This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File:                     ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier:          5ZNZzctDRJfGF0WBINgjKtnqyLg5w3u4+z2Pr14Uaw0=
Subject key identifier:   09:81:6C:03:35:78:57:F0:C8:D9:0A:09:E5:84:23:22:D7:CB:93:90
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer:       /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial:       019C44A2A66D7123D90A6A27A41BB2778406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number:          1819
Signing time:             Mon 09 Feb 2026 23:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:35 +0000
Files and hashes:         1: VcUl-MeV2dO35J7igtql6CHStoQ.roa (hash: FgEXTGiDc3PRCyqi+GhL/fq6GquDlodX0lgQR0+hGik=)
                          2: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: Cr1vhSm894QU5jJ2qIIwHQMsI056BSpTxyfsvSq2ltM=)
                          3: sTc7d5x8YBD8KLckxEqvHWugEvs.roa (hash: jNItrOQqvxzxGGG+k9qCCY318gxGAc4g/td2z1ediFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:a6:6d:71:23:d9:0a:6a:27:a4:1b:b2:77:84:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
        Validity
            Not Before: Feb  9 23:00:35 2026 GMT
            Not After : Feb 10 23:00:35 2026 GMT
        Subject: CN=09816c03357857f0c8d90a09e5842322d7cb9390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:73:2b:12:08:8c:53:54:b9:8f:ba:ff:6f:
                    a1:55:3d:cd:cf:37:c2:ab:4d:43:17:a7:77:04:d5:
                    b0:f8:04:59:3e:17:c7:8a:cb:09:28:67:90:de:de:
                    b9:61:04:f0:fe:ba:ef:e7:86:66:53:22:d6:70:92:
                    a9:7b:76:1a:77:75:7f:a0:73:a9:38:ee:da:a0:18:
                    c3:a4:6d:31:c5:3f:c7:f1:11:e3:1d:52:54:bf:d2:
                    a3:06:36:85:fb:4a:de:93:5a:6e:9c:2e:35:d0:d6:
                    3b:b0:e3:4c:c0:8f:77:f1:61:cb:76:ef:d6:c2:03:
                    ff:bb:57:fb:d3:ac:8e:64:a0:40:16:3f:46:16:d4:
                    8d:ba:ee:33:4a:b3:0c:4f:65:1c:72:a2:59:56:24:
                    f1:71:44:7d:69:41:f3:4d:78:18:69:f2:9b:c6:da:
                    42:3a:1e:52:03:e8:80:74:74:b7:17:5f:d1:88:97:
                    f1:1f:c7:47:49:b4:95:a2:b1:ab:61:b8:e7:0a:34:
                    8c:dc:51:fe:81:01:64:64:3c:3c:57:6e:d5:4c:37:
                    d3:c4:d6:77:94:9f:12:10:b8:5d:06:3e:40:d6:19:
                    be:d6:ea:21:c3:ce:63:aa:77:ae:54:22:6b:4c:24:
                    4b:aa:17:ae:07:33:ed:bc:ab:1f:9d:ec:fb:08:91:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:6C:03:35:78:57:F0:C8:D9:0A:09:E5:84:23:22:D7:CB:93:90
            X509v3 Authority Key Identifier:
                keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:02:f6:b3:7d:e4:7c:92:a8:9c:89:e1:0c:b4:ce:ff:7f:8f:
         a4:c6:e7:f3:29:de:d4:77:89:01:2e:b9:16:e7:3a:86:4d:c0:
         e2:0e:b5:13:89:5c:ae:ee:0a:c8:40:9e:0b:94:2d:d6:d9:1d:
         74:c5:0a:26:d6:a3:96:0c:75:dc:85:cf:7a:b5:f1:c1:c5:55:
         66:c4:83:24:d8:ca:62:4c:95:a0:83:58:70:14:b7:0f:f0:67:
         d1:1d:28:1d:5c:80:36:67:5a:c7:ae:ce:af:fa:1f:e1:03:91:
         5c:19:09:ff:6a:88:6d:de:8b:58:e3:33:96:5b:dc:a2:f5:42:
         f3:f0:b5:51:ca:f8:5b:db:5d:9f:13:f7:4f:6c:81:65:e2:cb:
         2a:b5:5b:6c:c2:56:92:93:fd:94:97:20:ee:c7:b3:5a:1c:77:
         da:17:06:89:7b:44:12:a3:dc:e0:19:7a:94:53:b7:58:fc:66:
         ce:ce:91:e5:91:a2:09:bd:a3:cf:f6:cf:96:d5:35:e7:be:1b:
         d4:56:96:fb:c7:a2:f0:14:6b:0f:7f:bb:d7:d9:cd:1b:d8:7b:
         9d:9e:c8:0a:83:bc:47:5d:b8:bb:15:d3:f4:ec:d6:0c:2b:c5:
         43:05:84:e6:f2:e4:35:e1:34:f0:e6:12:9d:82:ea:2e:85:0a:
         7d:af:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:06 2026 by rpki-client