This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File:                     rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier:          PU9dmsJoEd/kFr/HWlzW8rJIm8v09olG4O62dDmVkiw=
Subject key identifier:   A9:0C:36:C4:93:4A:09:91:D7:AC:C9:D8:EA:A0:91:49:F6:92:EE:6E
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer:       /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial:       019C43222F574D847AEEA1E1ECF0527CB1CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 16:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:39 +0000
Files and hashes:         1: HtxMXqqhzKqnM-81Q366LSa5VRM.roa (hash: lOeWJNKuBfP6Er8Y1VwMR1oQUbvjX1dy4GlVvc3GRBU=)
                          2: SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa (hash: RYBd7FR6OZyKgfNBGxNgxiTa308oNZjB95Z8XVN3KKA=)
                          3: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: QIGiX8EZE28a1V/EKJWK9nSNWm8ORJHgKyZRCXicuRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:2f:57:4d:84:7a:ee:a1:e1:ec:f0:52:7c:b1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
        Validity
            Not Before: Feb  9 16:00:39 2026 GMT
            Not After : Feb 10 16:00:39 2026 GMT
        Subject: CN=a90c36c4934a0991d7acc9d8eaa09149f692ee6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:7e:c3:b3:ab:d5:a8:d7:36:ea:87:1f:b2:
                    fd:a1:5f:ec:a9:13:e5:52:53:04:aa:3a:02:d5:0f:
                    33:fb:b9:9f:43:8d:98:8c:5a:b5:b3:1a:9a:7d:2b:
                    98:b6:74:b5:e7:8d:f4:b9:68:e6:af:ae:92:63:5e:
                    8d:91:a3:c9:6c:62:53:5b:c4:d3:87:93:4c:2e:42:
                    6e:62:97:c5:e2:9f:6c:56:bf:d7:b3:f4:9e:d4:60:
                    3a:eb:00:a8:e1:c9:f0:8a:32:c7:9f:81:ea:03:23:
                    74:ea:85:67:47:f6:fa:e9:e2:99:cb:5c:c8:c7:9c:
                    c6:72:bb:65:00:a4:ae:7b:51:f5:93:a2:af:7c:fa:
                    69:16:78:2d:40:35:4b:43:fd:76:7b:1d:90:0f:6e:
                    95:df:92:ba:c8:1e:26:bf:e3:d7:09:ed:36:3a:05:
                    d8:fd:d9:55:e7:c1:e0:aa:67:0f:c0:d4:ae:3d:8b:
                    87:d8:75:bc:28:29:0e:56:8f:d2:f9:22:e0:87:3f:
                    67:a4:61:08:2b:6b:ae:98:dc:68:db:1f:44:5d:f2:
                    15:f3:8c:ac:ae:9a:a2:5b:cf:dd:f2:09:79:9a:c9:
                    81:1a:57:4b:6e:fc:e0:35:9e:39:08:6a:b4:da:84:
                    42:2a:0d:df:41:be:28:fc:a0:9a:d0:f3:90:45:59:
                    70:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0C:36:C4:93:4A:09:91:D7:AC:C9:D8:EA:A0:91:49:F6:92:EE:6E
            X509v3 Authority Key Identifier:
                keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:39:51:b8:93:4a:1d:ac:d4:c9:e0:76:10:57:a8:29:61:95:
         46:7c:c9:74:89:1d:41:6f:7e:b7:77:dd:00:b0:81:c1:5c:53:
         94:51:97:94:01:59:a5:17:40:9a:99:c1:67:71:03:8a:69:ad:
         2e:dd:20:3d:6b:8c:2d:1a:69:97:b3:38:fa:39:ac:c8:76:93:
         cd:64:53:d9:db:c9:68:7b:eb:69:26:9f:5e:a5:d0:b8:33:1f:
         87:eb:6f:38:b7:61:36:e3:19:ac:b8:68:d8:3b:c9:4f:b9:67:
         89:82:5a:74:25:07:eb:2d:aa:78:d3:3d:d3:bf:df:59:5c:fa:
         21:ab:e2:1b:16:31:a6:d0:8b:67:a9:89:36:00:ae:53:ff:bd:
         88:36:57:6a:bf:61:d8:f1:a0:98:f0:97:cf:c2:73:36:2e:b3:
         b6:e1:e3:3a:49:bd:f7:14:cb:41:de:a9:cf:65:d2:91:41:e9:
         39:dd:55:77:85:3f:14:90:85:91:39:58:8b:d7:e3:78:ba:19:
         97:54:14:77:12:34:fa:d1:76:e9:dc:bc:68:bb:eb:b5:29:a5:
         48:e3:f7:a4:da:d6:8c:cf:95:2f:c4:34:ca:cd:0f:cf:f0:67:
         f2:13:3c:07:e7:92:7b:7b:b5:b6:2f:44:07:51:10:77:03:36:
         76:63:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:05 2026 by rpki-client