This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
File:                     AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json)
Hash identifier:          3NcRKFKW4/fkBmh8DPcqvZemLmVvxbccvXeEJ0Q0i3A=
Subject key identifier:   CF:32:46:A6:83:EF:68:58:64:BF:40:35:ED:6B:DC:C6:B2:02:41:B2
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Certificate issuer:       /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial:       019C2DE47BEA23F5396C8B3F520BF981B3F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
Manifest number:          1813
Signing time:             Thu 05 Feb 2026 13:01:14 +0000
Manifest this update:     Thu 05 Feb 2026 13:01:14 +0000
Manifest next update:     Fri 06 Feb 2026 13:01:14 +0000
Files and hashes:         1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: ynVCkTLEYkirvoQVgXbCLvrQs01z/3Zh4J+JxpArhWo=)
                          2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=)
                          3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=)
                          4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=)
                          5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=)
                          6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=)
                          7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=)
                          8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=)
                          9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=)
                          10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2d:e4:7b:ea:23:f5:39:6c:8b:3f:52:0b:f9:81:b3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
        Validity
            Not Before: Feb  5 13:01:14 2026 GMT
            Not After : Feb  6 13:01:14 2026 GMT
        Subject: CN=cf3246a683ef685864bf4035ed6bdcc6b20241b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:cf:d0:4e:86:af:9b:a0:20:0d:cd:cc:7a:
                    2b:19:50:54:f2:b7:a0:ee:58:bd:b5:93:5f:ab:4f:
                    09:49:20:25:92:6c:2b:53:96:b2:6b:6f:30:6e:70:
                    9f:e3:35:20:c2:3b:17:07:e0:7b:d3:4e:81:c3:ab:
                    5f:99:28:3b:e9:31:0d:20:fe:11:ea:a4:6e:20:38:
                    87:ea:2d:10:5e:83:91:f0:64:75:53:38:96:ce:f6:
                    3b:a2:b5:ce:b9:2e:30:1a:ff:c1:3f:c9:b7:88:b2:
                    ff:71:9a:ad:86:83:60:22:e9:1c:a8:fd:23:b6:56:
                    11:10:02:0c:17:f3:89:fe:7c:95:d6:ff:c0:34:0b:
                    24:08:b2:b4:f6:cd:db:1f:05:4f:17:30:e1:a3:2a:
                    95:be:2f:79:ab:93:ef:60:1c:94:21:b3:04:9b:cc:
                    6e:51:b6:62:5c:2d:3f:8c:00:73:f8:44:98:c0:bc:
                    b1:27:24:f2:88:88:27:93:47:54:9b:2f:a5:64:7e:
                    5b:e0:62:c1:87:84:c4:de:82:fb:1f:6b:b6:70:1d:
                    a1:2d:ad:39:7a:b5:b5:da:37:75:63:7b:4d:9f:c6:
                    6e:89:b4:dc:1f:c9:2a:c6:56:4e:d4:53:ae:62:ca:
                    66:3c:21:c4:ea:55:b6:a1:af:51:6b:49:9e:a9:6a:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:32:46:A6:83:EF:68:58:64:BF:40:35:ED:6B:DC:C6:B2:02:41:B2
            X509v3 Authority Key Identifier:
                keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:c9:b9:b7:52:f5:51:d9:5e:88:5f:b9:74:09:1e:ea:60:
         de:75:fc:20:ef:32:aa:73:b3:6f:bd:cc:ad:ce:c8:83:2b:b7:
         eb:27:6b:16:59:5b:9f:c6:38:41:c2:f5:2e:4f:d5:91:62:1e:
         d0:df:46:4e:57:69:3d:0d:76:66:6a:32:8a:a0:ee:cb:01:0a:
         11:e8:d1:5c:58:9d:24:be:ff:35:74:ad:18:49:f8:64:b3:b9:
         d5:0c:f9:af:29:2e:a9:88:47:11:2c:cc:87:6a:a5:80:d7:92:
         da:9d:23:83:62:c7:13:9f:a5:67:7c:58:72:86:df:49:80:e1:
         06:bb:a7:1d:0e:94:90:ca:5c:02:7a:40:4f:1f:0d:b2:64:2c:
         dd:aa:50:4c:54:1d:f2:0e:68:5d:24:6b:a9:a4:1a:f0:d4:4f:
         f4:a5:51:aa:4d:10:45:e6:75:33:75:0c:12:4e:37:99:02:bf:
         0e:92:70:64:94:c5:93:59:ea:99:ee:95:e1:ce:37:ac:66:94:
         3b:5a:36:00:4d:08:d9:05:2c:f4:dd:d1:03:18:57:07:7d:15:
         3f:d7:df:6d:42:69:55:28:4b:b1:aa:61:ab:f9:34:6d:60:ef:
         e7:fe:a0:6f:d1:52:39:db:8b:05:1d:9a:b5:14:3b:21:06:3e:
         61:25:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 21:12:19 2026 by rpki-client