This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File:                     A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier:          6EW2da7A2AKXPWy44atXNom5b6AcECVVbP2NlqXRoIs=
Subject key identifier:   D0:34:52:8A:C5:3B:A6:39:4B:A1:9F:B3:B2:EA:49:7D:51:D2:75:A6
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer:       /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial:       019C43FE0B0CC6FE3F151A4820CACC51A0CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:48 +0000
Files and hashes:         1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: 0iTJtX/Hm6K6KUZxBM7rlylY5MoNBKF/q0zN4P+NZKw=)
                          2: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:0b:0c:c6:fe:3f:15:1a:48:20:ca:cc:51:a0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
        Validity
            Not Before: Feb  9 20:00:48 2026 GMT
            Not After : Feb 10 20:00:48 2026 GMT
        Subject: CN=d034528ac53ba6394ba19fb3b2ea497d51d275a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:40:8b:4f:63:d9:00:0a:72:70:1b:a6:6b:
                    33:4a:ab:06:31:48:bf:b9:32:57:a0:57:d8:c1:d1:
                    93:a0:52:24:2a:33:a2:b7:d7:be:34:d1:64:d3:79:
                    fc:56:57:72:ba:ed:73:34:88:a9:26:02:55:8e:fd:
                    98:82:de:5a:93:48:e9:45:17:f1:f2:4e:c1:19:9f:
                    15:dd:18:73:a0:49:d6:e6:ee:69:79:5e:56:22:fe:
                    44:4e:65:7f:2e:b2:dd:ce:95:49:b4:52:17:d4:21:
                    45:85:4a:07:6d:e0:62:67:fe:41:47:8d:92:2d:b6:
                    b4:fa:4c:7a:d1:d9:55:31:2b:07:1c:3b:73:4c:d5:
                    f1:a1:0a:7f:de:22:28:82:ef:7d:bd:c1:84:fa:cb:
                    c3:25:c3:69:fd:de:6c:e7:92:0e:9e:6b:c4:b6:48:
                    34:07:bb:e4:c0:8c:cf:aa:1e:85:46:08:db:aa:e6:
                    0d:e5:cf:86:b3:b7:9a:9f:ce:29:7d:bc:a1:a7:d8:
                    a4:e3:f1:e9:43:c1:1a:d5:df:77:f8:1d:91:9a:16:
                    a9:42:df:c7:5d:01:67:32:87:e8:ab:52:b9:1f:bc:
                    1b:d1:ae:9c:5f:c2:35:80:59:17:cf:7f:4b:45:4e:
                    5f:c0:d8:8a:d0:eb:79:c1:1e:45:40:e1:2f:18:1d:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:34:52:8A:C5:3B:A6:39:4B:A1:9F:B3:B2:EA:49:7D:51:D2:75:A6
            X509v3 Authority Key Identifier:
                keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e3:54:a9:cf:7d:90:4a:ef:73:39:8e:1e:74:bc:6d:df:1e:
         ce:ee:41:e7:a8:2d:24:ac:4e:e2:5a:17:cb:9f:c7:5b:27:15:
         42:ff:d5:dd:a3:a9:c8:8e:fd:91:95:02:e2:ee:7f:d2:c1:43:
         29:f5:e9:e7:88:53:0e:b4:9a:10:bf:56:d6:02:6b:d1:99:19:
         9b:20:9a:43:fd:8d:8d:a4:ed:21:9c:27:a5:9a:64:b2:f8:e4:
         46:74:17:89:9f:fd:a6:0c:68:46:c8:bc:04:d9:17:6c:fb:a2:
         49:a8:b4:ac:0d:52:0e:b4:ac:c5:0c:1c:79:42:cd:2c:44:4c:
         35:0c:12:dd:65:c7:cc:91:1b:62:78:9d:9f:d8:59:23:7b:79:
         7d:ec:ab:a6:db:66:02:55:b0:2d:9b:2a:7b:ff:52:38:71:67:
         0f:12:61:b7:00:c0:0a:10:92:9a:5c:d8:a6:a3:8d:f8:e5:09:
         51:00:ad:78:bb:b5:3e:1f:47:3d:0b:68:f1:58:9e:81:aa:74:
         1d:0c:85:c1:9a:6e:09:10:db:30:fd:cb:f8:26:ef:c9:06:9c:
         97:2c:b1:39:ef:7b:27:09:7d:f0:66:c8:26:6a:2f:22:d4:af:
         90:37:32:2f:ec:30:73:cc:54:81:d7:74:53:53:1d:40:74:75:
         36:30:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:28 2026 by rpki-client