This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File:                     1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier:          5Z9Q1geu9pVrvPGsDVktbITCW7I4RtaxuH468RZ3rXQ=
Subject key identifier:   31:FF:68:FC:1D:98:68:CE:72:5F:7E:2C:97:B5:A0:04:99:09:62:B6
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer:       /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial:       019C42EB7210F3188E511805D230E0E9659B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number:          133E
Signing time:             Mon 09 Feb 2026 15:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:52 +0000
Files and hashes:         1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 2WaziI7mFA4kqunvLRMDW6NAcho76mouncdgl3u7Asg=)
                          2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:72:10:f3:18:8e:51:18:05:d2:30:e0:e9:65:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
        Validity
            Not Before: Feb  9 15:00:52 2026 GMT
            Not After : Feb 10 15:00:52 2026 GMT
        Subject: CN=31ff68fc1d9868ce725f7e2c97b5a004990962b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:db:29:e9:15:88:a1:64:2e:0e:77:c8:a7:
                    6d:cb:f3:91:25:b2:e8:dd:76:99:82:72:03:20:23:
                    30:31:20:9b:5a:37:f3:3f:27:d9:16:17:10:88:b0:
                    66:85:34:f4:6b:9c:da:db:46:3e:ad:c4:a4:be:c3:
                    7a:7e:29:5b:ca:d0:54:74:b2:d4:aa:ca:e3:4f:58:
                    b5:36:0a:3e:db:c2:8f:8d:9b:68:14:3b:15:9d:58:
                    7f:f2:54:14:5d:e5:f8:7c:f3:03:31:c5:50:8c:d0:
                    cb:21:13:83:9e:9d:46:0b:e4:0a:68:63:6d:86:dd:
                    5d:f3:52:ec:e5:1a:ab:6a:9f:67:92:44:f3:e8:b1:
                    9b:fb:49:04:b8:a8:93:c4:8b:fb:3f:38:60:8a:46:
                    56:93:ff:44:b5:29:5c:35:77:f4:c1:65:b8:7c:bd:
                    ce:2d:41:18:eb:2d:3a:15:88:07:93:e7:8f:8c:65:
                    10:d5:b2:5a:03:22:31:41:4b:97:04:55:96:8a:2e:
                    f0:20:01:26:6f:99:d4:e3:fb:5a:93:dd:2e:87:38:
                    c1:99:6a:04:7e:1e:f1:5e:ae:15:10:4e:b3:1c:da:
                    82:6f:94:8b:b5:64:a1:eb:41:eb:72:9a:3e:49:73:
                    99:e3:7c:16:f2:ba:d9:8c:19:11:7d:3f:c8:e8:24:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:68:FC:1D:98:68:CE:72:5F:7E:2C:97:B5:A0:04:99:09:62:B6
            X509v3 Authority Key Identifier:
                keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:c4:41:8b:44:20:71:e9:5b:4f:57:b9:a1:09:b0:02:2d:
         32:44:d7:20:1c:c1:16:59:55:3a:a0:33:30:93:02:91:bc:5f:
         57:c0:d3:a6:4a:d1:d6:2e:d5:1a:40:0d:0f:61:5e:02:6b:f9:
         99:13:84:a8:09:1b:99:0d:4f:c1:e4:69:0f:6b:32:ca:2d:ad:
         fb:52:d9:ce:d5:14:6d:38:a8:fc:60:3f:80:72:33:05:a0:67:
         e2:6f:f0:49:a5:e8:88:5e:40:16:2b:5f:c0:62:b8:21:1f:48:
         ea:5c:94:fb:f9:d7:58:71:bf:e8:c8:2d:01:76:f9:f7:37:ce:
         e8:84:3a:7e:86:d1:47:43:6f:7d:2e:87:6c:e5:37:bd:74:0e:
         e5:47:80:45:5d:1d:d1:ec:45:46:7a:a9:80:3e:59:7d:70:be:
         4a:60:09:63:14:fc:f6:9d:6a:91:67:a3:4f:4e:fc:6a:e9:24:
         6b:ce:8c:7c:2a:4c:88:e0:1c:bd:85:57:b0:ec:c9:c2:c2:70:
         9e:b5:2f:a6:45:4d:88:2a:a5:e2:7d:6d:65:4a:a2:1a:40:04:
         5d:b3:63:43:72:ab:ce:c1:6e:da:91:d9:0f:77:8c:1f:cf:08:
         6e:f7:d0:ec:e8:f6:d5:de:db:3c:68:cf:92:e4:ea:10:9c:03:
         8e:2d:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:20 2026 by rpki-client