This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File:                     So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier:          mQ1F/wmW0mEgAAVi/ETBL3TrIYEm9ExGRTR//Z0V2lU=
Subject key identifier:   51:F3:9C:D0:D4:65:43:3A:F0:DD:76:0B:C8:6C:C0:5A:0E:BE:90:9E
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer:       /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial:       019C43900FFCAB43226317F85B77724CAC64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number:          181E
Signing time:             Mon 09 Feb 2026 18:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:40 +0000
Files and hashes:         1: 1WFTVE_laDxR2551YD9-IDIhOK4.roa (hash: 1U7XfEnUkzCJgaorLVPneDn26hSAWBbm2FCXShHT0iY=)
                          2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: bGkgVXcaQ4yibvK8KPjeReEoO+yjFVSfCRpFg6eUAkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:0f:fc:ab:43:22:63:17:f8:5b:77:72:4c:ac:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
        Validity
            Not Before: Feb  9 18:00:40 2026 GMT
            Not After : Feb 10 18:00:40 2026 GMT
        Subject: CN=51f39cd0d465433af0dd760bc86cc05a0ebe909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:e7:55:a6:23:56:48:bd:c8:3b:1e:65:de:
                    a9:a9:53:86:ed:0d:65:11:6d:cf:75:f6:16:8a:96:
                    21:3a:f5:65:e8:b5:5e:ab:2b:27:8d:54:7e:39:5d:
                    1e:eb:25:e9:85:2b:b1:83:91:9d:df:e9:59:6f:81:
                    35:8f:b3:8d:f9:6a:21:31:c1:13:18:e1:cd:84:71:
                    67:f3:14:58:81:9d:01:60:db:58:48:d3:2b:31:42:
                    5d:57:69:e6:bd:eb:27:51:b6:e7:83:67:4a:79:b0:
                    1e:b7:32:89:df:6f:55:55:eb:95:33:1a:70:a6:d1:
                    f6:b1:6f:fd:7c:6b:97:1c:eb:e0:1e:0d:30:90:e8:
                    77:78:9a:1f:1c:45:a6:f5:34:27:b1:6b:7e:79:f2:
                    3a:a9:09:92:ac:71:ee:79:57:e8:1d:bc:21:ad:3c:
                    a2:9a:e3:31:0a:74:90:1f:40:e1:20:ed:84:f3:a9:
                    cd:bb:3a:c6:e6:ad:a3:b4:8b:7c:ef:79:c4:42:ee:
                    a7:e9:83:86:5a:88:f2:78:73:93:30:58:38:90:fc:
                    7b:5c:a9:00:e6:b2:f6:8a:af:2e:8a:52:ed:22:4b:
                    3f:14:9a:ff:36:b1:13:27:62:13:51:4d:20:85:39:
                    2e:b6:95:ba:05:bf:2c:e7:72:15:ef:da:f5:3b:dd:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F3:9C:D0:D4:65:43:3A:F0:DD:76:0B:C8:6C:C0:5A:0E:BE:90:9E
            X509v3 Authority Key Identifier:
                keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a9:e4:10:6f:28:48:16:45:69:46:20:f3:b2:b6:7c:19:de:
         fb:ec:77:c8:15:b6:21:98:7e:59:43:ce:21:e2:a2:85:38:98:
         f2:98:d3:d7:a5:c4:cf:fb:cb:34:d4:aa:82:20:77:ac:d9:00:
         6c:f5:e8:16:4b:ec:f8:ac:91:c2:b2:2b:ed:45:b1:ef:a1:5d:
         a5:6e:f5:2f:24:1e:d3:11:4c:01:6e:54:b3:26:b7:ad:3a:84:
         51:88:b9:ec:e5:e9:7a:31:31:40:b7:ad:a9:bc:be:7d:8e:f0:
         80:e9:dc:6f:52:74:58:55:9e:3c:a7:ba:d3:e1:26:a4:6a:7c:
         ea:07:ea:e4:62:27:0c:3d:76:63:f0:c4:9e:da:ba:dd:4a:79:
         0f:33:04:b1:c5:50:c2:3b:75:76:56:cf:23:94:86:e0:03:b3:
         53:bc:86:57:ae:f0:45:b7:31:3e:a9:a5:87:41:18:8e:49:37:
         d8:41:f2:ae:3d:a4:25:23:10:b4:d4:ad:69:c6:c8:e5:0e:3a:
         e0:63:ca:27:b3:3f:78:b3:6f:30:c6:b8:cf:15:fb:9f:c9:c5:
         7d:21:91:e5:b3:80:cf:c2:17:66:9b:f9:83:50:9f:e7:c4:e8:
         f7:1f:9b:ef:d8:91:4a:2a:30:7a:7d:d0:8f:2e:50:bb:dc:c6:
         35:4b:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:49 2026 by rpki-client