This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File:                     1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier:          cCcOtyZGvzoOQH2v7yrQkWTdV5GhqpnT2m5jwCeytw8=
Subject key identifier:   7C:A1:DE:E1:A1:D5:09:07:71:EC:BA:62:66:F0:EE:6B:1C:B5:3D:DB
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer:       /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial:       019C439044930B69DDE557BAE40A7122BBC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number:          04A6
Signing time:             Mon 09 Feb 2026 18:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:53 +0000
Files and hashes:         1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: z58TWEa4Y3ydrDJOd7FuUxdT9M79Dd20fz0UFvPyVYc=)
                          2: lFXW11JmtXkBjm-uNTCzHeFzM7o.roa (hash: ehAd9mUsbggx1/mGegpTmvG9odTX8xtW0ahGr9D7dD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:44:93:0b:69:dd:e5:57:ba:e4:0a:71:22:bb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
        Validity
            Not Before: Feb  9 18:00:53 2026 GMT
            Not After : Feb 10 18:00:53 2026 GMT
        Subject: CN=7ca1dee1a1d5090771ecba6266f0ee6b1cb53ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:55:8b:d6:9a:df:9f:05:13:c0:4d:9a:d3:
                    f3:a9:9c:c2:69:e4:3d:60:5a:ea:ca:82:8a:15:7c:
                    e0:a7:4b:bf:ae:76:1a:c3:70:b2:30:77:d1:10:ee:
                    ab:d4:4e:41:dd:31:7a:49:81:bc:f9:9a:32:52:8e:
                    20:b9:11:f3:ee:83:de:e8:43:b1:92:2c:41:27:08:
                    81:92:c4:82:f1:50:04:c0:08:16:cf:62:98:0a:5f:
                    b7:5d:58:6c:d9:a4:8a:ec:ce:45:60:e3:2d:87:d6:
                    0f:73:29:bb:31:86:20:9d:8c:1d:63:43:31:33:99:
                    cd:c6:47:74:9d:77:7a:82:ea:08:b6:92:f2:c9:ec:
                    9d:14:55:74:49:fe:3a:7c:a9:20:f1:95:5c:63:03:
                    6a:88:31:4f:89:94:ee:0a:3e:0b:c6:bf:b6:a5:a2:
                    af:5f:2b:a5:e7:95:7b:37:69:61:08:fd:75:77:8c:
                    04:cc:22:9d:64:d6:a4:9c:6f:8f:b6:5d:90:5d:73:
                    a5:1e:c0:91:01:07:c1:57:d0:19:d2:f3:b4:00:45:
                    ed:47:c0:c0:46:f6:12:13:6b:d6:b4:a5:bf:67:1d:
                    9e:3e:81:40:49:0d:65:bf:a7:c1:d1:7f:bd:3b:8f:
                    6c:9a:69:17:3a:53:ca:bc:82:85:90:e0:6e:e6:d4:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:DE:E1:A1:D5:09:07:71:EC:BA:62:66:F0:EE:6B:1C:B5:3D:DB
            X509v3 Authority Key Identifier:
                keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ed:ac:28:bf:ea:18:55:21:2f:35:83:d9:bf:8b:78:59:9b:
         00:c9:c7:e8:3f:77:eb:b7:dd:65:c0:94:75:4e:63:86:77:58:
         18:be:42:8a:90:b1:63:c5:09:75:90:e9:f3:dc:51:64:fe:2a:
         bc:12:57:4a:24:d8:0a:78:d7:fc:0a:e3:9c:e6:77:df:cb:21:
         01:72:62:fc:a0:83:5b:77:2d:4c:73:97:3f:89:f7:b4:56:e6:
         31:0d:a3:95:4f:2b:24:38:63:f7:af:94:a4:1b:7d:b3:be:f3:
         b2:bc:6d:e8:ca:90:83:4a:bd:89:d7:cc:97:44:c8:9e:70:6b:
         5e:00:f2:20:59:63:d3:c9:cd:06:d4:f6:70:de:9d:f2:4e:a5:
         0d:60:38:e1:ee:46:12:1b:5a:8c:c3:7a:03:e0:34:70:c9:62:
         32:d7:51:b3:c2:f4:9c:6f:07:f5:a7:79:c2:a7:59:53:1f:2a:
         b0:6f:54:4e:f8:ca:6c:6d:24:f7:b8:02:1a:c6:1e:46:e1:dc:
         4d:e2:32:37:67:f8:2c:07:75:27:2f:66:b6:12:7d:24:b1:52:
         96:ec:ce:5c:40:74:cb:ce:5d:ee:ee:4d:d7:df:72:a4:ad:bd:
         af:c0:9c:be:6d:a0:1b:04:0a:c0:13:16:2c:ef:a2:68:45:92:
         e4:07:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:22 2026 by rpki-client