This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File:                     94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier:          dk3i9CQETGCMw0lB+YfXp2+1BPd3o9RC6SscPAvAxxE=
Subject key identifier:   BA:FB:A4:D8:47:05:50:EE:CB:38:61:E8:0E:9A:4F:01:36:F7:55:AA
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer:       /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial:       019C438FC0B97C0088FDE091C5A2922B1BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:20 +0000
Files and hashes:         1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: LDiK5nIc96Z1uvKkegSjagK6Ift+uXeKhHXtC+l59mM=)
                          2: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (hash: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c0:b9:7c:00:88:fd:e0:91:c5:a2:92:2b:1b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
        Validity
            Not Before: Feb  9 18:00:20 2026 GMT
            Not After : Feb 10 18:00:20 2026 GMT
        Subject: CN=bafba4d8470550eecb3861e80e9a4f0136f755aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:16:15:f2:5b:61:c8:2f:df:2d:8a:6c:40:
                    bb:d9:0b:bc:59:91:f1:b9:3b:50:d3:b1:7f:21:fd:
                    7c:cd:4b:ed:3e:27:b7:55:06:62:e5:a0:40:53:76:
                    bd:4a:1f:b4:f4:ac:91:a6:e0:43:c2:18:56:b1:04:
                    6e:ef:3e:eb:cf:3b:22:07:98:19:ce:9e:b4:0a:00:
                    cd:6c:1b:db:a5:7d:7d:3a:b2:43:9b:ce:e4:21:5c:
                    5f:cf:10:bf:73:b7:d5:1b:09:82:64:f1:f7:91:8b:
                    cd:bf:38:0f:a9:a3:a9:ca:da:83:06:0d:f9:c9:37:
                    a6:d7:7a:7c:b2:c8:0d:13:8e:1a:a3:7d:ff:e0:73:
                    53:fa:61:c1:a6:b5:a3:74:59:26:7b:14:13:e7:a3:
                    38:e8:66:91:22:35:19:7f:62:19:67:d2:b3:7f:85:
                    20:8a:25:de:08:18:51:26:67:54:1f:b6:42:2f:35:
                    b6:a8:d7:69:48:a7:82:43:82:ac:98:35:2a:8e:a8:
                    cd:d3:fa:0e:f8:06:6b:64:aa:a5:43:91:25:81:18:
                    ae:bc:de:ca:b1:7b:f0:1b:37:f7:d0:ff:f3:98:44:
                    30:5b:03:c9:10:b3:00:70:d1:f2:07:93:31:c2:59:
                    13:b7:1d:01:09:5c:21:c5:bd:9c:72:77:b1:d3:8c:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:A4:D8:47:05:50:EE:CB:38:61:E8:0E:9A:4F:01:36:F7:55:AA
            X509v3 Authority Key Identifier:
                keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:02:13:c3:c3:77:b0:73:3d:e3:0d:ce:5b:9e:0c:ed:e7:
         f5:31:73:58:ed:63:b7:5d:d2:d5:a6:b2:bd:fb:d1:e9:cc:81:
         c9:aa:89:e3:aa:22:7f:7a:9c:ca:36:67:36:51:7b:ad:5c:e6:
         21:c9:f1:49:2e:7e:6b:4f:80:ee:b3:28:2f:b1:f8:78:ac:09:
         13:70:0a:4b:f7:7e:cf:56:d1:04:93:2a:c9:d5:b2:7a:ce:96:
         11:81:85:bb:3b:9f:28:bd:2e:19:27:b3:9b:99:ad:85:d6:12:
         dd:c4:65:7c:85:70:23:4c:f4:e4:bd:03:65:8b:1a:60:48:34:
         7c:88:05:07:4b:1f:2f:49:e7:88:8e:8e:10:96:28:7d:f5:f6:
         a5:d6:c7:00:df:5a:52:c7:35:11:74:6d:75:5d:d5:05:6f:3a:
         d5:c5:ce:b2:11:3c:34:fb:0e:6c:49:db:e1:5f:6b:c9:68:86:
         e1:ee:08:fb:e3:74:e5:14:25:97:be:57:f9:d1:d5:45:6b:6c:
         39:f9:e9:5f:5d:e3:43:dc:93:62:ed:75:8f:67:98:70:c8:11:
         6f:e9:40:40:a7:27:6a:6b:12:4d:e9:f9:f9:d7:42:0e:8b:bd:
         fa:05:27:94:85:18:16:27:b1:57:f3:f6:fd:c9:f4:90:6d:69:
         60:a4:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:46 2026 by rpki-client