This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File:                     r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier:          W5sfimQXZ5WJyXKN5oqzdMXZr7VF74FYj9Jme/MCsQo=
Subject key identifier:   90:CF:3C:23:67:93:68:E2:14:E3:01:5C:51:DF:52:25:7A:6A:59:32
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer:       /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial:       019C435932371F2A3E51B168A25F9E307005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number:          1645
Signing time:             Mon 09 Feb 2026 17:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:44 +0000
Files and hashes:         1: 0ykmxKOOl5dHUUQwXHBEx0WT__8.roa (hash: JpgTwOTaW0S87I0vPC5sLuBOPNryUr/2k4talsuIf+k=)
                          2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: 3KMMSLPER1Cdt9SeLtnMIiFMLzr9Hla54lLi+3NhCo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:32:37:1f:2a:3e:51:b1:68:a2:5f:9e:30:70:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
        Validity
            Not Before: Feb  9 17:00:44 2026 GMT
            Not After : Feb 10 17:00:44 2026 GMT
        Subject: CN=90cf3c23679368e214e3015c51df52257a6a5932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:db:44:20:56:58:06:41:ed:5e:10:bf:70:
                    f7:50:72:ec:bf:43:99:ae:ab:9e:3f:bf:6c:cf:68:
                    dd:3a:ae:e6:d0:6b:28:4a:be:b1:df:77:6c:09:f1:
                    9d:ce:95:e9:1a:c9:78:25:d8:33:7a:f4:14:2d:70:
                    b6:4b:32:0e:1c:80:5f:9e:1c:46:9e:9e:73:83:e4:
                    a2:dc:ba:b2:b4:d7:49:b4:7f:4b:19:cc:00:dd:f6:
                    1f:c9:07:db:70:e4:ed:50:8f:b5:d6:62:d4:d4:7b:
                    e8:68:76:4d:f7:0b:22:b0:c9:7c:a8:06:73:46:86:
                    17:89:3f:7c:ce:5a:a7:51:e2:26:f8:59:ba:2d:b3:
                    7b:79:31:8a:9a:91:a6:f6:a1:f8:69:b0:31:a0:e5:
                    23:a6:1e:bc:c5:8b:49:47:c8:15:c3:35:dd:ec:cc:
                    80:26:f9:e3:b5:51:59:8b:45:c8:1a:3f:99:09:c1:
                    bd:23:cb:3a:a0:bb:5c:0b:20:d8:4d:db:d2:33:b5:
                    67:72:c8:01:b2:24:76:7e:9c:90:a2:21:87:86:04:
                    db:02:06:e9:00:6e:2a:f5:81:c8:15:02:a6:38:e6:
                    68:33:a8:19:12:6d:24:96:8c:a3:bc:93:3a:fb:ed:
                    0e:d3:4d:40:c7:77:b4:d1:4a:8f:71:70:1d:a0:ad:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CF:3C:23:67:93:68:E2:14:E3:01:5C:51:DF:52:25:7A:6A:59:32
            X509v3 Authority Key Identifier:
                keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:49:f4:da:8a:a4:b7:c3:37:93:24:69:53:7d:40:02:ed:
         bc:f3:50:b1:c9:72:cb:3b:82:c6:c5:cc:27:b7:cb:16:0b:88:
         d3:08:65:d6:07:a2:84:c4:5d:9e:b9:d9:ea:77:53:9f:ca:ed:
         5f:69:65:93:df:3e:a5:cc:53:09:5a:8a:09:23:35:61:da:6a:
         60:97:4c:28:72:19:00:b7:ae:d8:4e:d7:4a:db:00:7d:3b:bf:
         f2:b3:09:72:71:2b:43:a8:2a:81:67:6e:06:aa:1f:f4:41:7a:
         d2:94:4e:b4:36:fb:3f:cd:f0:b9:a9:a1:37:89:a3:e9:35:8e:
         8e:30:fa:86:dd:f2:b6:2a:57:77:03:f6:3b:ff:76:e6:30:70:
         6b:80:4e:6b:bd:ee:7f:01:27:29:66:4a:7c:65:97:8b:cf:a3:
         a7:1b:cb:c4:ce:90:3a:46:c5:62:56:f5:3a:b0:d8:94:dd:da:
         27:c9:90:d1:93:fa:06:92:16:00:df:43:b8:58:78:3a:93:b0:
         bf:fc:aa:a0:52:67:6f:ef:a9:ed:d0:36:2d:d3:6b:31:72:be:
         0b:85:ac:8b:f0:45:18:27:e9:d4:1d:cd:4b:fd:02:7f:8d:f1:
         e7:c8:4b:74:86:70:4d:3f:d2:9d:79:f4:8d:e7:d9:cc:b0:e5:
         58:49:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:55 2026 by rpki-client