This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File:                     1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier:          cjRmDuYaqOkhpd/DrbLOuGc/sn4iKkcp1fq1An3nIUM=
Subject key identifier:   5A:C4:91:BD:6C:E2:8C:02:EE:35:FC:B9:B8:0A:03:04:6D:07:88:CB
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer:       /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial:       019C427E0401A83164AA453BAF245398DE12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number:          07BB
Signing time:             Mon 09 Feb 2026 13:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:20 +0000
Files and hashes:         1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: nVOgq/K9+yPIgl4nb6l6sPnEnmD9HvVoDOzfmOpE6yE=)
                          2: rTWNDX2sh64JmJF94YkHDQivF1w.roa (hash: RWITw/Hfk3BkskMw4FRULOKsUeZ/YrSrFkhrBuQpcRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:04:01:a8:31:64:aa:45:3b:af:24:53:98:de:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
        Validity
            Not Before: Feb  9 13:01:20 2026 GMT
            Not After : Feb 10 13:01:20 2026 GMT
        Subject: CN=5ac491bd6ce28c02ee35fcb9b80a03046d0788cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:d5:cd:21:e3:73:99:ca:68:da:c3:b6:ee:
                    b3:df:30:8e:d2:d0:5d:65:6a:d0:75:42:a7:a8:58:
                    43:17:29:92:c5:dd:f9:72:7c:f7:ce:a2:0b:81:fe:
                    95:5e:bd:ab:93:a2:22:b7:31:a9:0f:e3:b4:c5:82:
                    7b:d2:08:1e:35:b9:38:5c:84:36:5f:ec:80:20:69:
                    de:64:55:7f:23:f7:d0:b5:e4:28:af:80:ae:05:c6:
                    02:40:ee:6a:cd:d3:20:2b:54:f8:74:6c:0f:b6:93:
                    dc:6b:4b:da:8c:64:8d:31:12:94:dd:8d:01:d6:e2:
                    36:15:90:be:b4:14:77:77:55:b6:ca:c9:04:d6:c6:
                    fb:3b:b5:21:e1:19:32:33:cf:76:cf:9a:85:28:61:
                    c7:17:c8:08:96:68:6d:bc:3c:c0:dc:23:33:02:ce:
                    2d:c4:c1:e8:ba:6e:92:91:52:2f:9a:3b:ed:d3:b7:
                    54:ac:f3:5d:6f:4b:9e:0f:30:4c:07:62:11:a3:21:
                    91:1c:cc:17:13:48:dd:ab:42:6a:e8:bd:da:2e:2b:
                    12:93:a3:70:c7:b9:c3:c6:24:d5:dd:b4:6d:24:85:
                    53:06:24:ab:a6:0f:23:09:7a:01:32:75:c8:a9:10:
                    28:74:55:4b:30:f9:a1:71:38:3c:c1:d4:b1:79:48:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C4:91:BD:6C:E2:8C:02:EE:35:FC:B9:B8:0A:03:04:6D:07:88:CB
            X509v3 Authority Key Identifier:
                keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:70:6a:4a:f8:ae:6b:ef:9e:f8:c4:04:49:a8:f3:0a:f7:ca:
         ef:c6:94:e0:f6:17:00:54:3e:c8:e0:3f:79:20:35:07:5c:b9:
         5c:d0:27:28:22:1c:71:ae:15:b4:cd:ea:a2:c6:8f:04:fd:81:
         20:90:6a:1f:1e:ce:b3:5c:03:55:4b:be:8a:7c:3c:e1:d4:1c:
         ef:7b:a5:38:77:e7:a6:71:57:83:8a:02:f7:14:ed:b4:7e:e2:
         c3:15:66:6d:38:f2:11:b3:b1:f5:dc:6e:e6:c6:8e:5d:1c:36:
         d7:00:a1:58:a9:89:10:b7:91:23:4f:c6:b8:07:5f:52:38:9b:
         76:f8:b3:48:e4:a5:0c:c4:22:9b:3e:38:2d:36:de:43:b5:9d:
         3c:bf:be:1b:44:3d:5f:a3:4a:69:93:68:33:20:08:ea:e9:5f:
         be:80:09:a6:68:92:49:7e:81:b8:c6:41:09:ad:6e:31:84:61:
         3e:06:97:5f:d7:96:54:36:7a:70:f5:19:d4:ab:eb:3c:5c:aa:
         ed:8d:bc:8c:a1:7c:5f:2b:da:be:0b:9e:56:91:7d:57:60:29:
         2a:f9:8c:8e:5f:6d:c1:7d:77:c7:68:7e:68:3e:12:cf:1f:ab:
         72:07:3f:bd:5a:cb:e3:1a:7f:3e:50:79:66:d5:e0:63:53:30:
         0b:48:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:43 2026 by rpki-client