This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
File:                     MmHv5idxJgTzW5rZzL8DaGlfUBM.mft (raw, json)
Hash identifier:          9Wj2Hy2kXLP6wYfdCatZaO4+I0q1ykzPxm9ev9cPBfo=
Subject key identifier:   63:5A:94:7C:A4:24:D5:5F:E9:81:DE:4C:97:22:07:52:8F:83:2A:51
Authority key identifier: 32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13
Certificate issuer:       /CN=3261efe627712604f35b9ad9ccbf0368695f5013
Certificate serial:       019C420FDA896D2AD8C008F6A65ACF07A730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
Manifest number:          0258
Signing time:             Mon 09 Feb 2026 11:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:00 +0000
Files and hashes:         1: AJ4mHcqVQB0Jw29slkc3-EN6ZfQ.roa (hash: jnlgewfbqIp0YBe4Rjalvc6ZdnSouVs+i9ih3ynldlg=)
                          2: MmHv5idxJgTzW5rZzL8DaGlfUBM.crl (hash: C+9wCpDH/s7CjAg9EGzv+Fqc5diDFZJa/f+lXlTsGbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:da:89:6d:2a:d8:c0:08:f6:a6:5a:cf:07:a7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3261efe627712604f35b9ad9ccbf0368695f5013
        Validity
            Not Before: Feb  9 11:01:00 2026 GMT
            Not After : Feb 10 11:01:00 2026 GMT
        Subject: CN=635a947ca424d55fe981de4c972207528f832a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:64:bc:fd:09:54:fa:69:e4:de:fe:c3:b0:
                    2e:c2:02:a5:f4:1f:d1:64:8d:a2:e7:18:a4:69:ea:
                    2f:ce:69:f7:a3:67:f8:ba:97:e8:00:c1:f6:bd:cd:
                    62:27:59:e2:96:db:33:5f:f1:46:fd:da:f6:7c:12:
                    72:81:e1:b5:96:fa:22:1e:95:ec:91:c5:93:3e:67:
                    0e:5b:c3:0b:23:e9:59:e7:92:18:af:b8:22:91:23:
                    e9:04:5f:a8:80:c4:5e:0e:bf:63:ff:4d:e5:3a:5b:
                    2d:30:74:cd:08:5d:10:5c:de:62:0b:81:2c:b4:4e:
                    a7:19:2d:e6:00:b6:8a:b9:5b:80:f3:43:6e:ef:fd:
                    a4:44:1b:59:67:53:19:d9:b2:57:08:07:f6:7d:5c:
                    6e:63:dd:79:ed:4b:bc:0d:ab:7b:f1:ca:f0:92:3a:
                    1c:09:6a:e4:4f:61:5e:2d:cc:61:0f:a5:eb:d0:11:
                    c8:a0:2a:32:1b:f3:bb:f8:6c:d5:24:d3:92:fe:d6:
                    f4:f9:95:35:8c:0f:18:92:91:89:24:9e:d8:f5:e1:
                    e9:95:73:86:6c:c6:c1:92:21:62:6f:9c:e2:d9:a5:
                    e2:34:b9:a3:59:fc:8e:e2:10:15:80:ce:81:6b:28:
                    0b:ec:d4:be:b2:93:69:e7:8f:4f:42:a1:fe:b8:5d:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5A:94:7C:A4:24:D5:5F:E9:81:DE:4C:97:22:07:52:8F:83:2A:51
            X509v3 Authority Key Identifier:
                keyid:32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:fa:24:ab:88:9c:4d:77:1e:01:dd:53:96:38:da:c0:6c:
         5e:8e:49:a0:eb:97:98:e7:0f:65:b7:4d:11:dc:60:92:ed:c9:
         90:16:d0:64:b1:6e:39:d4:f1:1c:af:60:42:1c:ed:ac:3e:e2:
         ec:ee:1b:06:f6:c7:bd:76:11:6a:04:e8:da:a3:ff:0c:30:5d:
         fa:e2:3a:17:2a:9f:83:7b:1f:33:1e:8c:d2:a9:a1:e5:16:55:
         c1:3d:c8:80:16:ba:f1:23:83:63:7c:02:97:57:cf:a7:b1:0c:
         4f:e7:ad:d8:7d:0b:32:ae:35:63:d7:18:b1:68:b6:50:47:49:
         e3:5a:71:f2:94:5a:e0:fa:97:4b:18:c2:e0:4f:89:22:3f:3a:
         81:83:d8:c3:4d:13:e2:67:b4:f9:d1:71:ba:ce:65:dc:ba:c5:
         ad:c1:e2:08:7e:4c:85:46:45:09:d8:64:bd:06:2b:26:9e:5f:
         b6:71:d3:d2:ec:52:11:28:84:ea:c6:8f:59:18:f6:96:20:01:
         09:2c:a4:3f:f3:87:79:e7:ac:65:ca:79:90:c8:98:74:0b:19:
         c7:dd:17:f7:8f:09:c8:46:07:11:bf:d2:b7:41:59:3f:e5:2f:
         05:35:63:13:0a:10:f1:16:8f:28:93:c1:e0:9e:a1:bc:b0:77:
         b7:51:33:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:44 2026 by rpki-client