This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File:                     aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier:          yqowzeUN5Y7QwHMRhiYZtyeJayuSQlC0PQZXRCpJMQ4=
Subject key identifier:   ED:49:58:C2:3A:58:37:46:71:18:E0:CC:E2:FC:6E:28:0F:1F:7F:11
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer:       /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial:       019C41A23C06BBA9FFFCAC0ACC998453834D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number:          1559
Signing time:             Mon 09 Feb 2026 09:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:17 +0000
Files and hashes:         1: Q3icqhJs5qAyA3hER2hkXKmmVkg.roa (hash: Vd3hohE6ub6CWkSKlO/X8MF+gU7dSgWfrpJ+oaxmW9o=)
                          2: RpKFlDqbj29Bav_Lkhu3kyJzzKU.roa (hash: 9GM2BLzn5MHA7HpZGUV7uK2cEDGeWuWkdj2aeKwl3TA=)
                          3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: LGZs2taWO6fyCZMG0rJrJQ590kTbYvLSBCv7g9OY8kQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:3c:06:bb:a9:ff:fc:ac:0a:cc:99:84:53:83:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
        Validity
            Not Before: Feb  9 09:01:17 2026 GMT
            Not After : Feb 10 09:01:17 2026 GMT
        Subject: CN=ed4958c23a5837467118e0cce2fc6e280f1f7f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:47:1c:f5:f1:e1:17:b6:e4:7f:45:76:64:
                    35:6b:69:12:57:24:6b:00:39:55:c3:63:9a:19:62:
                    10:46:dc:4f:df:43:f2:2c:ae:8c:ab:a8:d5:4b:cc:
                    fc:6f:64:21:b8:00:20:f0:8c:81:cd:7e:65:db:bc:
                    cb:f1:2a:79:c6:38:53:fe:5b:76:af:50:2c:e9:a7:
                    63:89:23:5d:9b:96:1f:f6:36:67:aa:f0:98:7d:5d:
                    fa:0a:c8:04:69:e5:bd:11:20:50:f6:ef:d0:b7:3a:
                    c6:5d:07:df:b7:ec:a9:2d:e5:01:8a:80:5f:ae:ad:
                    34:6d:0b:7f:59:5b:2b:9f:a9:ab:67:d9:9a:49:d0:
                    3c:10:70:59:2c:27:ba:d1:eb:bc:be:a6:8c:b8:c6:
                    39:f8:8b:d9:91:27:4d:6f:a9:37:24:3d:17:eb:0c:
                    9b:26:55:55:23:e8:24:6a:0f:a5:55:96:66:fd:c5:
                    2a:d9:2b:5a:d0:5c:d2:a7:51:28:7a:b2:dd:b8:7f:
                    54:c8:6a:ee:5f:e6:f9:55:e4:11:68:95:d2:43:c8:
                    a2:ff:15:b9:4e:21:de:12:0a:cd:94:2d:a3:71:27:
                    85:23:e6:13:9b:b1:0b:bf:2a:a1:bf:d6:07:43:ff:
                    2f:31:54:df:c2:45:f7:d3:45:51:c8:54:a0:0b:fc:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:58:C2:3A:58:37:46:71:18:E0:CC:E2:FC:6E:28:0F:1F:7F:11
            X509v3 Authority Key Identifier:
                keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2c:e0:14:34:8f:2b:1c:76:93:1f:f7:01:6b:16:d9:92:ca:
         af:24:d3:16:47:16:10:ca:88:4c:6e:c9:e8:e8:a8:15:de:69:
         29:d8:03:e2:6b:ab:3f:5a:2e:c7:a1:3d:ba:05:44:64:8c:9c:
         6e:cb:37:6c:09:49:2c:a0:07:59:55:b5:1f:88:f0:2c:b6:50:
         05:19:0e:76:3d:28:27:27:73:fe:1d:79:61:02:20:94:94:7c:
         a6:22:5e:98:c3:69:15:d7:f7:f4:ac:97:43:ec:fc:38:89:73:
         aa:88:77:d8:8e:15:01:a2:41:5a:ad:ef:37:df:c3:9c:83:11:
         5f:54:67:b4:22:82:1f:6c:09:9e:e0:0e:0c:b9:7e:81:ce:ae:
         b4:f0:0b:8d:6c:01:b1:6b:ec:64:05:0f:00:d5:20:7d:25:7f:
         5b:b0:b5:96:f0:9f:7a:ba:d2:bb:02:62:c3:1d:49:e9:2f:54:
         10:fe:37:f4:dc:a9:5d:1f:63:79:ea:a1:0b:8d:c6:59:e4:e9:
         fe:c3:b8:7f:43:12:fd:fb:f6:a2:58:cd:dc:70:12:f0:ae:30:
         53:57:88:f2:79:d9:fc:19:0f:f4:8f:b0:8f:be:1e:26:f7:93:
         e9:b4:01:aa:3c:5f:46:1d:e1:e6:0b:c2:13:de:73:9f:a1:aa:
         ca:0b:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:32 2026 by rpki-client