This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File:                     1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier:          5doJzg7gfFFUpz94qUi9Klua6nCchmeU209nSdkptY0=
Subject key identifier:   58:89:1E:7B:65:47:95:61:03:03:00:7F:60:3A:85:9D:FB:4C:D1:7F
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer:       /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial:       019C446C648C71176C1F8545983794090B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number:          0F4B
Signing time:             Mon 09 Feb 2026 22:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:20 +0000
Files and hashes:         1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: /IjjOnvFCUn66bRkbHXVdjm4VQNwoq9uqHdhceONLYU=)
                          2: IW5RRSc1tcxUkpep-k7tW7PM6IA.roa (hash: +vPce20uhSaSDtSFtXFa/l0cGONxsb2HzBtheECvy6k=)
                          3: ovfxiPaVz0-xay5q5Zj6zS69Ic8.roa (hash: W4GWKNzxx0OFecL5XCcFwfyUup5/r9meKHE/Pk1WXCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:64:8c:71:17:6c:1f:85:45:98:37:94:09:0b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
        Validity
            Not Before: Feb  9 22:01:20 2026 GMT
            Not After : Feb 10 22:01:20 2026 GMT
        Subject: CN=58891e7b654795610303007f603a859dfb4cd17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:f3:90:99:e2:2e:a5:22:68:d9:ba:0d:c9:
                    9a:4e:b7:67:dc:84:da:9c:84:4e:ef:3e:06:b2:d5:
                    77:94:17:8d:b3:3b:b1:8c:49:22:ac:83:1a:cd:94:
                    13:ef:fc:eb:78:fb:c4:00:4f:96:49:51:8a:ed:b0:
                    27:54:9a:99:a6:e4:5f:d7:cc:dc:45:ad:6b:56:c0:
                    59:f7:ef:97:fc:7b:8a:0f:04:4c:54:0c:78:ff:f2:
                    38:ce:ae:1a:3d:7f:84:2a:64:3f:48:50:4e:eb:46:
                    b3:3f:49:23:50:18:bc:04:9c:25:59:57:91:c1:e0:
                    26:64:47:11:35:91:33:05:9d:7a:ad:0d:ee:fe:89:
                    63:d8:bb:5b:0c:51:51:ad:93:ca:0a:bb:8a:b5:1c:
                    a0:8a:06:ae:c2:8d:aa:01:d7:0d:29:58:0f:f4:43:
                    7f:ac:80:8b:4e:fb:d2:92:ec:38:32:35:2d:9e:71:
                    6b:e2:50:f3:2c:c1:fd:82:a6:85:c6:d2:02:3b:e7:
                    61:ca:97:06:f7:15:b3:ea:35:1e:3a:70:bc:26:62:
                    62:dc:c6:d3:06:52:a0:4d:37:19:b1:da:28:6e:85:
                    57:e1:21:6b:45:74:44:dd:12:3a:b5:16:28:ba:cf:
                    3d:c7:9b:96:0f:92:a9:59:98:05:da:30:2c:fa:bd:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:89:1E:7B:65:47:95:61:03:03:00:7F:60:3A:85:9D:FB:4C:D1:7F
            X509v3 Authority Key Identifier:
                keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:08:e4:8c:d7:06:f4:3f:6a:f5:8f:e2:31:c0:ff:c1:5a:8d:
         1e:2b:f4:a9:91:03:56:a9:24:69:d5:cd:73:34:71:5e:e3:e9:
         99:d6:e0:59:2d:e3:6f:85:82:78:a2:a4:ac:a5:98:c3:14:76:
         a9:d9:ec:14:e9:df:15:8e:1f:90:80:fc:bf:37:4c:92:fc:ab:
         a4:03:fa:e7:c5:69:57:28:ed:4e:e9:0d:ff:37:6f:38:62:98:
         29:0b:74:26:7c:87:27:82:1d:f1:7f:1d:c9:87:90:7f:ba:75:
         f2:54:ae:d1:f9:d4:9c:a2:cf:50:b5:7e:21:1e:e8:2a:23:df:
         a4:3b:45:48:7b:b1:51:bc:95:b8:b4:21:b5:ba:28:db:82:b2:
         10:2c:69:cc:30:28:a1:06:83:b1:b3:44:29:bd:ce:79:32:14:
         27:86:a2:29:4e:02:72:f9:c5:08:b9:0f:3a:58:c9:d3:ef:db:
         4b:f5:96:27:a5:0a:8d:c8:47:57:83:ea:dd:1b:85:a9:1d:12:
         55:ee:77:05:53:1c:09:cc:ab:42:60:e1:78:4e:f4:6c:9d:79:
         30:c4:59:f3:55:e6:29:e6:57:8e:68:ff:4c:88:1b:8a:d2:d1:
         88:5e:4d:3e:00:40:5b:91:49:99:02:18:e3:8a:25:5e:46:11:
         e5:0c:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:27 2026 by rpki-client