This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
File:                     RJsY4ylteV06nJWb4lxwqqs2UgA.mft (raw, json)
Hash identifier:          FrgODB9XhBc5m3UmQzQpfH2WccJ3FsRqJEYYAcT40Ww=
Subject key identifier:   36:02:A8:E4:54:1A:3A:0A:4D:68:8D:C8:DA:AF:43:9A:9A:6F:90:49
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Certificate issuer:       /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial:       019C43FDAB1FEF87ECD235C41F00169A2125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 20:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:23 +0000
Files and hashes:         1: RJsY4ylteV06nJWb4lxwqqs2UgA.crl (hash: Fx9oGcUMSiIxjebUXV+/OrV1/7Av2IXhh+Frg0GyNlg=)
                          2: SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa (hash: Pb62vRdjdsMJXeIUL95Djt1CD7hzu51dxI2T6BhHAHQ=)
                          3: dLxHjycBuzYpKKgUpxSpgPBLJwA.roa (hash: cWtPoE+a8NVUnYQfXzALKros2CCBnTnUuUD6geEKTmE=)
                          4: dhl80uzcc-87fo0spsBFmcs6UH8.roa (hash: cF0fEkOn4DVXvMJud4PWhvcHH9EStSkmcBLtoulP7QM=)
                          5: mVvHewUtT9I-qpdCqcI3X4EnSSk.roa (hash: xatBOvMf3uPihDeymrDUB8H89u9KOADx6FDvJr+qC+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:ab:1f:ef:87:ec:d2:35:c4:1f:00:16:9a:21:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
        Validity
            Not Before: Feb  9 20:00:23 2026 GMT
            Not After : Feb 10 20:00:23 2026 GMT
        Subject: CN=3602a8e4541a3a0a4d688dc8daaf439a9a6f9049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:cd:59:d6:13:30:32:c9:05:9a:10:14:a5:
                    3b:d0:d3:7c:0a:8e:b2:ea:71:35:15:36:db:5d:db:
                    60:f4:eb:43:a0:27:24:18:c5:a5:68:42:bb:9b:26:
                    3a:71:4b:fe:34:ce:b2:bb:1c:0a:ff:78:e3:bb:83:
                    27:f9:f4:f5:73:3a:b9:25:b5:78:cb:9b:52:95:66:
                    2a:c5:12:d1:ac:04:7a:5d:f0:27:62:66:b2:ef:40:
                    a7:9d:0d:78:ff:b8:e5:7d:d2:b2:0b:85:27:0b:ae:
                    0a:a4:87:a8:a8:94:49:e7:6e:61:c7:27:81:45:8b:
                    86:5f:a1:e3:57:68:3c:f3:5f:09:d7:b4:12:a0:bc:
                    0f:82:18:9a:74:94:3f:fc:b8:39:34:13:37:24:a1:
                    34:80:5b:34:3f:90:fa:e6:87:3c:82:42:42:81:df:
                    25:f4:9b:9f:29:b4:6e:7f:76:7a:95:c6:db:35:28:
                    8a:de:4e:d0:65:d2:9d:04:6f:3f:69:ac:d1:8c:10:
                    7b:ff:07:98:e4:67:31:13:f7:f6:b6:3f:0c:9d:d1:
                    d5:1f:04:a3:0f:19:b3:9b:f8:4a:f2:4a:65:a1:81:
                    c9:4a:f4:be:82:e3:38:f8:df:52:35:a8:96:a8:0c:
                    34:74:8e:5b:ba:7e:91:a0:b4:96:62:9b:99:5b:91:
                    8b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:02:A8:E4:54:1A:3A:0A:4D:68:8D:C8:DA:AF:43:9A:9A:6F:90:49
            X509v3 Authority Key Identifier:
                keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8b:43:17:be:1b:a4:54:6e:7b:7b:55:11:93:9f:d4:de:bb:
         0f:9d:16:c6:3e:02:d2:90:78:35:10:6b:92:23:72:ce:37:24:
         e9:90:94:1f:de:d1:8e:f0:a9:e6:26:9e:c7:11:c6:ac:22:26:
         8c:18:3f:1b:5e:65:62:0d:d7:89:68:32:91:f9:92:c3:4b:c6:
         00:b6:0f:45:19:57:29:87:71:3e:b7:49:72:f0:df:a9:79:58:
         7a:2b:b7:b3:bc:29:31:55:6e:e0:a7:39:a8:0f:77:c5:4d:e8:
         dc:01:6a:80:6b:04:12:11:93:82:63:ed:30:fb:28:20:4d:b8:
         a8:78:68:95:3c:06:df:00:5d:5f:42:56:30:2c:13:29:1c:fd:
         dd:92:93:5a:14:ff:e0:e5:39:31:b7:05:1d:d0:49:4e:40:e2:
         5f:44:3e:39:b6:11:74:9a:5f:dc:4a:ac:34:aa:6d:04:fd:26:
         31:38:87:d1:22:3d:1e:11:3a:0a:2a:cd:6b:a4:ae:d3:69:65:
         4e:15:f4:94:ee:a1:4a:d8:77:89:d2:f9:13:f8:7f:61:40:79:
         58:f1:91:a8:15:73:a6:9e:62:a0:f9:c4:69:89:41:1e:f4:4e:
         a7:42:16:bd:26:64:cd:44:52:18:e6:13:2d:56:aa:54:75:fb:
         c7:8a:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:42 2026 by rpki-client