This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File:                     pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier:          QpeZIFLSb1yZ2yg2fzEK/Shh8oCGCuUnqQyHVAFDTRY=
Subject key identifier:   34:52:D6:A5:26:FA:8F:2D:30:25:AA:24:AF:03:8D:81:92:8C:AB:E0
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer:       /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial:       019C4358E29D2915E1FD1C7B384D7AFCDC97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 17:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:24 +0000
Files and hashes:         1: lI1XK5SZ4unF2gsULOFdifpJAaI.roa (hash: rfS2OFj3wmP/4G5TYdNqf/vwvU8JRB0c9MwtD5rUi20=)
                          2: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: i0a7g/hki9oRynzrMYgILJlBUMyjyd82jKWVevJnncM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:e2:9d:29:15:e1:fd:1c:7b:38:4d:7a:fc:dc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
        Validity
            Not Before: Feb  9 17:00:24 2026 GMT
            Not After : Feb 10 17:00:24 2026 GMT
        Subject: CN=3452d6a526fa8f2d3025aa24af038d81928cabe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b1:db:5e:93:93:1f:24:da:85:60:22:9f:70:
                    03:24:31:f1:f6:9d:f6:77:94:0e:1b:b1:31:8b:04:
                    5b:e9:66:59:67:48:c2:98:11:de:ea:02:65:01:d9:
                    5b:0d:bf:a9:dc:7b:e5:8b:be:2a:22:88:4b:3f:7b:
                    a4:7a:49:b9:15:8d:db:32:aa:7a:06:b3:7c:48:7b:
                    9d:61:9b:11:73:56:2e:61:97:8c:53:65:12:00:ab:
                    78:84:6b:ed:cf:1b:2b:c0:24:31:fc:20:ce:7e:b8:
                    3d:b7:92:19:d3:cc:b5:f7:d7:5f:9e:17:76:cf:78:
                    4b:4c:26:2c:58:fc:63:ff:7e:3d:1e:e5:dd:31:99:
                    86:07:2e:ee:2d:b9:94:c8:be:b6:7e:9a:3d:95:77:
                    e4:63:a4:a1:90:e5:1b:43:4f:88:fd:3b:ec:27:2d:
                    06:fd:b2:a0:3e:1d:dd:20:24:44:8e:d0:3d:2f:6c:
                    57:7d:46:69:a6:63:dd:a3:1c:9f:b1:b6:3c:f6:c9:
                    92:62:d0:96:28:f3:fa:a1:3e:79:a9:aa:03:5e:08:
                    a5:49:33:0a:ba:90:e4:a6:e2:70:35:91:a3:08:93:
                    06:e7:83:2d:1a:58:7d:2e:da:2f:bc:f4:8a:d0:75:
                    03:b8:32:4e:f4:06:93:8c:21:09:81:70:d8:21:c7:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:D6:A5:26:FA:8F:2D:30:25:AA:24:AF:03:8D:81:92:8C:AB:E0
            X509v3 Authority Key Identifier:
                keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:74:93:7f:ef:0b:ab:5c:13:ae:7f:8f:de:ef:f2:8d:6a:35:
         06:14:a9:09:a3:06:27:7c:cf:89:a2:10:c7:12:60:a3:9a:9d:
         62:83:c3:b0:be:e9:c6:50:63:57:d1:79:62:8d:6a:48:9b:d3:
         55:c9:0b:e3:10:84:3a:57:a5:56:51:4e:b4:8d:d5:79:2f:58:
         b5:f5:c2:37:c0:c3:b8:63:f6:b0:fe:8c:78:f7:4f:17:ab:10:
         da:9a:c1:d2:78:de:12:d7:14:89:e1:0d:1b:bd:01:e9:24:4f:
         c9:d1:27:48:a9:34:3c:89:ec:1c:00:f5:84:a7:84:ce:02:8e:
         a2:b0:63:8b:b4:82:ea:a5:27:d6:64:2a:26:a1:f3:ab:e2:83:
         d1:1b:c4:1a:12:3d:af:06:12:0a:1c:73:e2:df:16:14:33:d7:
         9f:fe:ca:ee:25:92:07:30:9e:8f:7f:36:6d:c2:d2:c3:f0:82:
         46:88:83:7c:1f:67:d2:31:a6:b2:3d:b6:03:81:a8:7d:52:68:
         78:f3:18:fe:89:70:12:dc:81:c5:65:67:6e:c6:1c:c7:60:a0:
         69:7d:39:46:68:a6:ee:da:5d:f2:10:b9:b7:6a:1e:71:87:3d:
         19:05:ed:02:79:15:36:71:4f:d6:7d:3c:4f:67:9f:6b:8e:fc:
         f9:da:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:43 2026 by rpki-client