This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File:                     0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier:          P9A7sBB77IMUWmWn5AQUN+Gd3kKNoayPXRLWKxucheY=
Subject key identifier:   44:F4:FB:77:6F:A4:94:68:21:3B:8C:FA:3A:D1:6E:F1:2B:F1:E9:84
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer:       /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial:       019C43C6FDC9E0DD1B2E82A6C9D0EB124EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 19:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:40 +0000
Files and hashes:         1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: ohoy9PcGUraOnIYwkQ45cz4HkTBlsqsscI+K5n4B6yA=)
                          2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:fd:c9:e0:dd:1b:2e:82:a6:c9:d0:eb:12:4e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
        Validity
            Not Before: Feb  9 19:00:40 2026 GMT
            Not After : Feb 10 19:00:40 2026 GMT
        Subject: CN=44f4fb776fa49468213b8cfa3ad16ef12bf1e984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:8c:27:1e:03:a1:dd:e4:b1:2d:6e:8f:6b:
                    ed:aa:72:92:4a:94:e9:ef:cf:c0:cc:ef:e2:39:6a:
                    4c:f4:e2:fa:8d:52:99:29:51:44:de:df:e3:01:fc:
                    23:f8:12:b5:c9:b7:de:a5:db:fc:b5:0a:93:d2:f5:
                    93:64:75:b9:04:72:fd:cc:26:33:15:27:9a:20:d4:
                    2a:ec:69:9a:e5:d5:4e:71:d2:c2:27:44:73:09:17:
                    78:d2:91:fa:7c:0c:4e:d5:c9:62:a1:16:85:06:e0:
                    99:2a:f4:3d:f9:ca:01:d9:7e:ad:28:5f:7b:6a:bc:
                    d7:d4:35:0c:04:58:b7:68:21:98:a4:d1:ef:d6:05:
                    13:1d:c2:c3:51:16:f6:d3:b4:3f:fd:ad:d3:bd:bf:
                    a4:03:60:2b:2a:38:59:5c:3a:fa:12:60:13:ac:82:
                    f4:f2:ed:e9:da:a7:1e:1a:6c:1b:19:84:32:a0:11:
                    7f:06:1c:41:6d:99:26:87:63:05:6b:c1:19:1e:3a:
                    04:84:d3:ef:9f:eb:0d:c2:6d:80:36:42:41:db:c1:
                    09:2d:ba:f5:35:63:7d:46:5c:92:df:6d:2d:16:d4:
                    12:b6:97:74:33:4a:d5:38:17:3d:f5:fd:2b:9f:9d:
                    6e:68:49:1f:d1:b9:88:ec:89:b1:59:0d:06:05:1f:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F4:FB:77:6F:A4:94:68:21:3B:8C:FA:3A:D1:6E:F1:2B:F1:E9:84
            X509v3 Authority Key Identifier:
                keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:25:29:34:d5:76:eb:b4:11:77:65:c6:f8:e2:8b:86:97:05:
         ee:b5:31:08:ff:10:67:9a:5c:f4:d9:90:3f:c9:11:2d:ca:e6:
         9f:21:09:0a:83:98:ef:5d:c9:87:da:ba:6d:4f:de:8b:39:a3:
         c7:25:39:ff:96:88:49:93:54:81:7b:b5:44:f2:9f:33:59:de:
         61:e3:7e:26:a6:a0:2f:50:25:43:ca:24:39:23:db:5d:f3:c1:
         73:7d:3f:91:80:3f:94:28:27:97:9b:7b:b3:15:cb:35:1b:14:
         e8:02:29:56:3c:39:f3:36:0f:e9:b0:3a:83:20:e5:37:75:b0:
         ed:83:df:c9:d4:bc:7e:10:db:ce:b4:78:7d:d7:a5:35:eb:73:
         ba:07:52:4f:b0:b6:3f:70:34:b7:02:3c:83:68:1b:a1:f7:ba:
         96:4c:c9:c5:30:44:2b:de:7a:cb:60:cc:24:79:df:2f:03:cb:
         b2:40:8d:63:c7:b6:c9:11:c3:42:3e:54:75:1e:96:48:6b:82:
         63:f8:0d:cb:99:b1:c5:99:19:99:70:02:55:3a:8c:84:27:9b:
         ba:9b:b2:2e:15:6c:1e:b9:2a:03:c9:05:97:d6:d3:f4:e1:d7:
         0a:50:99:c5:e3:53:85:37:ed:c3:6b:c9:f9:d9:c9:8e:ce:f6:
         c0:8e:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:19 2026 by rpki-client