This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File:                     cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier:          VTvuDzmDFbM/9vQHO3i8qrpelmCXf4nFJDANLF1HseU=
Subject key identifier:   44:EF:29:D8:78:B7:6F:36:93:78:86:0C:07:69:C0:0A:ED:56:47:BD
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer:       /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial:       019C1BDE4A1C8B025D63E92348AB34E7F490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number:          1802
Signing time:             Mon 02 Feb 2026 01:01:18 +0000
Manifest this update:     Mon 02 Feb 2026 01:01:18 +0000
Manifest next update:     Tue 03 Feb 2026 01:01:18 +0000
Files and hashes:         1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
                          2: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
                          3: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
                          4: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: 1kG9Ajib4l4p3ATsmXE7WibXrI5rQc187Rhkteb1j8A=)
                          5: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
                          6: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
                          7: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
                          8: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:de:4a:1c:8b:02:5d:63:e9:23:48:ab:34:e7:f4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
        Validity
            Not Before: Feb  2 01:01:18 2026 GMT
            Not After : Feb  3 01:01:18 2026 GMT
        Subject: CN=44ef29d878b76f369378860c0769c00aed5647bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:61:d2:8d:6d:68:56:95:85:02:c5:54:a5:
                    c4:3f:5a:00:b4:3b:ae:ad:f3:54:ac:7f:7c:2f:38:
                    32:ff:f9:ac:0d:bd:fd:59:29:04:b2:13:7b:7b:5c:
                    1e:9d:2c:a9:cd:88:0d:33:e1:b5:95:4e:e1:87:53:
                    d6:51:e6:d9:88:41:00:eb:18:22:08:cb:ef:aa:26:
                    00:da:c6:f4:fd:3b:49:02:a1:c8:a8:9f:07:d0:b4:
                    1f:14:18:81:d5:21:0c:a2:b4:cc:d3:ff:84:a7:3d:
                    35:2b:9c:46:19:2e:a1:5d:6b:1e:65:58:d9:83:a5:
                    68:75:e6:95:ce:5b:da:ef:e1:fd:0d:05:f4:94:1a:
                    b8:d2:2b:bc:b0:fa:3b:dd:c9:fd:f4:c4:77:47:34:
                    3c:67:1d:30:ed:64:c2:0f:77:5f:cd:0e:8f:14:d1:
                    07:8e:0d:f7:dc:7e:1b:b8:50:78:6d:0c:e3:dd:40:
                    41:58:0c:ac:88:a4:25:dc:d1:c1:79:c2:13:9a:7f:
                    0c:ac:26:00:a1:86:da:2b:e3:f9:ad:9a:46:21:5e:
                    1c:db:9d:e9:49:60:f6:34:8e:12:8b:9e:c6:ed:9c:
                    26:5d:d0:1b:91:e8:f1:29:ff:42:d8:61:82:83:1d:
                    4d:66:88:92:56:c6:a2:00:ba:ab:b5:00:a0:66:15:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EF:29:D8:78:B7:6F:36:93:78:86:0C:07:69:C0:0A:ED:56:47:BD
            X509v3 Authority Key Identifier:
                keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:3c:ed:e9:b0:eb:f3:ab:af:6d:41:b0:3e:50:c4:68:cb:
         79:51:1c:a1:a1:20:ff:7e:1b:28:2c:04:ee:c1:9d:ef:34:1e:
         3b:6c:c8:46:99:6c:a6:9f:b8:22:1d:25:4f:7e:64:45:30:54:
         44:56:0a:d3:6c:6b:3b:b8:33:ad:f8:72:6d:1b:de:e5:85:00:
         5e:b1:ff:52:69:5f:d8:a3:cf:dd:21:e3:1b:97:f5:b1:72:cf:
         33:36:b4:87:83:1a:75:71:76:c7:14:3b:84:a2:76:ac:e6:9d:
         89:23:93:5c:0c:8c:f6:57:06:91:4d:b3:39:89:d6:46:5e:00:
         39:5f:1a:b7:14:d9:cb:3d:f1:18:ee:ea:00:3c:81:9f:83:5c:
         3b:e1:94:97:57:77:ae:51:3c:a8:41:23:b4:1d:cc:8c:0c:59:
         99:68:0f:16:2b:e8:fe:45:5f:d0:a0:9e:7c:c4:12:c9:f6:24:
         1e:37:bc:35:a9:2f:27:97:80:b7:6a:cf:c5:80:64:1a:7f:a8:
         ca:5f:21:d8:b3:45:0d:cc:ff:e3:2d:71:35:a7:c8:49:6d:14:
         a7:51:95:a5:48:7a:7b:b1:e1:c4:1c:98:4c:c8:ab:d0:7f:b3:
         c0:ca:20:52:02:d4:48:05:e5:ea:83:8e:fb:71:7d:b8:46:ae:
         5f:d7:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:13:45 2026 by rpki-client