This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File:                     MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier:          pat1+EpKXX/1MuVpnvp0xUTEkExK9OhCB3+pNe1xqf4=
Subject key identifier:   9E:8B:81:F6:B0:B8:58:D3:B0:31:2F:1E:AB:44:4C:64:0E:35:C6:E4
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer:       /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial:       019C4322CD2274B0D640EAD50804D7472CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number:          0E2E
Signing time:             Mon 09 Feb 2026 16:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:19 +0000
Files and hashes:         1: LMyd5AVVPstuPC5E7pVL_2qH79c.roa (hash: tZV4ibO3L7V8SZM1mv/sUwiQCz0xJaX2spb6v95tdyA=)
                          2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: IGQSkJhmxlWGA6XYV17DOiviziDew+FuI/npxHYdd5c=)
                          3: N5As3_5f02c5s8zn2uyxGXeV7es.roa (hash: agj60RbD37HPgv9kIsdcj8QWRgmWH3ok7Fvf9vYBX/k=)
                          4: f69K1aG7WjoLOs2Y1pAtNPdEc1U.roa (hash: cGXoJfZUx/B5ZqQ+rwCKHOTNtBGcpBtjUB50pxeKDJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:cd:22:74:b0:d6:40:ea:d5:08:04:d7:47:2c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
        Validity
            Not Before: Feb  9 16:01:19 2026 GMT
            Not After : Feb 10 16:01:19 2026 GMT
        Subject: CN=9e8b81f6b0b858d3b0312f1eab444c640e35c6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:76:36:89:30:1f:24:d9:1f:dd:47:59:79:
                    bf:52:54:63:91:32:3c:3a:14:c3:c5:f4:bd:e4:87:
                    d0:ea:e5:3d:69:55:d9:16:9f:24:01:1a:a7:96:84:
                    7c:bd:ea:8a:a5:77:40:37:9b:21:4a:e7:7a:49:54:
                    c3:33:47:82:2d:87:bf:eb:b3:84:b4:a4:9b:fe:0b:
                    f6:ab:9b:48:90:7b:8c:fe:c6:24:95:60:c2:3c:74:
                    b7:9f:3b:d8:ac:48:3a:74:73:8f:3b:3d:05:ab:81:
                    87:81:d9:a6:f2:ea:98:4c:78:b1:df:cc:46:53:0c:
                    a1:f6:2a:01:96:49:9a:0e:94:9a:e7:b6:83:15:b9:
                    a9:03:fd:21:82:c4:f3:12:e9:85:80:38:ae:44:00:
                    b4:bc:80:5d:e5:a9:27:c2:66:b8:46:46:76:9e:20:
                    32:63:10:07:8a:b8:73:ce:8c:70:72:12:fc:c2:38:
                    44:e0:8e:7d:84:15:cd:56:5f:fd:2e:64:78:09:58:
                    ef:28:1a:9d:40:4d:b3:6a:15:d2:b2:f5:2d:3d:80:
                    e9:2a:ec:39:30:5a:92:d9:11:a7:dc:50:51:b7:c8:
                    40:9a:91:82:8f:e6:ad:46:82:5d:c1:82:0e:33:b5:
                    11:5b:d9:94:b5:57:0d:36:5a:63:f4:95:24:b6:4c:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8B:81:F6:B0:B8:58:D3:B0:31:2F:1E:AB:44:4C:64:0E:35:C6:E4
            X509v3 Authority Key Identifier:
                keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:ad:7e:09:37:c0:d6:e4:70:c2:3c:3d:c5:d9:c4:90:cc:
         66:48:02:d6:e2:74:51:9b:a3:ad:05:7d:86:18:b8:6a:da:1c:
         fa:6f:a9:ed:98:1e:a7:64:20:4c:7f:05:f6:37:98:88:77:06:
         2d:20:12:23:4a:34:df:91:58:09:74:2c:b8:30:15:cc:a3:b7:
         ba:2a:fd:6d:7e:d5:3d:39:97:a1:08:9e:53:b1:87:3b:42:69:
         b5:44:41:48:21:93:1c:83:e7:b7:e4:e8:b4:93:43:7b:3f:78:
         d7:9e:97:40:21:df:f0:17:f0:d4:e7:76:f5:c2:71:25:03:fa:
         3d:ff:49:11:d1:dc:6a:65:e3:6d:eb:7d:3a:b3:7f:7e:49:c7:
         37:8f:93:5e:45:98:82:13:af:69:13:2e:3b:3c:dd:79:69:d0:
         af:5a:3c:01:4c:66:26:28:49:a1:6a:1b:d9:6b:78:d5:2a:d1:
         b5:2e:eb:04:b9:54:b1:6b:41:88:c5:ec:54:a8:e5:82:7d:36:
         fb:59:09:da:46:32:5a:e4:9f:21:19:68:dc:57:25:a4:e1:8c:
         8f:23:87:62:15:bd:83:35:b3:8a:ba:37:50:17:af:99:cd:70:
         6e:6a:21:7a:6e:47:b6:8f:32:cb:30:b3:63:a6:d5:9d:79:f9:
         13:64:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:45:58 2026 by rpki-client