This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File:                     S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier:          ozkGm8YeapwFJoto6ebF50gWiw5wM7g3XB8j5hqHMzY=
Subject key identifier:   55:86:28:F5:17:96:61:F4:5C:AF:7F:16:BF:F3:7B:47:49:D4:44:BB
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer:       /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial:       019C4321CD0E97B5A2C572DE5C45DDFA0CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number:          03D6
Signing time:             Mon 09 Feb 2026 16:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:14 +0000
Files and hashes:         1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
                          2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: ofNgYofwH1xsxA2aPj+kslCBrrTkBzOhEXJ6EHZ/eb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:cd:0e:97:b5:a2:c5:72:de:5c:45:dd:fa:0c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
        Validity
            Not Before: Feb  9 16:00:14 2026 GMT
            Not After : Feb 10 16:00:14 2026 GMT
        Subject: CN=558628f5179661f45caf7f16bff37b4749d444bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:15:93:60:6f:48:05:a5:14:fc:fb:0d:49:
                    fa:23:ac:6c:53:17:c7:97:58:3a:74:47:70:61:ea:
                    99:98:cc:f3:f1:a9:f0:c1:ce:ae:87:5d:93:23:3a:
                    93:3e:cd:74:05:eb:ba:40:fb:ab:de:40:08:72:ae:
                    e1:63:52:13:39:10:04:aa:5c:da:e0:71:e9:e9:fe:
                    46:a0:b7:72:7a:12:f0:22:52:e7:15:72:3f:02:18:
                    61:df:ca:16:38:f9:82:e2:35:57:4d:1f:02:17:ff:
                    90:e4:01:80:8c:06:aa:ea:23:b3:a1:78:87:30:a3:
                    e8:b1:49:ab:0a:6a:66:b5:4a:9c:21:ed:62:a7:d6:
                    91:c6:06:7d:7e:f5:90:ec:90:52:52:2a:e4:84:99:
                    ea:a4:ce:ea:b0:36:81:48:24:c9:fe:f0:d1:67:20:
                    08:8b:b3:0e:fe:ee:e2:97:c5:da:75:a2:5c:37:c1:
                    be:96:94:fe:3a:5f:ec:48:86:68:ba:83:d4:f0:97:
                    9d:31:4a:1f:7d:37:3e:ae:df:03:f8:df:e8:1f:54:
                    1a:5f:2f:7a:07:3c:96:17:4d:db:6f:41:11:4c:63:
                    da:36:b9:22:cf:cd:8e:62:22:fb:7e:a5:39:c2:75:
                    7a:ef:70:f5:79:f9:ec:c2:78:a2:ae:6f:9d:ee:05:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:28:F5:17:96:61:F4:5C:AF:7F:16:BF:F3:7B:47:49:D4:44:BB
            X509v3 Authority Key Identifier:
                keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:cd:24:6d:2b:a8:7b:3c:a0:45:82:c7:42:97:1a:ff:81:
         19:9b:18:4b:05:b9:aa:83:ca:a5:5c:26:05:f1:5b:b8:2a:0c:
         39:86:1d:8e:3b:57:09:7d:93:6c:29:28:2f:a0:f3:91:21:01:
         5b:23:d3:e6:2a:90:12:80:f4:62:ce:6e:2d:ff:0a:33:ba:06:
         61:63:92:ef:64:af:c9:57:3f:56:1d:6c:5e:ae:8b:d6:52:c6:
         9c:b2:0d:09:8e:44:00:68:d6:5e:91:f2:bb:56:ba:f5:02:31:
         00:bf:82:b6:be:fd:aa:94:6a:92:4f:ac:68:b3:d6:76:11:93:
         a4:8b:ee:a8:5c:1f:dc:d9:01:3a:a7:5d:af:af:19:15:40:b0:
         8d:cb:8d:05:82:c9:93:42:12:72:78:64:4a:85:28:4b:c6:38:
         19:3d:e8:d3:1b:b8:9d:9f:cc:49:ed:f2:cb:83:f0:45:3c:fd:
         e5:8a:ba:98:5e:7e:0e:8b:79:68:a4:52:6a:51:5a:d2:59:d3:
         5e:54:0a:2f:1e:da:b5:f1:ff:e9:6c:f1:3c:88:ac:98:60:09:
         3a:72:a0:91:b2:74:7d:34:fa:d8:3a:31:bf:40:ad:89:23:c7:
         f3:ef:28:9d:b4:89:14:92:bc:1f:79:65:75:57:2b:b4:15:d9:
         4a:bb:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:27 2026 by rpki-client