This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File:                     1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier:          ksKTDZoch8Bw45SCm6Cs3QPTOEuUegIiI9EF3nDFC9A=
Subject key identifier:   BE:B6:87:3B:E3:47:E7:0A:B1:42:7E:D9:0C:19:1D:E9:60:53:74:1F
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer:       /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial:       019C42466D6C1D299109A5540C0DCCB1FE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number:          1429
Signing time:             Mon 09 Feb 2026 12:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:37 +0000
Files and hashes:         1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: OEHK8xYPdyr4lbT9OnMkqvgIJww21X8/uGFb7F/fTkE=)
                          2: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (hash: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:6d:6c:1d:29:91:09:a5:54:0c:0d:cc:b1:fe:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
        Validity
            Not Before: Feb  9 12:00:37 2026 GMT
            Not After : Feb 10 12:00:37 2026 GMT
        Subject: CN=beb6873be347e70ab1427ed90c191de96053741f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e5:e2:f2:1f:d3:11:95:c5:d7:bb:be:37:5b:
                    70:9c:be:0d:9b:93:7f:f3:68:bb:19:ed:43:30:78:
                    b9:c1:38:14:bb:29:7c:e2:b0:51:de:e1:3f:5d:e3:
                    ea:ee:75:aa:a8:a8:b2:44:0d:5f:91:19:52:2f:29:
                    1d:df:5a:fc:00:20:83:8a:a0:91:25:fe:cb:e5:20:
                    28:98:1d:e8:96:fe:c1:64:3c:77:45:32:49:0f:2a:
                    97:e8:99:f6:9d:ba:ae:a8:22:bf:3c:f9:c7:5e:e7:
                    b8:71:81:55:ad:bb:e6:0b:3c:a0:62:8b:5e:78:84:
                    32:1e:e1:52:c0:eb:57:a1:11:2e:70:df:b0:5d:96:
                    4a:69:16:ce:f5:35:93:c4:37:9a:62:00:6a:86:cf:
                    22:3a:31:e3:03:d1:e7:ac:e7:1a:fd:1c:17:1e:fc:
                    2c:f2:1a:c9:e1:2d:c5:5a:53:ca:54:e1:3f:b1:a3:
                    d0:e5:a2:6f:84:44:62:d3:57:87:92:c4:2f:b9:95:
                    bf:36:3d:f9:a3:33:f3:36:cd:9c:8b:76:ba:03:f7:
                    c7:67:92:8c:ee:2b:0f:eb:a8:01:e9:75:8f:64:c9:
                    9f:08:92:19:ba:11:d2:55:1d:5f:3d:c6:56:75:4e:
                    c8:47:6b:20:b1:ff:3e:76:37:7f:84:9d:57:21:15:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B6:87:3B:E3:47:E7:0A:B1:42:7E:D9:0C:19:1D:E9:60:53:74:1F
            X509v3 Authority Key Identifier:
                keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:91:d2:4b:85:c8:8e:41:3c:76:2c:6e:3a:80:b7:73:94:
         3a:ee:c7:9f:62:8d:1d:43:08:6b:43:17:06:da:ff:1e:f5:e2:
         f1:58:a6:63:9b:78:5b:13:48:d9:05:5b:78:9c:63:29:dc:cb:
         22:33:fb:00:ee:53:09:97:6a:07:c0:8b:6c:fc:8b:8c:ef:63:
         0a:df:fd:b4:de:02:f6:ae:72:ad:93:4a:ec:70:d9:a8:13:32:
         09:bd:73:dd:4b:44:11:ba:94:d3:33:99:a6:9f:ef:ca:3b:f5:
         3f:0e:97:cf:80:51:18:31:04:1d:ef:dd:5c:03:1d:05:14:f4:
         a3:24:6a:80:d7:d7:0a:0e:ec:2a:b2:b9:ee:31:c1:a9:93:96:
         2a:b0:c8:cd:c7:16:e2:ef:e2:2f:bf:b5:61:0e:93:78:5b:78:
         04:6f:48:5a:2d:8a:fa:16:cf:54:02:b0:ac:f5:9b:a9:2e:de:
         a7:d0:b0:8d:8c:f7:cf:fe:33:45:bf:f5:a9:02:da:27:36:7d:
         0a:47:78:99:9e:ef:37:a7:0b:63:a4:87:d6:c2:72:41:a2:4f:
         c0:36:99:5b:61:c0:b1:2d:c2:8e:b9:93:85:24:3c:d3:f6:cc:
         9f:1d:82:fa:71:d0:61:34:cf:35:81:48:ff:07:04:e5:eb:2e:
         41:5c:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:19 2026 by rpki-client