This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File:                     sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier:          4JlowLa30q9RcPQLg87DSlGdY0wI1Z+bm8zMmCsnQO0=
Subject key identifier:   18:CD:3D:A9:02:3D:66:FA:91:7E:FD:3B:E1:92:4B:B1:B5:81:AA:3A
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer:       /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial:       019C43900A90E854F57F17CE268B028B33F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number:          141D
Signing time:             Mon 09 Feb 2026 18:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:39 +0000
Files and hashes:         1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
                          2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: SBcDb1ePVXMlvY/g6GzNxDaB/p8PrZ4dW9FyhFxumKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:0a:90:e8:54:f5:7f:17:ce:26:8b:02:8b:33:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
        Validity
            Not Before: Feb  9 18:00:39 2026 GMT
            Not After : Feb 10 18:00:39 2026 GMT
        Subject: CN=18cd3da9023d66fa917efd3be1924bb1b581aa3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:96:b8:f5:76:df:f3:12:e2:65:3c:0e:05:
                    79:cb:e9:e2:e0:b1:5a:8b:23:94:c5:3e:5a:0a:2b:
                    fb:ce:b6:16:ab:6c:40:5a:24:50:1e:89:8b:3c:d5:
                    8d:37:9e:11:5f:6a:44:18:55:2e:8f:c4:85:ab:46:
                    de:40:49:0b:f2:79:ac:39:cc:7b:02:a6:ae:a9:6e:
                    f4:d3:e6:a5:d8:a0:96:b2:18:77:71:42:50:08:9c:
                    ca:44:39:9f:71:2c:c9:9c:1e:c6:40:e1:f4:73:b7:
                    f5:d5:f6:37:51:57:99:3d:79:82:f4:56:b5:45:ad:
                    35:40:c8:9d:48:93:5a:d0:a4:aa:49:8e:6a:45:5d:
                    46:72:8c:15:83:9b:86:be:ec:5a:97:5e:dc:9f:64:
                    24:78:8c:2c:d2:31:7b:8e:16:5b:cd:4d:3a:b4:3d:
                    b7:fa:44:a6:b1:e5:da:7f:f1:35:03:2f:5d:f9:de:
                    bf:a9:d5:42:64:52:fb:b9:33:2a:fc:9a:b8:92:0e:
                    65:fd:64:4b:f7:44:34:55:66:6a:3b:07:2c:28:07:
                    db:ed:38:97:60:ee:f3:20:52:bd:67:d3:b2:5b:4c:
                    7e:b4:da:47:87:77:42:dd:fc:3d:0f:f4:cc:22:dd:
                    c1:2e:ff:f3:51:75:3b:f9:74:ad:a3:84:4a:39:89:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CD:3D:A9:02:3D:66:FA:91:7E:FD:3B:E1:92:4B:B1:B5:81:AA:3A
            X509v3 Authority Key Identifier:
                keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9f:04:7a:26:dc:fa:dd:7f:c0:82:79:ae:7b:d1:8b:ea:c9:
         d9:37:40:bd:95:db:a5:3c:4b:c3:c0:de:68:6b:74:3b:18:ff:
         30:91:63:09:2b:d6:8d:d3:8e:af:b5:9a:82:19:1d:5a:41:f9:
         f9:ff:6e:c5:ef:65:fe:83:2f:a8:7a:a5:e7:b4:b1:0a:1e:5d:
         56:4a:44:41:85:17:00:94:f8:a9:21:85:b9:ad:0c:9e:22:29:
         37:7b:03:57:27:07:44:65:a7:3e:68:39:e6:b0:b2:c0:9b:bd:
         2f:30:bf:e5:6c:2c:05:6a:58:b1:03:f0:33:e9:7f:ca:73:c0:
         a2:09:62:eb:39:ad:98:e3:21:4f:5f:6e:d0:9d:d4:04:62:45:
         d2:70:df:4c:6e:de:89:d1:a7:39:85:23:b5:45:1e:ff:12:21:
         ee:ac:78:db:ab:37:92:03:74:16:39:a5:42:9a:36:ee:47:04:
         79:a9:c8:fb:57:3a:e6:bd:46:27:db:4f:57:00:64:27:eb:e8:
         10:70:ef:09:7c:e1:b0:66:37:9e:25:ac:87:08:25:98:1a:0d:
         ca:8f:71:cc:b4:98:3b:a6:11:32:7f:4c:bf:8b:d7:3c:05:e7:
         e2:90:f6:dd:c6:e9:0f:18:4b:14:3e:ad:f8:4c:4f:41:3a:45:
         e4:13:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:00 2026 by rpki-client