This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File:                     Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier:          BgyIusGvo62ON4SlrrjfxGEDUsv63WlOzVFb81+E7Xg=
Subject key identifier:   5D:F6:B6:C3:47:2E:9C:71:AD:25:48:07:62:43:78:58:6A:AB:8E:53
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       019C424612798F235E5370BAF66667A4BA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 12:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:14 +0000
Files and hashes:         1: Bzo_d6zW3tj-cs4yT8d3sKOXlfg.roa (hash: sB4IjXQ2q1JliT65t5pMashaLGv9OdpiFjT65GllIOg=)
                          2: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: IEuKTsMXXybfA4mpj7Y8fpNjmd0gasYliO94veEBF2I=)
                          3: E3W4jp5zsoikKWLmA1V7bWlcpV4.roa (hash: YJ9yEvPcrd1MOHEooUf+VZebkz+BFG/oUSCxEMHiKbk=)
                          4: aUScLYE7hWlZLrttrbL09JUvQA0.roa (hash: x+eRx80jxSLOtFgW7pQIqcwn52mE8qpARjfDhLVRoV4=)
                          5: i72bIypIf2CpFKoEg8C1pt-mNRo.roa (hash: IFGCEB1czLr3SQqiMmwkpKpmacuW/s1RIwvjueqrec8=)
                          6: syHsa3UwI7A4E1vFkZMbu6fpkLc.roa (hash: KLgolmeV6tSpGZyB1XkLi7+L/oDApU24VOgy7S5H3dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:12:79:8f:23:5e:53:70:ba:f6:66:67:a4:ba:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Feb  9 12:00:14 2026 GMT
            Not After : Feb 10 12:00:14 2026 GMT
        Subject: CN=5df6b6c3472e9c71ad254807624378586aab8e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:f4:60:1f:82:f6:cc:c9:f6:99:5b:53:8b:
                    de:73:4d:3a:57:ee:52:a4:8a:fb:36:a2:26:dd:02:
                    e4:f0:f3:b5:bc:61:7e:3b:5c:87:c4:54:34:55:84:
                    dc:6d:92:72:77:5e:73:0a:3b:59:50:d4:aa:5a:70:
                    94:e6:be:c9:29:16:a4:d7:22:78:88:5e:8c:0d:c9:
                    35:ad:a7:e6:b3:0b:b7:15:a6:4d:c3:2b:0a:37:f3:
                    39:91:fb:0c:a9:be:a4:44:36:b7:42:8b:f3:09:97:
                    c6:37:54:71:0e:e2:1d:f6:14:cb:31:ca:1f:b3:49:
                    76:09:b5:7a:7f:b2:08:56:05:88:97:9a:65:0b:cb:
                    ec:f8:3d:ea:08:76:6e:6b:5f:0c:96:af:82:a9:07:
                    02:61:93:44:7e:aa:8d:2f:37:a5:22:ff:76:b0:41:
                    47:4e:e0:56:83:7f:89:8a:73:ab:1d:0c:37:d5:02:
                    33:af:b7:55:3d:9e:21:16:e8:95:1b:e5:f9:4f:36:
                    6f:06:f3:ac:d4:7f:36:27:fd:c9:cb:55:22:68:f2:
                    b7:28:b7:1f:dd:07:52:5b:52:7b:3e:52:87:c5:1b:
                    21:32:ca:fa:08:3f:ec:36:cf:65:a9:d3:f3:56:35:
                    39:dc:f9:d7:1b:13:ca:28:f8:32:6e:15:95:e0:5b:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F6:B6:C3:47:2E:9C:71:AD:25:48:07:62:43:78:58:6A:AB:8E:53
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:46:d1:93:a3:8e:66:ef:f7:73:33:5d:b1:1d:99:5e:66:
         73:76:94:dd:9b:d4:14:0c:68:df:3d:d1:d6:32:ae:f8:dd:e1:
         c8:a5:0c:40:4a:1c:22:5b:8a:6b:0f:ef:08:56:d4:1d:fa:f2:
         1b:33:b4:bd:ca:b3:65:0e:81:41:15:1d:c4:0d:e2:07:cc:54:
         a1:e4:fc:98:b8:bd:84:90:0b:59:d1:d5:aa:85:5f:07:b5:a3:
         b2:16:1f:44:1c:80:6d:dc:9a:22:d5:15:ee:13:5e:14:a9:54:
         50:4c:76:04:b6:fd:4e:d6:16:b5:af:2e:74:f9:4a:4e:a0:c9:
         40:75:32:ee:4e:f8:6f:53:93:22:bd:23:a9:8e:cc:b0:f4:40:
         9b:8f:dd:0b:66:b1:14:70:d5:74:38:ab:c8:52:e8:99:64:b1:
         3b:c7:33:49:5b:9d:18:f3:23:d2:b8:40:3f:5a:c2:0f:15:31:
         31:55:7b:a2:d8:6f:8c:22:6e:64:b3:a9:3a:67:e1:cb:5c:ec:
         c2:7f:ca:33:7c:e6:c6:7b:3a:de:17:75:26:5b:32:88:30:9b:
         3a:b3:79:8d:4c:6c:29:47:28:7c:bb:24:9c:4b:ec:bb:45:cd:
         93:33:48:35:32:e6:e5:d8:4a:12:26:bd:9f:7d:cc:2b:ae:cc:
         78:7c:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:17 2026 by rpki-client