This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File:                     V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier:          Zl8ulIBZYa6ifyvhawdz7x08djFygTFW6YgKN+0Zk8w=
Subject key identifier:   36:E1:57:C1:66:F9:C9:81:86:89:C2:E7:79:26:0E:00:CA:6E:A6:A1
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer:       /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial:       019C1B707E1129FDC381F21145DF744D0AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number:          1805
Signing time:             Sun 01 Feb 2026 23:01:22 +0000
Manifest this update:     Sun 01 Feb 2026 23:01:22 +0000
Manifest next update:     Mon 02 Feb 2026 23:01:22 +0000
Files and hashes:         1: ChXWstjRWA_OODNRO9MDbRfgOQU.asa (hash: +k73MShgqLwwtEUsqO+3IrwBNnY2nL4l+Ep35pG4oXI=)
                          2: Qm8uhcNnRTaqoYGKrdrNLc_aZD8.roa (hash: hvZBXvz5QZfJbWaG3RcO8weSJZHMPwQu8jySYopR30I=)
                          3: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: /1s4RI106AYa+PUVhXKmdVkAa3EXiAAbHjdcxc89qYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 23:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:70:7e:11:29:fd:c3:81:f2:11:45:df:74:4d:0a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
        Validity
            Not Before: Feb  1 23:01:22 2026 GMT
            Not After : Feb  2 23:01:22 2026 GMT
        Subject: CN=36e157c166f9c9818689c2e779260e00ca6ea6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:ef:a8:e7:13:38:b1:ec:40:d2:88:bb:1b:
                    53:79:17:90:98:c7:61:83:8e:3d:b9:16:5f:e1:4e:
                    6c:61:00:39:db:9d:41:f5:75:8a:4d:b7:03:d9:cc:
                    b7:1a:7a:86:a7:c9:23:0b:55:bf:35:bb:f2:0e:d5:
                    c0:9c:7d:ea:ed:2f:4e:a9:d3:bc:44:a9:89:8a:2e:
                    e5:b2:86:c4:8b:72:7d:3e:ec:a3:11:db:af:6d:51:
                    d6:b2:43:27:a4:d2:35:ce:88:88:66:a1:01:10:81:
                    ee:d7:0a:04:a8:c3:32:79:76:da:f0:4d:df:08:97:
                    cd:a9:a8:05:bd:06:72:92:63:5d:6a:20:53:29:6d:
                    60:d8:c4:6d:b4:0d:dc:90:fe:f3:ed:71:7a:56:b9:
                    cb:73:be:59:ac:4f:30:80:10:2c:28:17:5b:7a:fb:
                    2b:58:7c:21:c0:a3:3b:56:39:13:c2:e0:04:29:eb:
                    7a:93:f7:98:8e:71:5f:84:85:c1:d0:e9:34:e9:60:
                    0d:50:80:77:52:eb:a5:14:da:aa:af:8c:af:a2:7e:
                    bc:3d:d1:bf:e6:f7:d4:52:a8:2b:54:58:4f:a8:56:
                    43:93:69:63:95:08:8d:63:ec:7d:a0:2f:85:d3:06:
                    3b:98:0a:a4:6e:16:b1:d5:1b:b6:ff:d7:1e:45:bf:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:57:C1:66:F9:C9:81:86:89:C2:E7:79:26:0E:00:CA:6E:A6:A1
            X509v3 Authority Key Identifier:
                keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:42:7c:0a:f7:e5:5e:82:25:76:86:25:75:97:9a:a7:26:57:
         64:98:92:72:16:41:52:ca:eb:69:f3:89:68:66:57:e0:29:b9:
         b5:80:87:3f:60:a9:1a:fb:0d:09:1c:30:6a:eb:4f:cf:db:5b:
         c6:a4:c7:b2:35:39:12:26:5c:dc:90:8c:a2:0b:55:11:fe:e4:
         ae:58:f7:10:f8:c4:1f:a7:e7:4e:73:fb:9b:ed:0f:c1:da:31:
         02:9c:77:ad:fe:a7:ef:a4:51:92:33:0f:9d:42:33:21:2d:46:
         a6:f2:90:8e:ce:7e:88:1b:99:d1:e9:e3:23:b0:57:1f:29:cc:
         e0:36:ca:5e:24:c3:43:24:18:78:bc:19:3b:e0:b8:c8:27:5a:
         a3:4f:1d:32:73:e3:7e:af:3c:4f:1d:2c:da:80:6b:cb:f8:b8:
         25:42:31:d7:8b:80:45:e5:4b:8e:07:1e:3f:37:52:47:e7:ee:
         85:3c:ed:b7:95:00:8b:6b:83:6a:0f:7d:c7:37:45:68:76:57:
         60:9c:b2:7a:f8:87:52:dc:52:37:d3:7f:ec:6e:52:e4:7b:24:
         84:82:a0:98:8b:8a:f2:57:75:65:36:fc:10:05:4c:36:7d:29:
         e5:c7:d4:0c:89:d9:b0:0a:3d:87:aa:d7:97:0f:b3:cb:f6:5a:
         14:55:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:14 2026 by rpki-client