6:5a:52:86:50:dc:43:ee:5f:8e:79:13:bf:3c:df:
         f8:66:15:93:97:12:fa:1d:f5:cf:1a:48:1a:d0:33:c7:6a:22:
         6a:39:c9:ab:8a:c4:a2:24:63:96:11:5c:67:12:a6:04:c6:a4:
         53:23:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:53 2026 by rpki-client