This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File:                     201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier:          5HXyZ9bfmOC3xktt785D++aMTXOT8K410xMx5+TGYe8=
Subject key identifier:   0A:C6:38:02:AE:26:21:D0:BC:4A:D6:97:38:2A:AD:BC:93:C7:73:E6
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer:       /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial:       019C420F3DF900E824569FD7C0233F1FAF01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 11:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:20 +0000
Files and hashes:         1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: JWFgJfLskP7cOr6vQQOFWO80jaCpAhi6uKBmURVKjGw=)
                          2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:3d:f9:00:e8:24:56:9f:d7:c0:23:3f:1f:af:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
        Validity
            Not Before: Feb  9 11:00:20 2026 GMT
            Not After : Feb 10 11:00:20 2026 GMT
        Subject: CN=0ac63802ae2621d0bc4ad697382aadbc93c773e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:48:5a:6d:df:c2:1a:52:db:3e:fd:c7:3a:
                    75:e5:43:23:8e:e4:96:aa:08:9e:76:20:da:05:1e:
                    c4:06:34:ad:51:81:b1:fb:6f:2b:61:06:3c:86:e4:
                    91:cc:b7:92:d5:e3:e8:45:98:11:b6:b1:d1:38:70:
                    3f:dd:41:c8:f1:b4:83:e2:bf:4d:b7:05:e0:19:0e:
                    00:2d:98:0e:ac:9d:c1:fa:0d:6b:d5:7d:11:7f:27:
                    b9:4b:b1:f0:e5:11:1b:45:79:4b:b1:e7:07:1c:89:
                    8a:29:a5:fc:84:1a:89:a5:2e:9f:2f:ed:61:f6:a7:
                    00:f2:8c:69:4a:c8:ab:1d:d0:20:8b:dd:8a:cf:1a:
                    12:21:37:c8:61:0d:80:19:b1:d6:1a:b2:8b:f5:18:
                    85:bb:fa:02:49:10:53:0e:c3:36:89:86:38:24:79:
                    74:7e:3a:86:b8:30:3b:78:ca:22:1b:4e:7e:e5:9a:
                    d6:d8:2e:16:57:5c:c5:3e:4c:9d:c8:f0:9c:1d:96:
                    7c:63:c1:62:31:0a:d8:c9:e4:c0:c1:b9:24:79:48:
                    03:16:9a:d9:12:c4:f6:39:cd:33:c1:f2:33:f4:8a:
                    28:1f:42:3b:89:6d:d1:e5:54:fe:4f:73:86:a7:53:
                    9c:8e:2d:e8:38:3b:8f:89:e3:46:94:4c:bf:72:5b:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:38:02:AE:26:21:D0:BC:4A:D6:97:38:2A:AD:BC:93:C7:73:E6
            X509v3 Authority Key Identifier:
                keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:99:66:9c:a5:1c:69:fa:7d:0f:86:10:14:2b:53:be:c5:
         d7:1c:59:c8:24:c4:ad:ac:1e:82:8b:3b:06:16:a3:b8:44:96:
         f7:2a:54:99:22:9d:08:55:c6:8d:f4:f3:ef:c1:df:d8:1f:9e:
         c6:00:61:ea:40:69:5a:76:9d:d0:ec:19:8f:89:d6:00:51:bf:
         cf:7b:06:02:51:d6:e2:1b:99:e3:e3:ca:fc:3b:0c:1a:ca:d1:
         34:3f:71:69:21:d0:8b:19:03:1c:3c:3d:08:ce:5a:c8:28:f5:
         ac:7a:55:00:f3:d3:c2:3f:82:ef:a0:e6:45:00:26:e7:2b:af:
         aa:ab:35:15:fd:10:b9:08:03:e1:6f:aa:aa:a4:79:a0:62:7f:
         b7:3a:3d:74:db:5d:ba:ec:b0:37:50:94:81:19:4b:d4:79:b6:
         ad:d3:7e:2d:79:b8:a0:41:23:38:8c:29:e2:96:72:31:72:f9:
         cb:8d:36:de:e0:47:4a:a1:72:ae:31:2e:22:f6:4e:fe:f2:f5:
         ad:40:29:26:14:24:df:9f:ae:71:fd:83:cb:ef:af:3b:92:d6:
         42:1f:e4:b1:93:89:06:d9:80:f6:2a:aa:d1:7b:86:cf:2f:d5:
         d4:26:ab:e7:af:16:76:39:b4:55:77:5d:1e:ba:df:66:fa:00:
         b8:9c:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:01 2026 by rpki-client