This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File:                     rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier:          TBkxssH/26PDDRgV4sWXPJW63IdYnIn3UqAWJEF1OxE=
Subject key identifier:   21:90:E2:62:95:50:FC:73:D4:8F:52:33:B3:96:EF:FB:B0:5A:52:48
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer:       /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial:       019C44A2B3DBC091B72955CD86474BA42AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number:          1821
Signing time:             Mon 09 Feb 2026 23:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:39 +0000
Files and hashes:         1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
                          2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
                          3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: p9hTipoJYN0vA4fgCB3ZQEp3yKIRyx+17Q4aKcEPt/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:b3:db:c0:91:b7:29:55:cd:86:47:4b:a4:2a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
        Validity
            Not Before: Feb  9 23:00:39 2026 GMT
            Not After : Feb 10 23:00:39 2026 GMT
        Subject: CN=2190e2629550fc73d48f5233b396effbb05a5248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:ef:0f:a1:76:03:59:de:b1:65:9b:26:5b:
                    f3:52:6e:1b:b8:1f:91:ae:79:ec:2d:3e:07:92:e4:
                    4f:59:6f:b3:9f:5e:50:e1:45:15:f9:7b:f1:0c:7e:
                    5f:54:fe:4d:5c:ba:0f:5b:b0:98:bf:d1:cc:3a:ab:
                    a3:5b:e8:1b:74:98:7d:35:ff:02:68:4a:68:1f:6b:
                    9d:1c:1e:a6:51:27:c3:73:02:3d:d0:67:c7:89:36:
                    cc:2f:3d:95:b0:8f:fa:98:2f:04:51:3e:da:02:22:
                    70:5e:c1:a0:ad:8a:c1:75:9f:08:e5:f2:62:62:8a:
                    fe:1c:06:fa:df:cc:77:78:46:9a:1d:eb:bf:03:67:
                    ed:59:48:1d:70:4a:92:99:b8:2b:fc:f9:8a:86:52:
                    54:94:56:4a:a6:46:f3:83:26:28:17:12:be:0e:00:
                    4c:2a:e3:e9:23:9e:86:f0:a4:a1:b6:2b:72:c8:56:
                    f5:cd:da:61:9a:f3:62:48:4b:e5:b8:9d:88:f7:0f:
                    87:a2:39:50:ea:4e:14:a9:a3:3c:24:76:b1:94:19:
                    2d:5f:1d:08:34:aa:eb:e1:f7:02:fb:17:8a:cd:e8:
                    10:e4:c8:02:27:dd:52:bd:26:61:23:0b:cf:ac:58:
                    70:e8:6d:41:c7:8b:d6:9c:2a:f3:36:5e:7d:b2:06:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:90:E2:62:95:50:FC:73:D4:8F:52:33:B3:96:EF:FB:B0:5A:52:48
            X509v3 Authority Key Identifier:
                keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:39:a1:16:6e:c2:5e:fe:2a:06:62:9c:b0:f0:40:cc:25:61:
         e3:9b:9f:64:e5:cc:63:2b:56:4e:97:3e:f9:f2:ea:94:41:d7:
         d6:79:88:4e:b5:ed:73:5d:4b:01:2d:08:68:60:19:08:a5:ed:
         76:45:79:c4:68:de:4f:ba:10:ee:9b:d8:c4:fd:aa:0b:8a:39:
         dc:58:79:92:17:33:44:04:38:e3:e1:10:c7:a5:34:e5:40:6c:
         47:7d:7f:ac:61:af:12:82:03:78:e8:aa:e1:60:ff:db:dd:d4:
         8c:ce:17:3a:e5:bf:9d:ca:5c:24:ac:14:e3:bb:f1:d6:a2:ec:
         2f:89:6c:c1:9a:cb:61:e2:e3:db:56:1e:b2:80:f4:09:06:c4:
         3b:2d:f3:7b:87:92:f4:52:2d:f8:35:37:71:7d:ef:f3:f8:1c:
         9e:59:27:f8:1d:5a:38:70:4e:81:9c:b2:17:18:16:be:90:cd:
         bd:0e:5f:dd:04:0d:3c:58:c9:81:2e:98:b0:f4:73:74:42:f0:
         26:72:5d:af:af:5d:a5:67:af:42:03:62:94:47:a3:82:32:d7:
         ec:e5:bb:fe:70:fb:3d:b5:4b:11:92:87:69:bd:33:cd:87:6d:
         45:21:31:59:2d:c5:73:83:15:30:b9:61:d3:34:7a:2c:af:d9:
         88:be:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:31 2026 by rpki-client