This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          lXrcQId30t1iUv5m8sQGtOsVSUDGLXZ5ZNqIUCn6xc0=
Subject key identifier:   51:8F:4F:4E:27:59:6A:65:BD:69:9D:04:8B:A6:60:1A:94:F7:EE:6A
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       019C43226A647DF76E48B3D500B13FB400B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          1716
Signing time:             Mon 09 Feb 2026 16:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:54 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: sVqvYSkYIZF4oZDO+Eol+IzcwAvpwNdK4ZFVM8gqC2o=)
                          2: OkVoScbKIL9TXKvP438rB5FRYb0.roa (hash: 45VM0zyf0tTbWI+Pen84q/pMakzdNZmUXMwDebqNLz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:6a:64:7d:f7:6e:48:b3:d5:00:b1:3f:b4:00:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Feb  9 16:00:54 2026 GMT
            Not After : Feb 10 16:00:54 2026 GMT
        Subject: CN=518f4f4e27596a65bd699d048ba6601a94f7ee6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:3c:fd:9f:c3:9e:8a:7f:f2:0e:97:9d:da:
                    65:d3:72:7d:45:d7:b6:c7:d0:03:53:5e:39:c8:80:
                    db:83:da:26:ed:ef:e5:b9:a2:c8:b9:3b:b4:16:fe:
                    32:29:9d:f8:2d:c6:27:ce:f0:62:be:82:71:c7:be:
                    ff:28:8b:41:bb:13:0c:88:40:25:77:f2:e9:cb:fa:
                    93:e4:14:94:ba:85:b3:ff:43:2a:b5:9e:b0:89:03:
                    c2:cd:61:d9:6c:c0:b8:8a:2a:f1:63:84:9b:a5:c0:
                    97:df:a4:65:35:3d:6d:d8:f6:ba:c8:f8:6e:01:fa:
                    a3:ab:dc:74:81:11:22:74:87:4f:cc:e4:ca:06:d3:
                    f4:f3:d8:2d:12:ae:c6:49:c3:e0:40:f7:e1:7d:9d:
                    ee:96:3b:dd:53:9c:31:d7:b9:f9:56:c4:9e:35:96:
                    79:36:ce:ac:48:08:40:50:9c:11:82:c5:40:a2:69:
                    ba:5d:69:0b:4d:17:b2:0d:a4:76:46:1e:9e:17:63:
                    df:a8:df:76:31:f4:47:bd:b1:01:ea:81:93:ee:43:
                    e5:af:7c:df:23:e6:4c:0a:ef:2d:73:55:df:62:b2:
                    83:07:f0:7e:d6:f0:45:e0:54:6f:a7:77:97:f4:94:
                    ec:c8:ab:c3:bb:76:fb:6d:b0:ca:4c:b8:d9:27:0e:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8F:4F:4E:27:59:6A:65:BD:69:9D:04:8B:A6:60:1A:94:F7:EE:6A
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8c:8a:13:a8:16:18:7a:1b:f4:6a:c1:8a:3e:7e:5c:e6:f3:
         5b:5c:9a:c8:e5:8c:2e:19:27:ee:6c:dd:9f:05:48:59:58:73:
         60:21:92:ea:82:e8:89:11:4a:92:e9:10:bd:41:60:a8:45:ae:
         62:1b:5d:07:2b:65:c8:79:f1:1d:d7:35:f5:5a:7e:f9:20:b3:
         b5:63:47:f9:fc:aa:87:8d:e6:fd:2f:8b:72:e5:b1:6e:c8:f6:
         12:82:a6:fc:7c:8e:ca:a7:b3:46:74:2f:d4:f4:9e:ce:3a:97:
         64:30:45:09:64:67:e5:1a:9c:3c:34:39:41:3d:71:d2:7f:a6:
         1d:6b:f3:52:15:c5:a9:9d:4d:eb:19:2e:b2:e3:0e:41:ce:49:
         82:54:11:64:9d:2e:77:ed:69:d8:89:98:b9:3d:9f:e3:6d:4d:
         5c:b8:25:36:39:3a:b9:b0:74:a8:00:b2:87:f4:34:87:9b:03:
         d4:51:17:34:c9:0f:d8:8b:b8:10:bd:51:01:89:e0:25:ad:08:
         b0:1e:ba:80:f0:17:f2:3f:26:67:58:67:f5:c5:48:7f:26:a5:
         f1:84:68:17:db:63:5d:81:99:ae:ac:0e:84:2c:15:81:36:e4:
         93:c4:cd:d6:7e:77:87:44:ab:42:d7:ba:69:b4:ef:81:85:54:
         9b:11:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:20 2026 by rpki-client