This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
File:                     29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json)
Hash identifier:          EOiipmQqm+u/0Exz+V3/iC++4YBo3/MrxEDc1FRmkGw=
Subject key identifier:   40:D7:E0:82:1F:DE:FB:AA:91:ED:68:E2:83:21:1F:93:C5:8A:44:B7
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Certificate issuer:       /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial:       019C2E52334C6E2D8302CFC9E62396C836CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
Manifest number:          1814
Signing time:             Thu 05 Feb 2026 15:01:04 +0000
Manifest this update:     Thu 05 Feb 2026 15:01:04 +0000
Manifest next update:     Fri 06 Feb 2026 15:01:04 +0000
Files and hashes:         1: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: w3F3duLdHEG4iPPsCYJmlMCCzEaZNQy8AvBcRsS2Pkc=)
                          2: 78AdnPlYxxNRvG7yIsV4H0dQ3uU.roa (hash: ZTu1Ha6s4A0bZr6OWIB0UemduSdBco4nDQ6ul5K7k/o=)
                          3: pZWv9aR-lAPmI9FegQDU1_TsJGQ.roa (hash: zi9P3PwATT1zpaHWwrjwAJyWvhGqfYUdHlC1nMks7rY=)
                          4: ws9IrMCFTsyujEnp3NM74auDbZo.roa (hash: rNmcUDMhWLisI/rUnE9X9Uz3aN70rmmRCgpG26lV2pk=)
                          5: zj5fKqmt0ZTCnTxN2MLrVwaw1lQ.roa (hash: /UJhdA7Jh+uSEIMl9lW07vSFGCaa6lBIOlAIZUdipFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:52:33:4c:6e:2d:83:02:cf:c9:e6:23:96:c8:36:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
        Validity
            Not Before: Feb  5 15:01:04 2026 GMT
            Not After : Feb  6 15:01:04 2026 GMT
        Subject: CN=40d7e0821fdefbaa91ed68e283211f93c58a44b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:27:58:8e:ee:30:46:5a:0b:ae:eb:2f:cc:
                    2d:04:f9:8f:7a:c2:5d:4d:8c:dc:82:fc:60:28:e4:
                    79:76:cc:09:6a:4e:c8:e7:dd:7e:ca:ea:94:cc:29:
                    f8:0e:05:d8:b3:7e:7e:c2:bf:5e:05:45:29:ea:0b:
                    e0:e2:6d:eb:ef:6b:30:63:b0:e6:97:b5:52:d7:ad:
                    ca:56:ab:4e:17:d5:53:da:33:a6:83:98:58:4f:51:
                    72:78:1f:b4:4e:15:67:88:22:9b:13:e9:2a:db:f0:
                    48:ff:85:b8:72:5a:f4:55:99:00:d9:8e:f9:f6:06:
                    65:b5:20:c5:ee:4a:82:f8:f1:6a:df:7d:47:f4:f0:
                    11:54:64:8e:2a:2b:17:ba:87:3c:43:6c:7d:5b:53:
                    4f:8d:87:35:aa:7e:c7:0c:65:b9:11:c5:f5:57:fa:
                    a2:2f:04:51:2e:fa:19:9c:57:11:71:d1:bf:eb:29:
                    15:8c:17:d8:83:a4:a0:eb:38:a7:06:61:2c:ed:d8:
                    19:f8:70:af:bc:1c:75:43:02:1a:09:cb:83:f9:e0:
                    71:78:eb:3c:8b:c9:50:0e:8b:74:a4:c2:46:0e:f1:
                    f4:c4:85:9e:66:7d:2d:d9:dc:90:84:39:8b:f7:82:
                    02:19:3b:d8:41:52:f1:d2:7d:7b:ed:0b:59:e7:6c:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D7:E0:82:1F:DE:FB:AA:91:ED:68:E2:83:21:1F:93:C5:8A:44:B7
            X509v3 Authority Key Identifier:
                keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:5f:d9:b1:62:d4:cc:24:27:e8:a6:f2:f6:10:b9:03:72:
         5c:86:b4:b3:ef:0a:27:60:0e:df:b4:2d:8c:6c:2e:2a:0d:e4:
         cf:83:d3:ec:2d:8a:0a:35:e0:91:3b:38:12:d2:ac:4e:53:61:
         de:1a:d2:d2:aa:fe:fe:28:3b:77:e4:3e:e2:9e:f9:b6:be:e9:
         03:f3:19:fb:20:43:06:6c:30:89:14:38:81:df:e6:c0:e8:64:
         26:58:76:ea:10:e7:44:da:d8:83:73:1c:6e:12:9f:0d:fb:5b:
         e2:21:88:7b:e2:28:4c:8f:7a:c0:36:0e:93:d2:ad:bd:a6:6b:
         6c:d3:af:b7:a7:63:2c:88:bd:e6:da:90:75:1a:2e:a6:7e:6b:
         08:1e:f5:57:c4:fe:a7:d2:38:86:8c:dc:3b:2b:76:73:bd:9d:
         78:1c:64:3d:d1:7f:38:93:68:fc:77:92:90:30:df:f9:bf:17:
         10:6a:a5:a4:d9:24:52:3e:b5:57:fb:fb:df:40:c8:3b:90:47:
         dd:09:15:14:30:95:c3:7c:b1:59:fd:fb:52:72:4c:2f:a8:64:
         fb:a9:d7:a2:99:16:c2:09:4b:19:d3:cf:cf:76:63:3e:28:75:
         10:18:e8:d6:9e:ea:58:28:d1:03:b2:24:a5:8d:6d:28:f2:96:
         1b:7b:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 19:31:36 2026 by rpki-client