This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File:                     1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier:          a7AqwU4Mc18j2Nwlm8nJFa099kh4p+qM02JtWLR4Qlo=
Subject key identifier:   1B:AE:92:4F:B4:AA:A4:98:E4:9E:62:67:EB:13:CA:99:4B:39:96:3B
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer:       /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial:       019C41345FD0F8FECAB9F5A255CE32BD05FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number:          181C
Signing time:             Mon 09 Feb 2026 07:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:17 +0000
Files and hashes:         1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: M/OKf/9fN9SRYYYOOTreRaGzIsv3nDKoG41E2emnPBU=)
                          2: Gez5PpAamR2Dld4nToIpywC4n04.roa (hash: DLzb0cAOuJy5ZOk7xS5DW/f6ULYNGKEl0VG/BvqN4oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:5f:d0:f8:fe:ca:b9:f5:a2:55:ce:32:bd:05:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
        Validity
            Not Before: Feb  9 07:01:17 2026 GMT
            Not After : Feb 10 07:01:17 2026 GMT
        Subject: CN=1bae924fb4aaa498e49e6267eb13ca994b39963b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:b5:de:b3:42:ab:a1:82:6e:d7:a4:12:ab:
                    91:53:e6:1b:ee:ef:57:c9:c9:3e:05:56:55:c1:b4:
                    37:8d:93:0c:cc:b3:2e:72:36:bc:2d:b0:fa:bd:5a:
                    6d:e0:b8:67:e4:2c:98:9e:ed:63:ba:ea:05:9f:2d:
                    b4:3f:e8:3f:f7:33:61:08:8b:af:70:07:7b:06:27:
                    9b:c5:ef:35:1c:c4:59:0e:a4:00:63:c6:00:3e:4e:
                    c7:66:b8:80:0e:3b:75:09:b9:af:71:89:fb:6c:25:
                    4d:56:54:fd:7d:7c:6c:dd:c0:5d:7f:29:b0:46:29:
                    6c:d9:59:8d:89:3e:26:fc:d4:34:3f:7d:1b:23:59:
                    8a:38:f8:55:3f:9c:20:06:44:f6:b6:39:7b:bc:0c:
                    d8:56:44:e1:c1:ef:71:61:a3:35:1e:cd:f1:76:54:
                    5c:fa:af:e3:9e:89:b7:84:84:ba:ba:41:ac:99:1c:
                    22:af:51:fe:5c:96:ae:3e:6a:4f:da:16:9d:cb:3b:
                    28:8d:35:a7:b4:83:b9:cb:2f:b4:95:c4:af:11:71:
                    a3:20:e4:84:d1:a9:2f:15:52:c3:45:dd:38:88:38:
                    3e:64:fd:e4:98:b6:88:d9:8d:4e:77:63:7f:ac:1e:
                    e9:66:9d:06:b1:e0:95:e6:a8:c4:b5:45:e0:30:35:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AE:92:4F:B4:AA:A4:98:E4:9E:62:67:EB:13:CA:99:4B:39:96:3B
            X509v3 Authority Key Identifier:
                keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c3:77:88:68:d7:e8:b5:10:fb:9b:1c:09:18:20:2d:de:f4:
         ea:bb:70:4f:4d:2b:b1:8f:b0:87:ad:9c:ab:21:75:3f:5a:a4:
         8c:c9:7d:de:18:14:97:11:d6:88:dc:9f:4c:91:bc:b4:4d:06:
         1a:91:7a:e5:34:9e:63:b7:68:76:12:69:5b:dc:8d:01:b3:f7:
         46:a2:70:6e:18:2c:96:f6:04:ad:40:ae:c3:a5:96:a8:a5:36:
         d2:7c:b4:3f:a4:89:26:af:7f:86:a0:37:a3:45:ae:0a:23:64:
         55:3c:32:50:f7:81:4d:ea:f7:1a:1a:e8:1c:61:50:69:44:83:
         89:96:3a:39:95:b5:c2:7b:7a:a0:ee:2a:5c:00:13:76:0a:4a:
         b9:42:d1:a1:29:06:d3:fe:e2:d9:c8:56:ea:d9:e8:d5:17:f6:
         30:ef:50:3d:84:1a:a0:2c:1f:85:1f:46:fc:e7:93:5d:2e:5a:
         46:86:f8:96:10:11:84:07:98:9c:b1:29:01:cd:6b:48:58:9a:
         e8:87:e6:6d:4f:6d:60:6d:70:67:2c:9e:c4:86:f9:04:d1:2b:
         02:19:ea:ae:fe:b9:38:71:77:91:fa:85:e4:2c:07:41:9d:e2:
         44:73:97:df:c9:b1:9b:ac:02:92:b1:98:0c:ec:9e:ee:72:e3:
         8a:3e:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:25 2026 by rpki-client