This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File:                     MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier:          D5o7EQjJNu1CUXROxu3OeNLVuqhV0sIq0lp3jJy96I8=
Subject key identifier:   51:33:C1:B5:B9:27:08:E6:FD:D0:93:11:E1:1F:1A:E4:F4:E1:81:10
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer:       /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial:       019C44347B8E0E1FE6345C5393135FB0C954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number:          0F85
Signing time:             Mon 09 Feb 2026 21:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:15 +0000
Files and hashes:         1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: drzhRRe7Lehv0kz8nYRxnJniSKASJWDSN0338W7cIZs=)
                          2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:7b:8e:0e:1f:e6:34:5c:53:93:13:5f:b0:c9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
        Validity
            Not Before: Feb  9 21:00:15 2026 GMT
            Not After : Feb 10 21:00:15 2026 GMT
        Subject: CN=5133c1b5b92708e6fdd09311e11f1ae4f4e18110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:79:e5:cf:b8:1c:97:63:ef:3f:12:e4:6f:
                    55:30:b9:79:ca:ac:7e:5b:4e:b3:b0:77:2f:63:dd:
                    d5:45:a1:08:51:7e:0a:83:48:2a:42:01:e0:ca:9f:
                    4c:70:34:43:0a:a5:c0:b7:65:fe:dd:ed:f1:26:7a:
                    ba:14:e2:8a:33:ad:fc:1c:e7:14:d4:2b:c2:d1:13:
                    27:b2:2b:28:1a:1e:58:bf:1e:fc:23:37:17:62:e2:
                    4e:f5:5b:81:be:8e:3e:2a:bb:5f:65:7c:5d:fc:29:
                    d1:b3:fc:3e:7e:d9:ca:fa:34:41:4a:17:ca:eb:c7:
                    9a:c3:eb:cc:15:37:e4:32:88:9f:6c:9f:60:dc:0b:
                    ea:8e:68:f3:c5:b6:22:58:75:fe:0c:63:54:b1:b3:
                    f6:b6:b0:f8:4d:51:48:e4:27:7a:44:cc:64:a6:67:
                    9f:b0:67:56:80:a1:60:2e:e2:67:01:1f:f3:10:96:
                    59:e3:20:18:6a:94:ce:df:a9:40:08:78:1f:3e:a0:
                    38:98:ad:d8:0f:49:fa:5e:58:fe:9e:5d:be:34:84:
                    3e:0c:45:d7:51:6a:c5:4f:c5:7b:92:77:6e:a8:8a:
                    eb:8c:5e:de:bd:f9:1d:2e:4c:78:18:fc:8f:4a:64:
                    39:0b:13:2b:d1:2c:01:ae:b1:17:e8:e8:15:90:d4:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:33:C1:B5:B9:27:08:E6:FD:D0:93:11:E1:1F:1A:E4:F4:E1:81:10
            X509v3 Authority Key Identifier:
                keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8f:fd:2c:80:cb:93:ed:c7:60:b8:74:6a:43:73:27:9e:63:
         64:a3:92:7d:25:2b:20:de:41:b0:f9:fc:8c:59:26:1f:13:f4:
         30:d9:90:bc:e2:15:94:25:8d:42:6f:94:c5:fe:96:56:6a:2d:
         48:1d:31:6a:2c:04:db:3d:74:7f:b1:9f:0a:d8:54:af:35:a6:
         ec:4f:21:89:9c:bd:ea:4c:53:c8:58:f5:f1:e4:57:18:03:d2:
         18:53:57:6c:4b:91:7b:a3:df:a3:1d:e5:67:ff:02:36:c7:44:
         cb:d0:22:7b:57:6a:54:d6:21:4e:9c:5d:2e:85:56:26:2c:49:
         4d:b1:1f:b9:c5:d4:ca:e6:3d:8c:76:94:d7:14:2e:10:6b:c9:
         46:f7:d3:9d:8c:ba:5e:f1:47:41:36:01:93:39:91:3e:6e:bf:
         e5:57:8b:74:0d:d9:f7:bd:7f:42:3f:b3:c2:02:62:2c:78:de:
         5e:52:1d:55:6c:ff:d5:28:c3:fb:a1:7b:66:64:85:8b:ce:ce:
         f8:8d:c3:c4:fa:0f:94:55:fc:58:5e:e8:e6:c0:02:aa:2c:95:
         8c:0c:2e:40:10:6a:c2:3e:4e:96:f7:22:11:ee:98:be:b0:cf:
         bd:9b:31:a1:8e:d9:59:05:c3:9c:cc:ed:59:46:ac:b5:e3:55:
         44:a5:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:57 2026 by rpki-client