This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File:                     8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier:          G9lKBaunjTHA/iRuUNrv205KhZqFbatYGEZJqYiMV0E=
Subject key identifier:   F0:69:4A:DE:2C:60:4E:7C:42:35:91:5A:EC:E1:49:38:2E:8F:94:3A
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer:       /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial:       019C1B70061EBC3207E09E912A586F797439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number:          0EF4
Signing time:             Sun 01 Feb 2026 23:00:52 +0000
Manifest this update:     Sun 01 Feb 2026 23:00:52 +0000
Manifest next update:     Mon 02 Feb 2026 23:00:52 +0000
Files and hashes:         1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=)
                          2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: sRgua5KT5WfzAG0vmODVdFzxmVjwKC4/aMwxJ4fzR5w=)
                          3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:70:06:1e:bc:32:07:e0:9e:91:2a:58:6f:79:74:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
        Validity
            Not Before: Feb  1 23:00:52 2026 GMT
            Not After : Feb  2 23:00:52 2026 GMT
        Subject: CN=f0694ade2c604e7c4235915aece149382e8f943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:cb:70:05:36:01:c5:ed:5b:2d:38:6c:f4:
                    1d:84:82:91:3f:77:a4:b6:5a:e5:2d:01:69:39:bd:
                    da:d6:fd:b9:94:a9:e5:8a:a4:5a:17:18:b2:fc:d5:
                    19:2f:a6:58:84:bb:d0:d4:f8:fa:c5:e2:ea:6f:ec:
                    57:7a:64:11:77:6a:c7:24:5d:b5:49:e4:47:5b:0c:
                    9d:0b:95:d6:70:be:b0:d9:6a:cd:d0:54:4f:28:59:
                    06:4b:a0:46:9f:92:e2:5b:39:14:09:d1:05:8d:8c:
                    e6:c2:20:67:5b:b1:76:a4:31:67:88:b7:49:22:50:
                    e7:d9:60:97:15:3c:c5:10:5d:66:a9:c0:f5:78:1f:
                    dd:48:53:9b:03:59:ff:20:f1:89:f5:11:af:0d:01:
                    80:5e:c0:ab:3f:65:94:52:12:69:9c:0c:d2:c3:41:
                    01:c2:3f:e2:35:0b:69:59:66:cd:32:0c:24:3c:5c:
                    1d:f5:4d:dc:74:42:98:ac:ce:df:fe:cd:95:71:d4:
                    72:08:8a:92:8b:81:5b:3b:9a:12:36:a0:7c:61:f0:
                    46:16:16:1f:4f:1b:e4:27:c8:62:c2:f2:52:6f:56:
                    4d:97:a9:09:38:f8:3f:07:b4:c3:44:32:63:41:16:
                    67:fd:d4:86:a9:73:99:05:c1:ef:e4:9b:bf:8f:02:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:69:4A:DE:2C:60:4E:7C:42:35:91:5A:EC:E1:49:38:2E:8F:94:3A
            X509v3 Authority Key Identifier:
                keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:db:90:97:03:82:50:b4:50:90:e1:d9:d4:10:a7:54:10:2a:
         75:65:b1:cc:d1:e7:92:8f:53:50:ad:6f:87:a1:4e:55:71:30:
         c3:85:de:e7:e8:00:a3:8c:6b:f0:6f:87:fe:73:d9:b6:b0:88:
         a5:74:fe:c1:ab:83:85:0e:44:5c:77:82:cc:9a:f3:65:70:6b:
         bd:ba:fd:15:57:55:67:3f:41:87:3c:88:16:3b:1b:7f:c3:38:
         8b:4c:18:66:c6:53:92:96:73:ca:a0:75:ef:42:39:eb:dc:e4:
         8f:46:a4:15:c6:08:26:f6:25:7c:f3:15:c8:3a:61:b6:38:3c:
         53:d2:de:d5:8c:b1:89:6d:9b:9c:07:a1:a9:3b:d2:2d:14:e8:
         e2:54:2f:77:c0:42:e8:e3:31:8a:c5:6b:57:57:a6:22:91:fb:
         ef:da:29:f1:92:d1:42:38:3f:0c:1e:22:72:4c:ee:f0:4c:c9:
         e3:bd:fd:0c:bf:10:b1:4a:52:18:f8:12:69:ac:ab:a8:e1:c5:
         74:2a:ff:17:89:73:ec:66:85:95:8d:1c:b5:fe:33:ec:de:74:
         67:5b:d4:93:99:1a:ef:af:fb:d0:88:3b:96:d3:3c:7d:ab:4f:
         e1:fe:f8:0d:5b:98:92:df:9a:32:dd:22:0f:31:b6:ae:24:37:
         d8:63:3e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:09 2026 by rpki-client