This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File:                     1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier:          konlDYVznuveyyveQhIh1I0Z5qiUzYmtcn1HvnqiMHc=
Subject key identifier:   5C:58:E4:A6:D7:2D:50:AB:09:30:24:1D:49:FA:93:89:69:0D:83:25
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer:       /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial:       019C42B417E6B3A113B2F17E4C5B85D85709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number:          0947
Signing time:             Mon 09 Feb 2026 14:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:24 +0000
Files and hashes:         1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: jT6z5I23OjVnA8dyazg2LF4LI+8ZX/mvw6mZsm64Jgg=)
                          2: GYutIkRnUUe6rU3f0KqhJg3i2C8.roa (hash: T8JwYcJCmU9VHg+cmAioCuzk66qEr5evLlhmPjOOj8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:17:e6:b3:a1:13:b2:f1:7e:4c:5b:85:d8:57:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
        Validity
            Not Before: Feb  9 14:00:24 2026 GMT
            Not After : Feb 10 14:00:24 2026 GMT
        Subject: CN=5c58e4a6d72d50ab0930241d49fa9389690d8325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:f9:2c:25:54:61:44:6b:27:b7:d4:ef:16:
                    35:3d:61:61:ac:80:cc:2d:56:9e:ca:7d:d1:75:89:
                    b9:f9:d0:3c:d8:97:70:34:fe:60:cd:e3:03:0c:20:
                    5d:a5:14:39:5a:ad:d6:84:47:90:71:f7:87:e3:42:
                    71:00:69:30:96:98:9d:2a:60:ea:fd:e4:3d:33:42:
                    f6:17:21:85:a1:34:b8:a0:fb:27:3a:8d:c8:47:2b:
                    2f:74:ad:32:c1:67:48:f0:67:76:6e:bf:ea:86:fc:
                    ab:e4:82:b7:1c:38:c0:63:e4:52:af:98:d9:22:6f:
                    39:2d:8d:b9:54:0a:a9:fe:67:cb:7a:18:22:67:9c:
                    2e:16:c7:06:df:3d:11:ee:5f:3b:e2:78:ab:cf:64:
                    3b:f1:ab:43:d2:4e:2f:ab:8b:17:09:ce:a0:3f:24:
                    6d:72:3d:14:25:c8:d7:25:9f:84:a7:a4:c1:2d:c4:
                    9a:37:ac:c1:87:2f:c5:df:28:c9:24:33:92:15:dd:
                    a5:a5:84:ad:d1:bf:03:be:47:af:2f:74:13:7d:1a:
                    4e:64:99:cb:de:90:49:60:0a:de:e2:05:7d:22:33:
                    49:62:df:1d:4f:60:83:a1:18:48:a9:a8:36:d9:d7:
                    f9:e6:29:b6:e6:53:3d:96:79:db:9d:97:9e:f8:67:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:58:E4:A6:D7:2D:50:AB:09:30:24:1D:49:FA:93:89:69:0D:83:25
            X509v3 Authority Key Identifier:
                keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6b:fd:05:3c:86:a7:2c:34:12:7e:2f:dd:06:ad:e2:53:95:
         17:6d:c1:19:8b:c3:4d:2c:f0:c0:8a:0e:12:df:5c:60:49:44:
         f8:9a:b5:6f:68:05:47:33:8b:36:48:6b:7a:b2:a3:db:21:00:
         63:08:22:6f:af:15:43:7b:8f:37:ff:67:ab:28:f6:90:5e:63:
         25:a0:ed:a3:f6:54:6e:bc:ad:96:1e:37:89:5a:bf:62:6f:68:
         5b:c5:e2:73:2c:4a:4c:a5:e1:c2:d4:ef:44:d7:4c:92:41:ba:
         b3:ab:58:4d:ec:23:bc:1b:53:b4:64:9e:da:60:66:6c:21:5b:
         ad:24:45:8c:ca:95:41:c9:e3:cf:9c:2e:4a:9b:6b:29:cd:4b:
         48:86:65:b5:88:07:a6:b9:7e:76:ea:f9:45:8b:aa:1c:df:1e:
         9f:f9:1c:e7:bf:7e:29:a4:56:8f:cc:7c:6c:d7:82:7c:42:5e:
         53:9d:ae:e0:4e:1c:84:1b:3a:6f:b7:64:9a:96:f3:c6:51:6f:
         38:bc:fa:d0:31:11:7f:68:16:af:dd:2c:84:6e:69:67:09:82:
         7a:8d:c2:7c:82:31:68:b2:1c:09:e1:81:de:62:8a:96:20:e8:
         1b:75:e8:5f:77:53:b7:78:0f:f8:73:a7:59:a4:da:65:84:e9:
         45:31:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:52 2026 by rpki-client