This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File:                     8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier:          EaXAs10dY3Gd7YfCNPoSvpEsITxI/CcEGVtCl+nMLtE=
Subject key identifier:   31:9F:84:12:09:EB:0C:E5:66:74:30:03:4A:F6:46:F3:54:C8:AF:7E
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer:       /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial:       019C43FE94C92097ECDA8B2D4ABA128426CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number:          129D
Signing time:             Mon 09 Feb 2026 20:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:23 +0000
Files and hashes:         1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: xrMe1BEXjENRT1XzxTuNDJ7gTnAKXruz7piPwfkk/dQ=)
                          2: _jY6WgV8hi820mrkCVqkQdpe6r4.roa (hash: jZcpfUNVzLyH3QEOmN/Qa0Ri+06CTJZ/zNPfr5mVdOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:94:c9:20:97:ec:da:8b:2d:4a:ba:12:84:26:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
        Validity
            Not Before: Feb  9 20:01:23 2026 GMT
            Not After : Feb 10 20:01:23 2026 GMT
        Subject: CN=319f841209eb0ce5667430034af646f354c8af7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:65:d5:f5:ef:48:38:6f:86:f3:0e:da:74:
                    0c:7f:97:8c:5d:b0:23:4e:52:e5:43:db:39:7e:72:
                    75:7d:b1:62:55:e6:f1:26:72:a5:a1:0f:b3:39:b3:
                    e1:be:b4:09:ca:0d:e7:37:28:1e:39:0a:8d:fe:b1:
                    7a:23:17:d2:85:8b:b5:ad:49:f1:36:dc:03:8b:a6:
                    8b:96:88:45:bb:7f:0b:88:de:74:01:e2:7c:dc:19:
                    33:2c:e0:68:bb:90:c1:48:6d:52:ff:db:41:1d:3a:
                    71:b8:b1:c7:e8:7e:eb:ab:80:93:52:af:5b:b8:c6:
                    f2:16:2c:c1:29:ca:6d:ec:75:1f:84:1d:81:c8:bf:
                    3f:1c:38:96:04:47:b3:af:22:e1:1a:ee:fb:6b:f3:
                    b7:ee:7e:c4:7c:7b:e3:00:ef:b6:6e:8c:52:70:17:
                    35:77:a2:fe:17:73:c2:75:2f:4c:b3:70:2c:25:34:
                    84:ad:8c:1b:2e:a0:7a:bf:62:f1:9c:ca:a6:a2:c2:
                    9b:23:67:97:f1:6d:db:33:00:93:ae:78:94:8b:1b:
                    eb:1c:ed:32:27:b5:a3:43:73:6a:70:6c:d9:fa:df:
                    1f:50:6c:6a:08:d8:c8:03:88:95:e8:52:8f:89:44:
                    68:7b:ad:74:11:58:10:66:de:2b:8b:cb:4c:58:76:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9F:84:12:09:EB:0C:E5:66:74:30:03:4A:F6:46:F3:54:C8:AF:7E
            X509v3 Authority Key Identifier:
                keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:74:e2:d0:5d:7e:7b:47:df:5e:9f:5f:f4:f0:c2:29:62:f6:
         fa:2c:e7:d5:10:e9:5e:a2:b4:e9:66:44:e7:1c:f5:8a:36:10:
         02:3a:8e:ea:98:bd:b7:f9:d1:a6:b8:47:bf:bf:93:2b:d6:77:
         e8:7b:e9:ef:c6:ff:c0:1e:93:7f:7d:3d:00:af:2e:8d:0b:ab:
         b6:79:3e:7a:1d:80:5e:f6:ff:e8:37:c2:7c:49:89:ea:fe:d9:
         c0:06:b4:76:f6:31:d2:fa:5d:f5:c9:12:41:62:81:f9:ea:88:
         46:ad:ac:d3:0f:dd:d0:45:64:01:fa:e1:e6:a8:1d:52:b6:be:
         70:31:fb:fd:35:e2:67:49:f0:fb:26:c4:20:23:40:97:a1:b5:
         e5:af:6f:d7:c4:00:7b:f7:4d:bb:6d:f1:41:54:4d:e4:cb:f0:
         30:e3:a7:8e:da:8e:2a:34:1e:c2:b3:b3:b5:48:27:91:49:e0:
         d7:22:ec:32:33:b0:d8:f2:f5:4a:50:cf:57:74:1a:e0:7b:6d:
         2e:1a:d6:f7:29:14:c5:ee:73:7c:5b:eb:56:dc:2c:e5:21:cb:
         07:5a:a4:1f:03:31:d7:43:11:38:fa:e9:2c:9b:2c:6a:3f:b3:
         f3:ec:bd:89:b9:de:86:21:a6:36:5f:97:9c:64:17:a7:f2:c8:
         3c:46:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:47 2026 by rpki-client