This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File:                     aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier:          sQRE2WJLZBorscFnHawcKA44QaSRuanZiXds3DRDsII=
Subject key identifier:   75:9D:7A:30:ED:4C:53:86:E5:E7:A8:59:01:80:06:05:35:9D:2A:A8
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer:       /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial:       019C42B446592ED3921743885D9F102FAE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 14:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:36 +0000
Files and hashes:         1: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: ovn+Wo65MML/ovWDkD5PIHRd1ez8svsr6uvI+TBkmM8=)
                          2: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
                          3: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:46:59:2e:d3:92:17:43:88:5d:9f:10:2f:ae:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
        Validity
            Not Before: Feb  9 14:00:36 2026 GMT
            Not After : Feb 10 14:00:36 2026 GMT
        Subject: CN=759d7a30ed4c5386e5e7a85901800605359d2aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:91:89:ec:dd:07:c7:bf:18:f2:b2:78:02:
                    46:5e:23:5a:00:2b:49:02:53:76:eb:7d:ec:20:ef:
                    da:26:1c:09:20:e8:d4:5d:33:e1:c2:d8:a5:5b:e6:
                    5b:fc:29:6f:d5:95:88:ae:22:66:d0:93:5c:8f:57:
                    be:99:46:43:7c:98:78:71:f2:fd:8c:06:74:b3:5f:
                    5d:ed:b0:ff:5e:01:03:4a:d2:d4:08:db:f1:da:6c:
                    fb:40:61:9a:af:61:e8:9a:37:ca:f0:c8:47:a7:c4:
                    db:41:bb:22:cf:b3:ff:f9:88:2d:55:c2:48:21:93:
                    60:28:d5:17:1c:56:6b:f6:05:2b:38:b9:68:89:bf:
                    6e:5e:3d:ff:9c:6e:d6:ba:b8:0b:58:9f:27:1a:7b:
                    f5:c3:5d:0d:ee:6a:fe:13:84:95:34:02:c6:41:0c:
                    f7:a1:c6:2e:2f:5d:d1:5d:1b:85:bf:0a:8b:84:f3:
                    80:5b:64:f1:34:7a:1e:95:7c:10:b8:a0:ac:91:a4:
                    2e:39:d5:b8:68:c9:8a:2a:82:e8:77:dc:90:37:af:
                    a4:14:41:2e:31:ab:23:a5:98:b0:f3:fe:cb:a4:3a:
                    04:bc:f3:67:5b:e7:6b:5f:04:c7:02:66:21:26:e3:
                    eb:0f:f5:06:ae:91:41:a8:d9:bd:4e:00:44:e4:35:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9D:7A:30:ED:4C:53:86:E5:E7:A8:59:01:80:06:05:35:9D:2A:A8
            X509v3 Authority Key Identifier:
                keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:69:38:fb:51:13:86:9c:ab:77:f9:50:99:75:1d:40:f2:
         dd:bd:e0:f2:46:bd:98:4f:58:68:90:31:a8:ad:84:18:34:d9:
         21:7e:0a:8b:20:bc:cf:46:b5:08:d0:40:7a:2f:b5:fa:30:aa:
         ee:45:5d:3a:6f:07:72:d0:03:8a:f6:0a:d1:85:5f:87:ea:33:
         0e:3e:9e:6d:85:e3:35:e3:13:9b:37:2e:18:aa:ef:07:86:e9:
         b0:dd:42:b5:ce:fe:a7:cd:e5:cd:e7:8e:ab:6c:a5:56:ab:04:
         c8:2b:e1:ce:af:f8:4b:f8:91:55:ae:16:70:2e:4c:b6:fe:22:
         e6:a3:e9:a3:4a:fb:7d:64:2b:14:dd:9f:ad:fa:ee:70:92:4b:
         cd:ca:ff:c8:4b:21:11:f4:c3:6d:e7:86:e0:1e:dd:81:64:d2:
         0f:2a:c0:78:19:56:c4:ba:76:58:32:2e:c7:85:81:d7:37:79:
         a3:9f:64:e3:a2:7e:60:0e:b7:d5:d5:ff:9d:cd:01:39:62:71:
         c5:52:c8:dd:d9:93:e1:3d:44:53:90:93:cd:fb:7b:55:af:0d:
         81:47:b1:c0:1c:a2:78:63:99:76:d0:81:cc:54:1f:74:21:0a:
         50:16:9e:61:4a:cc:64:f1:20:63:1e:f1:1d:88:1e:2e:59:d6:
         8b:46:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:30 2026 by rpki-client