This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File:                     1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier:          6JMMGbcOwgbMSlk96oeY6pMOAc9oKQuW8DLGj9BYnrc=
Subject key identifier:   E5:06:4F:AA:9A:DD:F0:90:AE:B6:1C:EB:9A:9F:E7:7B:72:D7:5D:D4
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer:       /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial:       019C43FD9264EF7C574F2AD628D56FD58E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 20:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:17 +0000
Files and hashes:         1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: jyxyFy2JiwLlDsCcswC19fsPYVwaPyKLibWh0JXEnjk=)
                          2: Tqhx4Fn_ogmc03013r8yI8JBIyo.roa (hash: n+rTrm4PulAJ0u2rK6/67Sh0qOIq9tX+Xq5NsrAfUfU=)
                          3: tg4JcBcc72nsYKViVZxUUBgVXQQ.roa (hash: f2eYldA7z0hzEnVdnyZLBMrCbNOlEuq0KoeSWyn4Dig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:92:64:ef:7c:57:4f:2a:d6:28:d5:6f:d5:8e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
        Validity
            Not Before: Feb  9 20:00:17 2026 GMT
            Not After : Feb 10 20:00:17 2026 GMT
        Subject: CN=e5064faa9addf090aeb61ceb9a9fe77b72d75dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:bc:3f:a5:a0:30:11:43:24:e0:b5:cb:70:
                    c3:25:0b:8a:4e:3a:bb:61:63:3f:e0:9a:4e:29:c4:
                    0e:53:4e:97:38:b1:2d:a0:3e:f3:a0:35:6d:75:34:
                    65:00:89:da:80:b7:02:9f:f1:91:8a:5a:7d:3d:72:
                    f3:da:8a:a3:7a:3a:d8:86:15:19:74:0a:98:ac:4a:
                    48:73:ef:34:68:e7:3f:13:52:68:ee:b7:f7:86:88:
                    ba:b4:21:05:26:d4:2b:a9:6b:c3:0f:c9:27:35:6c:
                    84:a4:e2:00:93:72:94:9b:18:ba:74:32:b8:41:29:
                    7d:0d:45:ce:53:f4:37:2e:ba:db:6c:21:c4:92:9c:
                    09:b0:c9:43:dd:42:6b:8d:09:7d:49:b0:ce:29:29:
                    a4:8e:3e:a0:26:b7:39:dc:de:ae:4e:d4:58:e0:fe:
                    b3:1c:5c:74:79:01:a9:c8:f0:5a:77:78:90:c5:ce:
                    44:91:c5:cc:4a:4b:fa:2f:fa:7b:a4:ec:1b:ac:9c:
                    26:c3:f9:91:bd:b9:af:84:d3:1d:30:64:10:e6:d2:
                    5e:d7:32:5e:71:2a:0b:cd:2d:bb:2a:b0:c8:5b:5e:
                    dc:1c:02:b7:f2:71:e8:a4:36:45:d6:bc:8d:26:6b:
                    89:9e:8f:72:4f:d7:80:78:b6:a1:ab:7e:1d:d7:65:
                    91:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:06:4F:AA:9A:DD:F0:90:AE:B6:1C:EB:9A:9F:E7:7B:72:D7:5D:D4
            X509v3 Authority Key Identifier:
                keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:dd:4d:9a:a6:f3:58:4a:02:a5:b7:38:ee:d5:b9:ad:3c:e8:
         b7:f3:a0:66:f4:8f:64:e0:92:9f:8f:78:e6:db:1a:c6:0a:11:
         a0:21:b0:01:cc:97:3c:b6:d2:82:2e:2b:89:db:07:b3:67:95:
         82:bb:d7:c0:16:14:20:69:1c:05:c1:39:2c:3d:7d:a8:d0:1a:
         29:b0:61:de:f3:1c:12:4f:e9:9e:47:aa:4b:c7:23:3f:60:86:
         11:36:c2:99:15:57:45:a4:96:4e:1d:08:0c:8a:a0:72:5b:07:
         ad:7f:95:74:c4:33:3f:1d:43:d8:9b:43:4a:2d:17:88:6e:62:
         cf:3e:33:f1:e6:4f:a9:f8:0a:9a:df:8e:36:41:00:f3:29:09:
         68:e2:b4:46:85:3b:86:fc:0b:1c:51:f4:4b:98:d0:31:e6:97:
         27:d2:f0:4e:bf:30:e1:fb:ae:5f:79:2f:4b:4a:e3:d3:2b:84:
         cc:d5:c2:a6:a2:b2:4b:52:e9:0c:6e:c2:f3:77:f3:f3:e4:4f:
         66:81:7c:3d:61:28:5d:2d:1c:ba:1c:17:f5:a9:b5:0f:fe:52:
         36:c6:aa:8f:68:c7:07:b5:a1:64:d5:09:f0:bf:0b:51:60:49:
         22:dc:25:71:80:88:a7:38:11:7c:88:fd:f3:9d:f0:b1:8c:80:
         b6:8e:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:14 2026 by rpki-client