This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          jZ1066HPKnrvlrltg6zdoTnHcu5GuR7yNteyQ7Ojfsg=
Subject key identifier:   03:9C:D3:22:66:58:C2:0C:96:11:E5:9A:FE:5D:04:B2:8D:39:31:E0
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019C1D2763583B7EBA93D21180CCDCB1C7D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          044E
Signing time:             Mon 02 Feb 2026 07:00:46 +0000
Manifest this update:     Mon 02 Feb 2026 07:00:46 +0000
Manifest next update:     Tue 03 Feb 2026 07:00:46 +0000
Files and hashes:         1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: b7ytIfLkbwSWolDVfTxx37nGHSzXl6VD2SuFlMco3SI=)
                          2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:63:58:3b:7e:ba:93:d2:11:80:cc:dc:b1:c7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Feb  2 07:00:46 2026 GMT
            Not After : Feb  3 07:00:46 2026 GMT
        Subject: CN=039cd3226658c20c9611e59afe5d04b28d3931e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:48:cf:8d:34:e5:16:e4:0a:66:1a:16:37:
                    7c:42:cd:b7:fa:04:ae:38:fe:2d:83:11:de:b0:8a:
                    cf:11:ea:86:ec:b1:c8:4e:32:66:f5:49:d6:fb:e7:
                    20:f2:df:3d:20:35:5f:71:19:14:1f:c6:0f:e0:28:
                    e5:bb:a5:ac:34:d5:db:58:03:cf:59:a6:5e:df:ac:
                    d9:77:23:9d:a2:fe:e3:40:2a:36:80:c3:8a:3a:da:
                    5b:7b:c0:5c:03:bc:0d:88:86:6c:d8:b2:d6:58:f2:
                    a5:a6:03:81:f1:31:e4:03:65:ca:10:94:ff:2d:dd:
                    b8:b0:2b:dd:ed:21:ae:62:ab:26:5a:5e:00:a8:68:
                    5d:2f:7b:e1:6a:7c:ca:64:ae:2e:a7:01:12:1d:6f:
                    bb:42:a7:d8:82:9b:a2:ce:35:ac:d2:2d:2d:b9:33:
                    f2:ae:b6:7d:82:02:63:7e:e1:21:24:fb:1e:da:30:
                    6c:67:dd:f0:7d:cc:29:a5:65:99:39:ac:95:a4:66:
                    a7:9e:89:63:07:aa:92:df:83:a4:a5:f7:86:dd:64:
                    d7:00:6a:78:72:17:ee:3d:bf:a9:29:da:7a:df:32:
                    05:7a:4e:81:23:4a:f7:f8:4d:3e:dc:7d:d8:e5:ce:
                    12:96:e2:f0:b6:a2:61:ed:ee:dc:f0:a8:81:6e:de:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9C:D3:22:66:58:C2:0C:96:11:E5:9A:FE:5D:04:B2:8D:39:31:E0
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:bc:2e:93:2a:0d:27:36:c7:0f:67:37:5d:af:40:98:1b:
         23:d0:11:26:e9:d6:3d:70:fd:c7:7a:42:04:59:97:53:34:a5:
         4c:9b:b9:b0:58:f9:1c:d0:ca:02:9d:50:e1:2e:39:0c:ca:1b:
         e1:1a:79:f9:fc:fd:b4:37:57:92:67:eb:96:3d:47:d9:ea:2e:
         0f:b6:e6:9b:28:25:0d:2c:cd:37:ca:4b:d7:90:76:8e:2e:90:
         69:af:07:92:49:30:d6:c5:57:44:ed:00:93:72:d5:68:c4:ac:
         18:41:98:ee:7a:61:79:fc:d4:cb:c6:5a:3f:fc:f3:19:98:ac:
         6b:7e:e1:47:97:92:27:e0:06:a8:f0:7c:16:57:32:61:a6:02:
         1d:30:73:43:d1:68:37:97:41:6b:10:59:29:ea:b4:69:dc:49:
         6b:47:0a:89:cb:53:44:a9:4d:2c:45:8a:5a:89:1a:52:7c:ba:
         e9:a0:f6:57:53:59:3f:b0:c7:74:1a:00:be:85:c4:c1:62:6f:
         b9:47:7c:94:ed:f1:ec:45:f3:db:af:50:a8:a7:1b:f9:c9:61:
         ab:ac:12:4a:db:e7:85:c8:4b:46:ed:bb:e4:df:b5:e0:09:ca:
         ad:58:46:ab:20:77:ae:ef:58:91:36:ac:b9:64:86:0c:ca:75:
         62:01:bb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:59:58 2026 by rpki-client