This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File:                     1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier:          KHjTkOGBZrGcSP4iXwOINW4upAZE5a4fj7P8bUzhSTU=
Subject key identifier:   C7:88:96:A4:67:40:6A:63:AB:EC:59:84:4B:F8:3D:8D:41:7A:7C:C6
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer:       /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial:       019C44DA0F5BDF2F1EB935E962A8C2C62505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number:          1810
Signing time:             Tue 10 Feb 2026 00:01:07 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:07 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:07 +0000
Files and hashes:         1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: l/KWLvgDyg7ZYEEBA4yGKIVi8lZ6EtFe2NdXc1YAu/Q=)
                          2: bruVcNNMC7Mp6aE6rGzw_JEfi0E.roa (hash: ejjZC1z5chW7R3pjzGKPMBf9E9b1c0msIw7AVev8LY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:0f:5b:df:2f:1e:b9:35:e9:62:a8:c2:c6:25:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
        Validity
            Not Before: Feb 10 00:01:07 2026 GMT
            Not After : Feb 11 00:01:07 2026 GMT
        Subject: CN=c78896a467406a63abec59844bf83d8d417a7cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:c5:8d:71:3e:79:1e:c1:6a:18:dc:6e:fd:
                    79:13:f8:a9:a7:f5:45:ea:3a:43:5e:5d:32:a2:9d:
                    b2:9b:86:33:e2:22:50:68:ee:43:e8:8d:ad:c9:7f:
                    a2:30:2d:57:6e:42:bd:7a:66:44:c2:73:48:ba:cc:
                    31:55:bf:55:bf:4c:6e:db:2e:2e:74:c1:a0:bb:6d:
                    ab:e2:58:fd:a9:86:df:89:18:9e:0d:5d:45:0e:1a:
                    37:7d:e8:e2:15:91:44:d5:f0:6e:9e:1a:84:10:3b:
                    fd:d0:ed:91:10:65:b9:ba:fa:d1:c7:06:e0:5f:70:
                    92:dc:d0:46:b6:9a:ac:23:61:2d:d2:e3:14:44:fb:
                    5e:72:93:9b:20:29:08:f7:70:a4:58:48:f7:e3:a8:
                    b5:9a:c8:ff:02:94:22:5f:51:e3:9e:2b:fc:46:c0:
                    ce:cc:84:f3:e7:40:9d:77:ec:69:ec:96:9e:e2:fb:
                    18:62:dd:57:d0:9b:e0:8c:bd:39:44:fe:9e:d3:ea:
                    99:e8:8c:4e:df:ea:bc:ac:8b:8f:d5:53:33:db:b8:
                    82:08:b7:41:ab:27:d6:62:0a:b3:2d:3b:fd:56:be:
                    ea:b9:81:78:f9:a1:1b:a9:fb:48:93:6c:a7:99:68:
                    36:48:e0:23:b1:ae:a9:0b:c3:1e:8c:3b:a5:af:68:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:88:96:A4:67:40:6A:63:AB:EC:59:84:4B:F8:3D:8D:41:7A:7C:C6
            X509v3 Authority Key Identifier:
                keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:99:9f:7a:c6:82:07:7e:86:71:fa:c8:83:10:03:07:5b:52:
         2a:a5:de:35:99:d8:8c:75:44:62:70:1e:79:7d:60:be:52:3b:
         ce:e1:43:ec:2d:b8:1f:15:66:56:7d:98:98:84:1f:94:40:0b:
         1c:4f:26:5e:9a:06:5e:a4:8f:15:7f:32:55:2b:cb:83:0f:1b:
         98:10:a8:6d:eb:91:67:0d:16:40:2b:10:6e:85:0e:eb:3f:c9:
         ee:47:b8:79:38:dd:93:e2:af:db:40:31:6d:95:9d:7c:4f:c5:
         01:99:c9:75:8d:6f:0f:5f:d9:7c:68:4a:12:8e:cd:3e:5c:b3:
         e1:ed:d4:8a:49:fe:c3:e4:e8:c1:7e:b0:e0:55:b9:8e:e2:a2:
         0d:b5:1c:4a:88:85:9c:96:c6:c1:05:f4:88:61:d7:0d:92:1e:
         fe:02:ff:1e:47:6a:4e:7f:43:7a:9f:84:4d:a6:12:b1:56:6c:
         65:69:01:f8:e7:c3:a4:4c:41:ce:49:03:89:b6:d6:c8:24:50:
         d5:6a:c4:c7:37:fe:1c:25:2d:7b:cf:f5:c2:94:fc:5a:94:c8:
         ff:28:a0:54:ad:d9:10:44:42:85:37:7c:be:77:96:81:4b:eb:
         e9:f1:c1:e7:d8:c0:21:b0:8a:7e:b2:5e:b1:e7:20:be:88:5e:
         d6:68:41:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:51 2026 by rpki-client