This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File:                     1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier:          8zBAsp7al8WwzGYC7/8/ZPWf7XUkST4xdl0xzbxZdkI=
Subject key identifier:   E4:D2:2F:3D:B8:07:E8:89:A4:98:26:5C:3F:D7:EE:43:81:78:A9:1A
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer:       /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial:       019C43C6A98F456428A024F3669CAF77DFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number:          02C6
Signing time:             Mon 09 Feb 2026 19:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:18 +0000
Files and hashes:         1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: 0HMhJnGRArN01pBK7BISIbBe8Rqzz3G19ocGHgZJF/U=)
                          2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a9:8f:45:64:28:a0:24:f3:66:9c:af:77:df:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
        Validity
            Not Before: Feb  9 19:00:18 2026 GMT
            Not After : Feb 10 19:00:18 2026 GMT
        Subject: CN=e4d22f3db807e889a498265c3fd7ee438178a91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:60:65:1e:65:19:21:d6:fa:fb:b7:f2:16:
                    ee:fa:33:c5:c7:fe:1c:8f:5c:8e:11:38:61:9f:ee:
                    aa:fa:ec:88:04:92:c3:07:49:64:fc:dc:c4:1a:b8:
                    83:34:f2:44:0d:1c:38:ce:44:b0:8a:41:dc:f3:fd:
                    79:5d:2b:d4:ea:f2:a8:1d:d6:a8:93:be:9d:9c:4a:
                    e9:c3:c6:c3:39:60:21:45:0c:36:00:4c:84:16:df:
                    c7:c6:ae:cc:ff:ab:de:c3:55:ca:af:38:3d:92:82:
                    2a:0f:2a:5d:2c:c8:ae:31:34:2b:35:27:7b:76:d2:
                    2a:54:fc:a9:2d:0b:bb:05:72:cc:5d:a0:26:39:91:
                    90:dd:27:99:c4:0c:00:a5:f3:f8:da:ce:cd:b5:e0:
                    7f:2c:ad:c3:04:a2:2c:d2:1a:e9:41:08:54:9c:37:
                    82:9f:b3:04:0b:51:c8:5a:f1:3e:e1:e9:fd:af:27:
                    e8:e1:03:c2:9e:fd:82:ec:5a:67:05:fd:5b:0a:5e:
                    66:96:48:91:88:3a:c7:da:b6:cc:38:da:d6:69:11:
                    d1:71:a7:e0:c3:cb:55:f0:af:ae:9f:52:42:08:71:
                    97:70:0b:8c:db:db:99:cc:6a:e1:be:fa:e4:b9:40:
                    3e:7b:50:75:33:3d:a7:4f:21:f0:85:12:9d:c4:0e:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D2:2F:3D:B8:07:E8:89:A4:98:26:5C:3F:D7:EE:43:81:78:A9:1A
            X509v3 Authority Key Identifier:
                keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fd:e2:46:36:28:9e:c5:4b:53:6d:c5:9d:7f:40:12:fd:8c:
         e8:44:c3:21:d7:e6:68:3a:e5:90:e8:7f:56:4a:0b:1b:42:2b:
         80:92:d8:9b:69:1b:7e:9a:29:44:45:f2:32:7c:c4:5c:94:10:
         2d:48:ae:6a:07:4a:a3:a2:32:ff:dc:46:b8:54:47:0b:ce:40:
         62:c0:dc:64:ff:75:07:44:55:bc:02:36:b6:c9:bc:79:54:9d:
         4d:59:53:86:b1:e2:51:02:1a:82:d9:5d:3d:a6:4d:b4:4c:4a:
         0d:97:99:88:9f:92:7d:59:fc:a7:fe:53:74:e3:01:5b:54:ce:
         86:57:42:30:fd:d5:1b:3d:93:61:5d:9d:1a:44:40:de:1a:3b:
         c2:65:a1:e6:c2:e8:ef:9a:cc:bc:e2:d6:a8:9d:d4:49:96:f2:
         8c:9d:69:82:ab:05:74:0b:cd:92:52:6c:76:4e:26:93:81:62:
         5e:54:7c:fa:b5:09:0a:0e:33:03:54:ce:38:b1:30:f3:e1:00:
         ce:65:92:16:7c:49:08:eb:ab:b4:ff:c5:43:28:61:68:06:58:
         e6:81:64:e3:14:e7:01:c6:13:96:60:a1:2d:eb:be:85:6b:95:
         35:91:c6:86:b5:03:57:63:7f:08:69:54:e8:5d:e3:3b:bd:d5:
         aa:08:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:12:46 2026 by rpki-client