This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File:                     RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier:          wPg0hgg7OkV/YSAH7jtxL9NhsEJXiJG+ColuANi6SwQ=
Subject key identifier:   EA:4D:AE:6F:36:FA:05:EE:1E:F2:7A:E1:27:81:1F:9A:C3:1A:DB:61
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer:       /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial:       019C43903556BB20F27F8E4225E19ACAD0BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number:          0459
Signing time:             Mon 09 Feb 2026 18:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:50 +0000
Files and hashes:         1: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: oB/z5Pc6N8syvvZp3qVowAw/JcJf5wR8Ry0y26B5NkE=)
                          2: q547rqVuRHDrkdRQeLcAfoatWLM.roa (hash: pwOHGiBDa818vgm5rLQAdwYCv/4nGflJp4wp+uqq1YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:35:56:bb:20:f2:7f:8e:42:25:e1:9a:ca:d0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
        Validity
            Not Before: Feb  9 18:00:50 2026 GMT
            Not After : Feb 10 18:00:50 2026 GMT
        Subject: CN=ea4dae6f36fa05ee1ef27ae127811f9ac31adb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:54:0c:a2:94:ef:c5:1b:39:f3:a6:69:10:b7:
                    1b:c9:46:71:93:63:25:9c:4c:01:de:8e:b6:ab:2e:
                    6d:be:c4:d3:fe:8e:52:8d:3a:9d:2f:22:35:2b:22:
                    f2:09:81:5a:a6:0d:92:c3:d9:48:cb:aa:65:ca:9e:
                    a1:b1:09:1a:6a:a8:7c:e9:bc:32:de:7d:f5:47:b2:
                    0c:3c:2e:98:62:f6:5a:bb:fc:63:b3:c7:a9:fb:b6:
                    32:d0:28:95:c3:cd:17:12:b1:06:e7:41:a8:8d:2b:
                    5b:4e:8e:9d:51:d2:86:31:79:48:94:56:5d:d9:2b:
                    7e:9f:66:e4:f1:4f:a7:15:10:08:bf:3d:bb:14:0a:
                    a5:27:a8:32:d3:38:4c:5f:9c:47:6a:00:05:29:bc:
                    39:ee:2c:9e:da:7f:ac:5f:aa:e2:e6:50:c1:f4:35:
                    d7:61:b8:85:9a:38:e5:5b:be:aa:88:85:f6:71:25:
                    48:01:ff:ee:c3:18:4e:48:b0:fd:0c:46:3f:86:ba:
                    73:de:fd:71:98:fb:2c:44:db:a6:3f:b9:86:53:8c:
                    fb:74:13:92:4c:6d:ed:70:a3:c1:82:96:32:03:54:
                    0a:b0:12:58:b7:cb:44:75:70:b4:14:45:2c:2a:25:
                    f0:db:b5:8d:71:0f:17:ac:a4:fd:18:3b:10:8a:d2:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4D:AE:6F:36:FA:05:EE:1E:F2:7A:E1:27:81:1F:9A:C3:1A:DB:61
            X509v3 Authority Key Identifier:
                keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e8:9d:d8:3f:2a:8d:79:2d:72:2c:58:68:c0:0b:7f:99:83:
         9a:d4:0c:89:fc:8c:8f:1a:7f:f3:87:27:7f:aa:31:8b:12:0d:
         60:2e:af:38:e3:c6:43:2a:3c:85:83:09:44:ca:4a:2d:18:20:
         f7:5b:db:3b:16:1b:11:61:3f:21:0f:8e:80:73:73:51:cc:b5:
         b5:0e:aa:29:d4:5c:91:40:03:a5:83:14:68:4c:56:9f:b4:f3:
         ac:71:55:a9:f8:a6:4f:db:00:42:13:36:93:cb:42:16:a2:89:
         62:54:f4:70:d8:04:64:d2:ac:ee:93:f6:21:0d:61:db:4a:5d:
         4b:7b:d2:83:d1:6b:55:87:d7:57:85:f6:14:fd:20:fa:61:74:
         20:4c:ac:f0:74:87:7a:9a:72:7b:46:d0:f8:25:80:9d:67:87:
         fe:04:46:ce:43:d9:73:e3:f2:49:d0:85:5c:68:b4:63:56:91:
         02:b7:6b:56:41:8f:a8:29:26:0b:5c:78:2a:85:42:1e:d3:36:
         dd:f8:3b:ec:e3:c8:ab:c8:29:33:d5:54:c5:e8:42:6d:b1:b4:
         ba:94:02:27:94:08:1c:d3:16:93:b7:92:a4:67:2f:e5:74:b6:
         ba:7d:81:45:c2:84:93:4c:cf:95:b2:76:54:3b:0b:03:b2:88:
         c7:f6:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:59 2026 by rpki-client