This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          l/5qprzz9ctQZT+74hpkcyKnnN1CGETaGvgziXci0Bo=
Subject key identifier:   87:96:2D:5B:6B:90:BB:BC:DB:38:0C:5A:5C:43:93:A3:E2:12:FE:AC
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       019C427D0943862007476B99A7268905ECA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 13:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:16 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: MHpqGkIBuvwCvVItNZmuv6GM5aOYRUDNJU8OJmtgVlU=)
                          2: DE55FjmHnYMUufPcVQkSgEdNQF0.roa (hash: sZ+5mTZ98nXRCWaNrvUzsUkg+0v1Fty74PKR7nx8ZI0=)
                          3: _ksG3kvAnj4QER34bGf9CzKZfqA.roa (hash: hZjpPAvNf63FW5do/xOQrnx1Z9N5hBMWnbPukfeUVvA=)
                          4: kj8-3DtT32XqscwKCiQPzi9o7X4.roa (hash: VlQ7LnPKpNwk4BdUZ5Ryr+mzC2TSKzAr4UDFF48gtfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:09:43:86:20:07:47:6b:99:a7:26:89:05:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Feb  9 13:00:16 2026 GMT
            Not After : Feb 10 13:00:16 2026 GMT
        Subject: CN=87962d5b6b90bbbcdb380c5a5c4393a3e212feac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:83:fc:80:9f:80:b9:c7:63:45:23:cf:43:
                    53:ad:29:48:2f:d0:02:c1:68:79:b2:81:59:0d:2e:
                    2c:f0:f3:43:83:37:20:18:44:6a:6b:8e:bd:86:e5:
                    a1:46:0e:b6:57:92:6c:a8:5f:d7:2a:1c:7e:51:20:
                    0b:78:5e:7c:ff:9a:da:13:93:e3:6d:8c:d1:84:c2:
                    78:20:c8:27:ea:f9:ad:2e:6f:18:dd:64:49:76:73:
                    95:a4:db:e6:e3:04:2a:68:b5:21:7b:42:f9:40:c9:
                    4d:3f:1f:fa:50:26:01:22:06:26:79:c8:ed:f9:2d:
                    46:bf:75:27:46:30:04:4f:9b:56:76:ef:4d:31:29:
                    1b:41:fc:f3:0d:2c:a7:dd:b5:fb:8f:fe:2b:ea:85:
                    52:df:22:4d:3a:1e:b0:ae:60:e3:81:d9:d8:f2:89:
                    6d:ba:1f:3c:3e:7e:4e:39:9d:8c:f3:e5:d5:16:d8:
                    0c:53:0e:ff:76:68:97:67:42:5a:24:4b:d0:b7:a2:
                    f6:9d:d2:e7:b0:2d:9a:98:56:f1:f9:a7:e4:5c:61:
                    88:90:69:ae:00:a2:6f:ad:10:82:18:d4:9d:dd:26:
                    2b:9c:a1:39:47:8d:91:2a:c9:dc:5a:2e:df:39:a9:
                    f2:1b:ad:ff:cc:09:32:53:57:b7:c8:78:14:eb:78:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:96:2D:5B:6B:90:BB:BC:DB:38:0C:5A:5C:43:93:A3:E2:12:FE:AC
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:cd:bb:bb:10:a5:78:2a:21:93:d4:f5:09:40:67:fa:09:0c:
         9e:8d:91:da:29:00:97:ac:29:08:a2:2c:e8:1f:a7:42:f8:b9:
         10:96:73:7b:42:d3:a8:f9:3c:33:45:5c:ac:45:6d:1d:da:21:
         63:4e:66:1e:b8:5a:b5:2f:70:a8:7f:91:60:bd:f2:44:ab:63:
         ad:4b:12:f2:02:86:55:8e:7e:6a:41:cc:45:34:39:04:b4:2a:
         26:7a:17:84:94:d5:bf:d7:bc:02:67:15:4f:50:c0:83:e5:3b:
         d7:d5:05:b1:1b:7c:43:0a:e3:9e:34:c0:f5:cd:36:90:bf:cc:
         44:56:e1:e4:7d:de:77:82:bd:79:d2:5f:12:10:e3:02:db:85:
         e1:2f:3c:fa:4a:66:12:f9:14:ea:3b:66:84:c8:ea:2e:3a:6d:
         08:d6:0d:0d:8e:ed:6f:16:27:f8:bd:ea:bb:77:a4:05:3e:7a:
         3c:03:aa:01:cd:1c:cb:4f:9d:49:e5:02:50:34:94:90:6f:ad:
         37:80:21:72:81:fe:9e:a7:a6:9b:6b:c5:6b:fe:d3:67:f2:5d:
         20:f2:a5:12:c9:8e:4e:21:fb:b4:1c:d9:0f:76:7a:f9:9a:f5:
         b3:a1:48:5a:07:44:a4:c8:95:91:ac:c5:52:32:c7:36:25:85:
         80:f3:cc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:04 2026 by rpki-client