This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File:                     rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier:          xxLNMihSuVTpH99pmDPRp7uF7LUOXMvk3HeBGBDBrbg=
Subject key identifier:   11:7E:2E:73:F3:82:97:FC:E6:3A:FE:B9:16:4E:A9:7C:FC:DB:B0:D1
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer:       /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial:       019C41A24660287C0432DE7E03035D596BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 09:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:19 +0000
Files and hashes:         1: 43XYcf5-XFEmoBb-JGay0mPibOQ.roa (hash: FgO/4nn5vJOam5rskKh+YaRMW3mrGa5JCylvjIZYN3s=)
                          2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: va7MvwLmsLXq3lo0enPCPHul0r89ZmBHxCtU1deVb98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:46:60:28:7c:04:32:de:7e:03:03:5d:59:6b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
        Validity
            Not Before: Feb  9 09:01:19 2026 GMT
            Not After : Feb 10 09:01:19 2026 GMT
        Subject: CN=117e2e73f38297fce63afeb9164ea97cfcdbb0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:41:d7:85:15:2e:8e:e6:37:a7:40:6c:aa:74:
                    d5:80:77:da:e4:49:31:45:c6:96:9c:83:34:80:ad:
                    a5:df:5a:bd:1d:aa:35:af:e1:04:21:dc:92:68:7b:
                    86:4f:70:ae:33:e9:1d:33:00:af:44:0d:70:4b:08:
                    7c:9b:38:d2:2b:34:34:fb:05:88:f0:83:16:a5:6d:
                    54:7c:b3:19:52:7e:62:3e:5d:84:01:fb:30:85:83:
                    fa:3f:f7:33:f7:af:c6:b6:6e:d5:a1:07:ea:a4:84:
                    7c:76:ce:17:0d:06:5f:f2:a3:3a:6e:c8:9d:ef:4e:
                    6f:d3:54:67:94:c8:ca:9c:44:ca:fa:d1:1d:59:fe:
                    13:48:ca:c6:d4:45:3f:24:75:7f:32:70:59:61:8b:
                    60:9a:35:f0:37:17:b6:20:77:f3:c9:87:af:5c:bb:
                    2a:80:8e:a0:3e:80:a5:57:a1:ae:45:aa:82:e4:cc:
                    66:60:42:2f:4e:1a:1b:4f:b6:16:bf:99:58:18:3d:
                    18:d4:e0:8f:98:a3:9b:01:b6:f1:d2:5d:7a:e4:43:
                    46:48:88:0d:7e:93:4a:96:d1:67:f2:19:59:b9:20:
                    01:c1:7f:46:4b:8c:10:06:83:da:cc:21:e9:33:7e:
                    c6:18:19:16:62:41:3e:fe:e7:9e:e8:93:72:65:f5:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7E:2E:73:F3:82:97:FC:E6:3A:FE:B9:16:4E:A9:7C:FC:DB:B0:D1
            X509v3 Authority Key Identifier:
                keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:a1:e5:46:68:17:6f:65:99:9a:fc:b0:35:91:96:ce:b4:
         c2:82:55:3d:e3:1e:c6:71:25:c1:c9:ff:60:cc:e9:61:55:72:
         ba:b1:7f:81:3f:93:40:ff:7a:2c:f6:14:d4:10:44:fe:fa:bb:
         53:d2:55:9d:df:f2:a8:05:5a:0d:29:3b:0a:23:6a:b9:fd:ef:
         63:48:80:bc:99:57:6f:2d:a3:29:da:6c:3b:a0:6e:23:3e:f1:
         ca:4a:07:cd:d9:30:8f:26:80:22:c3:14:b1:3c:3a:7f:5f:d0:
         59:81:f0:71:ac:06:43:15:7b:bc:dc:d2:ed:8b:b4:62:41:20:
         ce:7e:2c:7a:55:29:f8:46:6e:11:d9:0c:98:95:fa:e3:cb:ac:
         6b:18:57:82:23:23:98:e7:9c:69:66:97:56:f3:c7:11:ec:32:
         73:1e:f3:c9:69:cf:24:48:c4:13:f3:95:e2:07:3d:53:37:da:
         1d:59:d6:94:10:0d:7c:6a:95:92:ec:b3:ee:d2:2f:9c:27:d6:
         ea:79:cb:c4:f0:ae:57:49:18:49:45:51:b5:04:a9:f4:cc:78:
         cb:01:61:ba:6d:3f:d8:fa:d4:5d:85:c3:f3:1e:ac:10:06:c4:
         9c:f2:7f:55:87:38:40:84:bf:2d:d5:df:eb:73:50:ed:1c:24:
         0f:a9:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:32 2026 by rpki-client