This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File:                     po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier:          pUD23yjDN/tPm/fLjwxYUfj9VxDDlglzyXxEjTUcTy8=
Subject key identifier:   C5:1C:BC:61:E1:D0:37:B4:DE:1A:1C:BE:0A:B2:95:F6:E7:4F:5C:73
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer:       /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial:       019C420F97AC845FF738924B1AEA5937BC6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 11:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:43 +0000
Files and hashes:         1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
                          2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
                          3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: K4pMwCmFaGEJSr3MQWtaXYb77p96Qh54/1qSFBVKfPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:97:ac:84:5f:f7:38:92:4b:1a:ea:59:37:bc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
        Validity
            Not Before: Feb  9 11:00:43 2026 GMT
            Not After : Feb 10 11:00:43 2026 GMT
        Subject: CN=c51cbc61e1d037b4de1a1cbe0ab295f6e74f5c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:e5:58:ae:ad:ba:7e:c8:40:f4:53:4d:32:
                    19:72:5b:db:1b:2a:a9:76:24:e2:b8:8e:60:e1:de:
                    39:e6:1d:b1:8d:2d:60:c9:4d:96:ed:32:6d:20:cc:
                    23:24:1c:d0:0d:72:60:b3:34:21:b1:bf:7b:a4:9e:
                    06:40:e4:1a:38:f8:10:18:e0:dd:c1:93:fa:3a:f8:
                    73:48:5d:28:99:2d:37:1d:b7:3a:ef:b8:97:17:4e:
                    bb:20:47:ad:9d:f0:be:50:d4:23:7f:27:9f:f8:c7:
                    89:a9:61:e8:52:ff:5c:f0:69:03:63:83:36:6f:4a:
                    2d:b1:4f:ec:91:f3:d3:8a:00:4e:c5:51:fb:d9:7f:
                    d7:cd:32:b4:51:c7:84:7b:3d:a6:84:45:e6:a2:1f:
                    42:7d:c2:6d:4c:df:3d:cf:e0:73:26:30:96:20:d7:
                    63:a9:ad:39:ee:ab:1f:a2:ef:60:9a:7d:64:4e:af:
                    9e:d3:fb:d6:a4:8f:0f:57:06:e0:01:ee:2b:cd:d7:
                    b3:e6:fd:0e:04:9e:cc:90:94:4f:1c:3b:39:59:88:
                    92:7f:58:e9:0b:9b:97:b9:49:25:7b:5d:9f:5d:10:
                    f2:27:f9:f7:c0:a1:a0:34:57:24:69:06:65:54:7e:
                    91:3c:de:32:c0:48:b9:f6:1b:84:83:c6:d1:81:72:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1C:BC:61:E1:D0:37:B4:DE:1A:1C:BE:0A:B2:95:F6:E7:4F:5C:73
            X509v3 Authority Key Identifier:
                keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:32:dc:4a:3e:30:96:93:71:f6:41:5b:de:58:b2:f0:6d:38:
         23:bc:7a:ae:40:8d:d7:ec:2d:d8:7f:71:ba:76:40:d3:53:fb:
         b9:39:6b:f4:8d:a7:44:dc:32:d3:4c:37:bb:74:6f:e8:ac:e5:
         d1:07:63:97:0c:dc:b5:76:32:b2:f7:4d:ce:e1:a0:b1:b4:c0:
         c3:97:eb:eb:61:c3:df:e6:a4:99:04:12:79:4c:3b:7f:00:8b:
         2b:e6:98:c8:8a:79:48:8e:9f:a3:94:f9:a1:ae:4e:e6:b6:73:
         e3:e6:a3:40:2d:6d:3d:73:7a:c8:42:4d:e8:bf:b3:92:ef:e3:
         4f:bd:13:86:50:4e:59:86:08:9a:0d:a0:2d:ff:2b:f2:71:a2:
         e9:f9:83:d5:f8:84:4b:ec:dd:37:16:3d:bc:73:5f:16:9a:8b:
         44:a6:78:21:93:9e:7a:3d:e5:fd:51:c8:ea:77:5b:ad:46:0f:
         4c:8f:3e:51:35:85:26:fa:2d:c5:7e:46:09:c3:9f:0f:28:f5:
         3e:f5:e8:d4:92:53:fd:1e:ec:c2:cf:3e:de:71:94:ef:6b:9e:
         ea:0d:45:36:b1:e5:93:66:50:9b:21:5e:0e:ac:ea:a5:9f:ba:
         62:07:1e:66:8b:a2:91:37:dc:66:1c:e1:73:ce:d2:9d:a8:2a:
         85:5c:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:49 2026 by rpki-client