This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File:                     fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier:          ITv63F5bMkl9IWOtuMkyEOY/UmXI8qOzzmxN/qSZ2BA=
Subject key identifier:   F5:7B:3B:0E:83:E9:1A:60:5E:2C:C9:66:0B:A0:AF:C0:1A:4B:D1:5B
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer:       /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial:       019C4246829D15BEFF9CA57FC399B19148CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 12:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:43 +0000
Files and hashes:         1: VmznbVd9MfFy-le51-Dat5kq1h8.roa (hash: D7NpQBExPzq0VipR/3wFdXRjoX0wngBafprQmxoUvlI=)
                          2: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: 0dClwEIuZmWbmishC9JMsiTtnhC5bya808Uu4iAKwKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:82:9d:15:be:ff:9c:a5:7f:c3:99:b1:91:48:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
        Validity
            Not Before: Feb  9 12:00:43 2026 GMT
            Not After : Feb 10 12:00:43 2026 GMT
        Subject: CN=f57b3b0e83e91a605e2cc9660ba0afc01a4bd15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:46:9d:77:68:c1:ab:22:f5:c6:f7:cd:de:
                    c0:05:1e:5b:6a:b9:35:c3:ef:b1:10:e9:49:ba:46:
                    2b:de:fe:29:b0:d6:82:fe:6d:ff:50:a3:c4:23:5c:
                    2d:4c:fb:f0:eb:b5:d2:bb:2e:57:fb:92:76:ae:13:
                    46:ad:02:fd:2a:eb:6a:7b:35:97:52:6f:64:52:53:
                    a1:55:ff:94:89:e0:05:e8:e1:d8:4c:f6:0b:b5:d4:
                    fa:aa:a8:56:60:ec:74:95:85:02:b5:28:d0:5d:51:
                    0c:46:2f:17:c9:fa:6f:a5:f0:4e:6e:a5:a0:21:97:
                    8d:62:a3:e4:d9:4a:de:1f:98:ec:a6:61:43:62:35:
                    f5:66:44:70:4d:3b:14:b1:11:bf:40:68:13:cd:d9:
                    b1:57:45:6c:ac:5b:d9:02:eb:f6:34:ad:c3:6e:da:
                    dd:9c:6a:b0:8e:d2:43:b7:f9:22:e2:f2:4d:35:e9:
                    6c:68:ee:45:39:be:94:db:b8:fd:7e:96:43:05:e7:
                    63:69:e7:aa:71:a5:3e:f4:98:c4:0c:0b:f6:d3:56:
                    79:54:60:6e:10:df:0e:17:f4:e6:47:44:61:33:ef:
                    36:2b:42:99:79:a1:65:02:b0:78:08:2a:0d:0b:d0:
                    2c:d3:ae:2a:db:02:95:3b:2f:f2:ce:01:52:d8:e5:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7B:3B:0E:83:E9:1A:60:5E:2C:C9:66:0B:A0:AF:C0:1A:4B:D1:5B
            X509v3 Authority Key Identifier:
                keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:80:8a:04:d5:47:d0:69:22:1b:15:f7:10:59:3a:b8:a9:d2:
         75:d9:18:9a:e2:52:37:30:2d:d9:5b:58:cc:28:8c:ca:b2:e6:
         18:c1:a8:42:2f:6d:c5:39:d2:ca:18:e6:a6:3a:e5:89:4b:e9:
         fe:6d:13:c4:0b:9a:26:3a:27:00:ae:a3:8d:6d:bc:2b:79:92:
         a5:29:15:d5:bd:4d:de:fe:2f:b4:2e:00:47:9c:e8:41:87:53:
         c7:cf:27:76:31:08:15:ce:12:2b:97:8a:cc:e0:ea:d9:34:f1:
         2b:54:f4:65:0a:86:32:d6:66:eb:ce:e7:99:d4:58:2f:75:9c:
         bc:f6:b1:e5:30:60:36:40:da:5d:05:eb:1b:18:fb:17:a2:5c:
         d9:1d:49:af:49:c9:e1:7e:72:af:cf:ee:e8:ac:f5:02:13:0b:
         ad:dd:81:99:64:6b:83:af:87:ef:5e:f4:00:89:11:0f:5c:d3:
         44:54:76:d8:33:ca:b2:dd:de:eb:f8:c8:70:25:c6:a7:42:b3:
         47:21:ed:57:17:8c:68:a0:aa:a7:65:46:fe:d5:2e:1c:f8:ad:
         31:c1:2b:66:4c:51:46:a8:80:b3:75:6e:75:86:87:ad:ae:04:
         3a:64:92:46:f6:ee:b2:55:21:87:9e:1f:ab:6d:f3:ac:52:b8:
         f5:05:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:37 2026 by rpki-client