This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File:                     AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier:          wy6h0HgriLcAVjZ8FlmbMNu+HUEkDnnmSPozpzEwihA=
Subject key identifier:   F7:04:0B:1C:0C:E9:6C:E4:1A:0F:A1:B6:79:95:3F:C3:F5:82:87:A2
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer:       /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial:       019C435915C2AE1535DEFC0265EC33A6D202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:37 +0000
Files and hashes:         1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: 9stfJUwMO0/1xb1DGMG6TYqqfSr9HYof02efOVmTnPE=)
                          2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:15:c2:ae:15:35:de:fc:02:65:ec:33:a6:d2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
        Validity
            Not Before: Feb  9 17:00:37 2026 GMT
            Not After : Feb 10 17:00:37 2026 GMT
        Subject: CN=f7040b1c0ce96ce41a0fa1b679953fc3f58287a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:c7:f1:56:69:2e:4a:1e:5c:6f:86:4f:38:
                    1a:f4:36:1e:59:d4:ef:f8:36:b3:ce:2c:97:95:ec:
                    51:e1:d9:27:3e:8c:61:b7:59:32:2e:76:07:bf:87:
                    14:75:de:cc:b1:bf:e5:d6:8d:df:22:6a:2e:b8:fe:
                    72:60:98:d0:62:98:dd:f9:89:e7:c4:37:aa:36:2e:
                    28:aa:c9:1b:4c:1d:71:08:ca:90:f6:d3:1b:dd:cf:
                    28:b9:9c:3e:c4:3d:5a:45:88:c9:46:66:e2:1a:a7:
                    0c:6b:39:58:fb:35:0a:aa:be:03:8b:52:b7:0f:d5:
                    0b:d4:54:42:af:87:7a:06:9a:ec:fe:48:56:c4:91:
                    3f:c0:d6:a6:ed:a8:30:49:e9:00:ba:c6:57:1f:a9:
                    06:81:8e:73:8e:eb:86:dc:2d:2c:c0:82:82:aa:4a:
                    a0:0d:9b:ab:10:bf:ef:f1:b2:97:17:97:d7:96:69:
                    73:c7:d2:da:c1:60:44:20:e5:b6:ec:a9:71:96:f3:
                    d0:9c:7e:39:9f:91:3e:16:5c:83:08:1a:57:fe:20:
                    b0:47:f8:11:01:66:73:40:ac:08:c1:25:41:fa:72:
                    26:30:a8:44:d0:9c:6e:51:3c:f6:d8:a0:b8:c2:6d:
                    2f:2a:7b:77:01:02:da:36:ca:69:40:86:cc:b6:b7:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:04:0B:1C:0C:E9:6C:E4:1A:0F:A1:B6:79:95:3F:C3:F5:82:87:A2
            X509v3 Authority Key Identifier:
                keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:36:2d:d1:6a:54:d6:21:2f:51:1c:1f:e0:6a:ad:a7:42:bd:
         3e:f8:75:26:d3:7a:83:1f:7c:fe:96:ba:5d:c6:df:f3:f9:82:
         2e:4e:e4:1f:b5:5a:cc:65:0b:db:02:66:0a:f6:31:3d:61:72:
         12:47:2b:ac:69:0a:3b:71:f3:06:4f:b1:d6:5b:47:ed:9e:bc:
         af:d6:d8:62:4b:54:09:0d:57:64:d8:51:c3:fa:35:2d:36:4b:
         8f:c3:f8:c6:0f:25:51:e3:bd:17:9d:e9:97:1d:47:c5:11:ec:
         6f:1c:35:f5:0e:74:a5:4f:ed:7a:1c:02:52:6a:19:f2:cf:fc:
         e9:db:2c:09:e7:44:ff:d5:32:f9:f8:84:cb:34:ee:a2:94:d5:
         2c:d7:55:88:1b:69:c3:12:73:83:a0:f4:03:ba:09:de:47:cd:
         f5:3b:af:56:96:44:49:05:e7:12:67:ef:b0:06:1d:2a:48:be:
         89:42:54:4a:55:74:a9:54:59:37:04:0f:8d:4d:df:b2:fd:9f:
         e1:3d:b2:6d:03:d9:ec:1b:d9:61:fe:6b:57:fc:05:3d:81:99:
         b3:e2:51:64:ed:c9:22:f5:6d:2a:60:e5:77:a1:6d:6c:e1:a0:
         78:bd:88:93:98:43:ff:d2:f3:c7:37:43:8a:f6:b5:1a:f4:2d:
         f3:f9:fd:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWRXCrhU13vwCZewzptICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTE0OTY0NjkxNjdjNWIxZDg5MjBiOThiZDUxYWYzZmUz
NWFkZTUwHhcNMjYwMjA5MTcwMDM3WhcNMjYwMjEwMTcwMDM3WjAzMTEwLwYDVQQD
EyhmNzA0MGIxYzBjZTk2Y2U0MWEwZmExYjY3OTk1M2ZjM2Y1ODI4N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2trH8VZpLkoeXG+GTzga9DYeWdTv
+DazziyXlexR4dknPoxht1kyLnYHv4cUdd7Msb/l1o3fImouuP5yYJjQYpjd+Ynn
xDeqNi4oqskbTB1xCMqQ9tMb3c8ouZw+xD1aRYjJRmbiGqcMazlY+zUKqr4Di1K3
D9UL1FRCr4d6Bprs/khWxJE/wNam7agwSekAusZXH6kGgY5zjuuG3C0swIKCqkqg
DZurEL/v8bKXF5fXlmlzx9LawWBEIOW27KlxlvPQnH45n5E+FlyDCBpX/iCwR/gR
AWZzQKwIwSVB+nImMKhE0JxuUTz22KC4wm0vKnt3AQLaNsppQIbMtrdjbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcECxwM6WzkGg+htnmVP8P1goeiMB8GA1UdIwQY
MBaAFAGRSWRpFnxbHYkguYvVGvP+Na3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTkt
YmYyZjk3ZjFlMzRmLzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTktYmYyZjk3ZjFlMzRm
LzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDYt0WpU
1iEvURwf4Gqtp0K9Pvh1JtN6gx98/pa6Xcbf8/mCLk7kH7VazGUL2wJmCvYxPWFy
EkcrrGkKO3HzBk+x1ltH7Z68r9bYYktUCQ1XZNhRw/o1LTZLj8P4xg8lUeO9F53p
lx1HxRHsbxw19Q50pU/tehwCUmoZ8s/86dssCedE/9Uy+fiEyzTuopTVLNdViBtp
wxJzg6D0A7oJ3kfN9TuvVpZESQXnEmfvsAYdKki+iUJUSlV0qVRZNwQPjU3fsv2f
4T2ybQPZ7BvZYf5rV/wFPYGZs+JRZO3JIvVtKmDld6FtbOGgeL2Ik5hD/9LzxzdD
iva1GvQt8/n9TQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:13 2026 by rpki-client