This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File:                     1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier:          baRJV+xeKCycFCUT6jxcTeCtDWD1P/DPk/pSYKsSk5w=
Subject key identifier:   F4:55:D6:7E:22:19:89:C6:A6:FF:8F:2F:D7:E3:70:8B:72:6B:6C:8F
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer:       /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial:       019C4246C277F390B6ACAFD5C91B8F7F4414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 12:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:59 +0000
Files and hashes:         1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: kYXmmz82RsHlWgRiNGapX/gIsZ4ICLAgxF85MgF1eH4=)
                          2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:c2:77:f3:90:b6:ac:af:d5:c9:1b:8f:7f:44:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
        Validity
            Not Before: Feb  9 12:00:59 2026 GMT
            Not After : Feb 10 12:00:59 2026 GMT
        Subject: CN=f455d67e221989c6a6ff8f2fd7e3708b726b6c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:4e:57:f5:fe:de:4c:b8:44:3f:6b:dc:c3:
                    27:ca:7b:56:0d:bf:9b:fd:13:0d:82:e8:d6:45:5b:
                    51:95:85:01:60:d5:5b:83:7f:15:9e:a2:ef:0e:62:
                    92:3f:d0:92:df:d2:64:2d:ae:1f:71:fc:1f:6c:7f:
                    54:95:de:27:3f:31:6b:ea:95:10:66:b0:f4:78:29:
                    5a:ea:e2:36:ae:a3:6e:85:83:d7:52:97:3f:4b:cb:
                    2e:e3:34:5a:9e:95:2f:e9:8b:b3:9d:6f:cb:11:14:
                    ef:4b:66:3e:3b:5a:0f:ca:b0:28:86:22:7d:39:a2:
                    33:dd:31:d3:53:11:ec:e5:40:c1:e8:66:0c:c4:c5:
                    c2:3a:f1:4b:fa:94:df:df:be:93:c0:23:f2:c1:7b:
                    08:3c:41:5f:a9:4d:64:d2:e5:5d:36:3f:04:b4:de:
                    b6:28:0b:e7:1b:f4:7e:17:8b:06:b9:f3:bf:d6:15:
                    f2:4d:c1:e2:e3:8f:60:a4:a5:46:5e:ee:9e:86:9d:
                    a1:1c:34:56:4d:96:96:50:bf:5b:34:ed:09:bb:8b:
                    db:86:b8:ed:07:77:c5:8f:f2:75:e3:fc:ad:d2:22:
                    a4:bc:72:81:88:34:04:96:10:0c:52:46:88:10:a8:
                    b3:f8:94:4d:fc:7d:44:61:2d:e3:97:89:b4:e6:d8:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:55:D6:7E:22:19:89:C6:A6:FF:8F:2F:D7:E3:70:8B:72:6B:6C:8F
            X509v3 Authority Key Identifier:
                keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:fc:1a:52:a7:de:2c:88:cc:31:0d:7a:56:e6:2b:bb:0e:
         bd:2f:27:26:17:ce:98:b3:ab:84:77:43:d3:88:5c:8b:35:df:
         79:9e:6b:be:32:b5:5b:41:6b:c6:e7:41:61:4f:55:ec:0f:b6:
         34:5b:84:77:6f:6d:2a:5a:0a:17:d7:31:c3:41:e7:9f:3c:6c:
         30:4a:83:cf:69:8c:08:9c:1e:03:0b:2e:19:92:e3:eb:47:73:
         d7:39:78:af:b6:1d:a8:63:77:d1:f3:6b:b2:bc:c8:1a:f0:a0:
         2e:a0:24:9b:d9:ba:f6:0a:97:9b:c3:a9:99:aa:fe:98:f8:52:
         29:66:39:a1:ac:35:c1:31:43:6e:e9:41:3f:82:80:22:fc:e9:
         b5:68:32:10:47:db:8b:14:71:3a:0a:27:4f:78:32:3a:d2:72:
         20:bb:e3:3a:8c:72:42:9d:a7:15:a5:52:6f:8b:83:85:ee:b4:
         24:1d:7a:ae:bc:5f:99:9b:32:4e:b5:c9:26:44:45:fd:ad:7a:
         ca:c5:c3:1a:bc:72:c0:7f:0c:78:34:39:3a:73:e4:b8:9a:53:
         20:6d:f7:30:cb:b5:95:4d:62:a5:27:43:fb:b9:8d:77:28:2d:
         bd:d1:97:ee:64:de:c7:98:e1:c0:e6:81:5e:72:49:1a:62:28:
         05:c9:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:40 2026 by rpki-client