This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File:                     8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier:          bSFY0LAY6OS7PXC/nqPhosCEkeC6AaEX3ORi7kY45fQ=
Subject key identifier:   65:7D:5E:2C:63:08:FC:4D:59:04:1E:18:F6:05:D0:34:29:19:FA:C1
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer:       /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial:       019C424645CEB8AEC2E41D8E2B27386FE495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number:          0C69
Signing time:             Mon 09 Feb 2026 12:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:27 +0000
Files and hashes:         1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: ziYSSVEZGLOe4c08PEU3R3R+n8S/8RJ/OGE/MKOcEX8=)
                          2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
                          3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:45:ce:b8:ae:c2:e4:1d:8e:2b:27:38:6f:e4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
        Validity
            Not Before: Feb  9 12:00:27 2026 GMT
            Not After : Feb 10 12:00:27 2026 GMT
        Subject: CN=657d5e2c6308fc4d59041e18f605d0342919fac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:8b:17:e1:8f:4b:77:bc:5a:3c:dc:f2:e2:
                    48:07:de:e1:1d:f2:99:b7:07:e7:4e:6e:09:ce:c6:
                    44:33:31:fc:1a:87:7a:1b:a6:c4:1e:55:9e:67:0f:
                    32:99:65:e2:2c:73:24:6e:34:c0:9a:8d:f6:f9:82:
                    76:c9:fb:0a:21:96:57:ad:07:66:a1:4a:81:a0:98:
                    e9:5a:92:71:e1:2f:50:81:de:d2:e2:5f:dd:7d:fc:
                    84:b3:8f:a3:76:8f:08:aa:e8:14:07:f2:34:a2:56:
                    65:b7:94:69:f4:e0:83:5e:c9:03:73:d2:71:9a:68:
                    71:f0:52:8b:30:99:d0:9f:02:7c:8e:c2:c3:98:cc:
                    57:e1:82:c4:21:42:8e:2a:39:a6:a3:d9:ef:26:40:
                    41:81:1d:bf:de:54:99:ad:58:0a:61:a2:6b:1f:4c:
                    f1:e8:f2:5d:47:77:63:1c:e2:64:f9:3e:4b:7b:2f:
                    40:c7:4f:45:50:89:58:9b:dd:93:f1:c2:94:d6:68:
                    b4:14:f4:a3:3c:92:ed:34:d3:da:a9:75:ea:46:4d:
                    79:f5:f8:8a:0e:44:f8:3c:0b:62:48:02:dc:09:b5:
                    23:90:b0:7a:6a:64:55:73:a9:4f:60:27:c2:c9:30:
                    5d:b1:8b:82:1c:e4:12:38:3a:ad:b3:7b:c9:29:29:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:5E:2C:63:08:FC:4D:59:04:1E:18:F6:05:D0:34:29:19:FA:C1
            X509v3 Authority Key Identifier:
                keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:8a:a6:f6:c3:a1:d1:ab:c3:7d:9d:4c:26:7e:d7:7b:9c:
         5a:3a:08:1d:e2:7d:3b:a2:70:7d:b8:d5:ce:5c:fa:44:66:4f:
         16:8b:8b:62:c8:e5:5b:10:c0:1d:dd:0e:09:8f:af:81:68:a8:
         01:22:ca:8b:99:48:0a:7d:8f:ba:1f:e1:fe:a4:44:57:ca:5d:
         bc:f3:c4:1b:f8:b2:73:00:58:65:2b:04:95:e7:43:00:07:66:
         70:59:b2:90:9d:91:4e:16:1f:59:12:d9:5a:98:2a:50:ab:bc:
         f5:8e:7f:b8:4f:f6:fa:1e:69:30:80:ea:25:cc:c4:b3:fe:33:
         dd:ff:00:a5:b8:de:de:e2:1a:e7:d7:b3:59:39:23:6e:04:d2:
         8d:fa:99:69:63:93:77:be:cd:8d:a5:2d:ca:d2:1c:37:cf:95:
         95:a7:e8:75:af:1d:25:67:9c:85:93:aa:9b:d5:49:29:b9:7a:
         99:73:02:96:75:92:c1:54:ef:99:37:2b:70:54:f5:67:45:25:
         86:fe:2d:81:7c:8d:6e:ca:d2:9d:81:f6:17:ba:2d:94:fc:7d:
         83:67:92:32:0b:22:f7:3f:10:d3:85:ae:e8:78:18:29:da:e1:
         de:be:b3:81:73:77:23:ee:a7:e2:c9:ec:04:85:c4:89:ad:c6:
         20:2a:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:11 2026 by rpki-client