This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          lSg+UhAgq/vcRnq4so3peN0nhkZUrFPN29ZZMJEUfB0=
Subject key identifier:   CF:06:42:88:FF:02:36:87:B7:C3:9F:9C:F6:72:FB:B6:00:B9:B1:93
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       019C41D86499CDC5F008CB97551C0BAAE45E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 10:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:26 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: DCyP0+PcfDZac/xpOvrOqSil0kZChibk1a9g/VRoyoc=)
                          2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:64:99:cd:c5:f0:08:cb:97:55:1c:0b:aa:e4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: Feb  9 10:00:26 2026 GMT
            Not After : Feb 10 10:00:26 2026 GMT
        Subject: CN=cf064288ff023687b7c39f9cf672fbb600b9b193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:c0:62:d8:e0:17:85:f2:e4:2c:2a:34:0d:
                    ef:ea:15:2e:86:3b:73:45:d3:e7:f3:2c:d3:71:1a:
                    d6:bb:7f:75:06:80:6f:10:c8:16:16:cb:2d:d7:56:
                    61:f8:3f:f1:07:e3:ce:08:55:18:e3:ba:f5:a0:1c:
                    67:2c:c2:c1:fd:0c:86:38:29:59:f0:bc:2b:e6:3f:
                    6e:1e:da:84:87:83:f2:4f:1a:a8:67:97:4e:f0:44:
                    fc:20:7c:ab:a1:98:ff:b5:a9:fd:ae:56:dd:02:6c:
                    9c:77:87:34:f4:2a:b4:3c:9c:8c:d7:58:f1:45:8b:
                    1b:68:6c:67:b1:91:6e:d6:1a:8a:d5:1b:05:ac:33:
                    25:ed:d8:08:08:7e:53:82:e6:71:30:78:97:7c:82:
                    01:9e:b3:2b:a1:da:fd:45:62:8e:b4:20:ad:e8:20:
                    28:f6:50:39:1e:54:21:81:fb:c0:86:a7:ed:e1:be:
                    37:b4:97:39:73:8b:06:f6:2d:eb:22:2c:81:05:6a:
                    99:af:13:ef:4d:18:ad:37:2f:a2:85:48:c4:f0:c2:
                    22:d3:65:e8:ab:0c:51:0b:a6:11:2e:7d:f6:b7:ad:
                    8b:e8:7e:b7:9b:54:92:d9:9d:3d:ce:c8:7a:89:7d:
                    86:bc:35:23:02:69:7d:fd:ea:25:e3:1f:1f:6c:b9:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:06:42:88:FF:02:36:87:B7:C3:9F:9C:F6:72:FB:B6:00:B9:B1:93
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:4f:5a:83:c0:64:73:f0:fb:45:6c:1e:d2:d2:9e:4c:9a:
         d7:23:70:a4:dd:70:a9:c2:fa:de:21:5b:36:4b:a0:53:99:cd:
         72:64:ae:67:00:33:2c:d7:b7:0d:51:14:0f:31:06:d8:c8:f8:
         c0:21:58:f2:cc:ad:f6:b1:59:78:1f:0f:ac:05:23:0b:ca:b0:
         6b:34:36:cf:f8:0b:b6:25:b4:44:af:ef:db:95:70:5a:2c:00:
         26:53:4b:fe:c5:af:8b:dd:e9:45:e9:e3:e4:6a:be:d3:90:a0:
         44:b8:c2:d2:1c:87:ad:d1:84:52:a0:4f:d3:62:bd:6e:da:b7:
         05:b1:96:a6:b5:40:a9:49:84:14:1a:b7:ac:9a:a3:db:ff:08:
         77:33:9a:55:52:6d:95:7e:aa:e5:57:07:d1:7a:a2:df:22:d3:
         3e:62:c4:70:48:5a:94:e5:35:13:29:45:4a:1b:80:7e:cf:10:
         38:da:fb:b5:2c:2e:ae:97:9e:b6:dd:47:cf:f4:71:e4:cf:e8:
         3f:fc:86:d8:c3:80:1b:71:3b:81:eb:93:af:5d:a9:35:b8:02:
         97:e3:95:41:59:b4:04:14:cd:d8:62:4d:e3:dc:1b:91:ff:5c:
         06:d1:72:e6:f9:ae:c1:ae:74:1a:b1:19:01:ab:a4:8f:e6:42:
         de:a1:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:19 2026 by rpki-client