This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          xgZahzEMw5ahmc2ERggFLWoD5VIaYl6KxvwovK5aR68=
Subject key identifier:   FE:01:9C:C6:7C:5C:BF:55:B8:0B:FE:BD:8C:FF:D5:34:04:D7:15:3E
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       019C43C6BB59541211E73AEBC79D3975F686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          182C
Signing time:             Mon 09 Feb 2026 19:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:23 +0000
Files and hashes:         1: 1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa (hash: a7NHnkscG6OzvwBm8NXSANt6871rXlNEhgTw4CrzMQc=)
                          2: MH0ePkGiqUNJj92Th9uz7ESBLuY.roa (hash: zEMC++4x++17MQ2QaYX26EoR6rGR9XCEMskuWanLEDo=)
                          3: ZSy9I3udyb1w0usAvKavWUhYUuM.roa (hash: NjrlIizcsmC5vnXJgYJk87Yv2k+U89uwtXh718Ex2Oo=)
                          4: lilRXnQbhAs_T-urB33KZ2t0KZQ.roa (hash: U6hwfDfpC6+pNA9h6WSEbMtCWXO/blanxBm4f8SHiVE=)
                          5: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: JzWRrjQuWLr9+YgsTZgksTVk8Jrno26MastIKcFyGEE=)
                          6: tuG24J3SCaxCp3xkTMrp57IukyI.roa (hash: 2UNOtiS4R8FVRuf7P5K4AtMmWWynD7w5WiOfGAPQFcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:bb:59:54:12:11:e7:3a:eb:c7:9d:39:75:f6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Feb  9 19:00:23 2026 GMT
            Not After : Feb 10 19:00:23 2026 GMT
        Subject: CN=fe019cc67c5cbf55b80bfebd8cffd53404d7153e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:90:81:30:9f:ab:e2:7b:dc:48:fb:27:81:
                    18:28:03:1a:f0:49:f9:68:d7:33:03:c5:e2:0d:a9:
                    74:10:92:53:d9:07:ff:15:9e:35:ef:01:75:15:42:
                    42:f4:87:96:6b:dd:7d:6d:c8:08:a2:0a:c1:a9:e4:
                    6e:60:87:43:83:28:b7:4b:f9:1b:5f:02:95:bd:d3:
                    85:29:29:3e:82:8e:83:cf:9a:f2:4c:ce:ff:55:1e:
                    54:83:b9:92:e6:77:6c:f0:6a:85:70:07:7b:1c:6f:
                    19:46:51:ec:61:b4:3e:ec:43:73:aa:5a:08:c6:54:
                    37:88:15:88:4b:db:43:e1:bf:2d:e1:18:1c:f8:25:
                    d3:47:15:6e:f0:70:37:4b:0f:a4:d4:17:0f:80:69:
                    1c:7c:85:55:19:65:27:84:f6:7e:58:43:f6:8f:1a:
                    dd:6d:15:5f:2d:cd:ba:fe:e0:31:16:94:02:98:54:
                    c9:33:87:ad:66:6a:88:6a:4d:70:f5:db:26:6c:ae:
                    e1:7e:00:96:3d:45:ea:0c:ed:fc:e9:34:12:fe:c0:
                    bd:a8:8b:26:0b:2e:df:4d:ac:7e:eb:bb:c6:cf:ad:
                    f9:51:f8:03:a5:12:f2:66:4e:48:84:48:9e:ad:50:
                    ff:51:5b:22:10:02:5a:9c:94:2b:c7:a7:ec:fb:21:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:01:9C:C6:7C:5C:BF:55:B8:0B:FE:BD:8C:FF:D5:34:04:D7:15:3E
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:5c:46:3b:a8:40:42:e8:62:95:af:75:41:65:17:60:9c:
         e7:21:b0:fb:fc:48:f8:33:48:59:82:31:d2:30:ef:41:5b:ac:
         f6:03:59:24:aa:09:5b:c7:07:23:78:15:a7:37:a3:d9:7e:11:
         ed:4c:a1:60:1e:78:fc:32:5b:35:15:02:f4:1f:ea:5a:aa:9c:
         b7:2b:d2:85:3a:0f:32:c2:cb:31:9f:22:6c:7c:35:ab:45:28:
         14:fb:71:ec:e0:63:f6:bc:c1:26:38:0a:d5:19:ce:b1:c0:e8:
         5c:c8:86:fe:6b:69:c0:85:63:7d:be:f0:35:35:c4:c0:06:c2:
         f7:b3:b7:9d:10:90:43:37:b6:d8:9e:f3:70:2c:5b:17:5b:d6:
         22:dc:1e:74:c0:61:5b:1d:03:5a:4c:5d:87:7e:7d:2c:de:1c:
         43:7b:c7:2e:3a:1a:d7:9e:66:4f:0a:ae:5a:6a:40:bc:07:b1:
         97:dc:eb:e9:9c:29:e7:f0:47:96:d5:f2:d3:e7:b8:3b:5c:dd:
         7a:ae:d0:93:11:82:58:84:f3:cd:ee:5b:38:9f:1e:83:12:90:
         90:f0:9c:dc:2c:c7:60:3d:f3:8b:8d:8f:1c:9d:01:ac:56:48:
         35:30:2a:c5:fa:65:77:7e:e9:fc:e7:92:0b:9e:0d:8b:e7:71:
         f1:82:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:17 2026 by rpki-client