This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File:                     1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier:          LdUQk19AfUZ1cpSvAQ5UM/MDV64/eOeE9GsYNC1FS18=
Subject key identifier:   1B:5F:10:95:8E:2D:7B:41:23:C8:B1:A0:BD:40:82:73:98:67:3E:88
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer:       /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial:       019C42103BC18849BCA01828F9184848B39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number:          154D
Signing time:             Mon 09 Feb 2026 11:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:25 +0000
Files and hashes:         1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: u4D0SoL/f4UnIkK1jgSpgdeJfBHrKkfu9CdnUfCXQ0k=)
                          2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
                          3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:3b:c1:88:49:bc:a0:18:28:f9:18:48:48:b3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
        Validity
            Not Before: Feb  9 11:01:25 2026 GMT
            Not After : Feb 10 11:01:25 2026 GMT
        Subject: CN=1b5f10958e2d7b4123c8b1a0bd40827398673e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:0e:c1:aa:af:f7:96:eb:e7:5e:3f:9c:37:
                    fc:89:16:f6:47:00:c0:b2:2b:38:ab:8f:89:66:7e:
                    7d:ed:db:ee:1d:3f:af:b8:fc:70:ae:42:9b:2a:d4:
                    fc:c7:0a:0f:9f:da:d9:9f:f4:5e:d4:8e:ad:b1:d7:
                    bf:33:1c:55:9f:9a:35:97:84:73:1a:e4:8a:ad:c4:
                    67:49:5a:39:70:77:e5:8f:ac:79:6c:1e:ae:fd:3f:
                    0e:24:9e:b9:56:d3:bd:7d:08:74:63:ef:ad:a5:2e:
                    8e:f6:ec:d0:30:29:d4:f8:bc:27:4b:bb:4b:80:a7:
                    54:a2:5d:ef:1c:f5:af:f1:7e:5e:12:86:ec:9e:01:
                    03:15:55:d4:d9:bc:75:85:f1:d6:5d:e9:8e:f9:03:
                    0a:7a:7b:1f:23:fd:f0:29:3f:9f:26:f4:51:53:f6:
                    62:4f:82:83:5e:21:fd:ca:31:97:7d:d3:25:52:09:
                    e1:b3:46:14:40:fb:2e:4d:52:e3:4a:04:2c:09:18:
                    af:31:19:4e:8a:c4:b0:9c:59:06:b5:11:22:e0:98:
                    2d:0a:8f:ed:82:21:17:db:71:2a:39:b7:51:52:d3:
                    a2:c5:5d:40:6f:21:c9:82:40:d3:06:de:e9:3d:61:
                    1e:4c:6d:bb:88:21:45:84:ea:45:11:fb:8d:1f:39:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:10:95:8E:2D:7B:41:23:C8:B1:A0:BD:40:82:73:98:67:3E:88
            X509v3 Authority Key Identifier:
                keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:13:aa:00:b4:5e:3e:98:99:11:c3:c7:b9:86:d8:e8:d3:c8:
         0f:06:e9:c8:91:f2:8d:6b:bf:1f:06:68:27:5b:61:82:e2:d7:
         cd:ee:54:6b:23:22:76:0a:e7:e0:22:09:9e:44:c9:c0:c3:3a:
         87:ab:b5:4b:8a:64:fe:dd:f5:0e:f1:9e:14:36:ac:b2:04:f8:
         84:0e:82:74:1d:22:eb:0a:8f:68:1c:64:4b:e4:14:f7:27:cb:
         dc:90:1a:97:db:2f:19:64:7b:c6:48:8e:5b:5e:c8:42:fa:d2:
         24:98:71:53:93:b7:22:42:8c:39:3c:4b:4b:7c:73:9c:29:76:
         17:ea:c8:8f:06:eb:90:d3:bd:ba:0b:6d:f1:8b:44:3d:4c:3a:
         e4:6c:71:b5:62:d4:84:e4:a5:5e:8a:55:a5:94:87:d7:52:83:
         b9:cb:bc:75:59:38:f0:9f:0b:a7:61:d6:26:89:91:6b:7b:34:
         5c:9d:97:73:15:11:f9:64:21:bc:c4:e1:86:d8:39:62:76:f7:
         22:6e:2a:8a:a9:8e:e4:6d:1c:36:9d:3c:61:61:b5:75:00:f6:
         ea:27:c2:3f:75:d4:47:86:03:b7:aa:af:53:2f:8e:d8:c9:3a:
         26:bb:85:fe:b8:3f:cf:ac:7d:24:07:14:bb:3c:44:82:13:1d:
         b5:37:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:31 2026 by rpki-client