This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File:                     88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier:          awXsX3yUnAcnFtOU/kLtY//86GYcLIhfC+tmUazz9No=
Subject key identifier:   94:C2:8C:F9:25:9E:E5:C0:A3:CD:CF:76:BB:98:B4:B9:E3:A1:C9:1E
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer:       /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial:       019C416A5D1C72701EDFB4B1D2207944C144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 08:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:15 +0000
Files and hashes:         1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
                          2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: TzAEczcJAEoTHnvnV25Qvqp7kwtwIOoIhQxDDMM0yec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:5d:1c:72:70:1e:df:b4:b1:d2:20:79:44:c1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
        Validity
            Not Before: Feb  9 08:00:15 2026 GMT
            Not After : Feb 10 08:00:15 2026 GMT
        Subject: CN=94c28cf9259ee5c0a3cdcf76bb98b4b9e3a1c91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:99:2e:31:75:96:ad:1d:34:0c:29:d2:51:
                    5c:d2:59:bc:91:e5:09:89:8e:8c:cf:6e:53:c7:3e:
                    f6:de:c8:01:b5:3c:1c:a3:5f:50:b4:fa:b3:b2:c3:
                    45:39:6a:79:6b:b2:15:ff:f2:c3:85:bd:21:f6:1c:
                    69:4e:4c:60:c3:00:b5:e2:93:65:9f:db:53:b5:77:
                    aa:a8:bd:47:82:a9:15:5c:52:a4:35:6a:df:8b:0d:
                    f2:56:c2:28:a6:3f:57:57:12:86:cb:68:48:08:d6:
                    0c:32:c9:9a:65:9e:db:18:98:4b:4e:62:ec:b9:f1:
                    77:c6:82:f8:35:1e:59:5b:a5:04:11:b4:e6:5b:8f:
                    80:08:e4:27:30:0e:f6:5e:7d:98:ff:14:9a:41:28:
                    94:1b:6f:3b:dd:a0:cd:03:91:9d:7a:50:81:ac:bc:
                    81:6a:73:43:f8:0e:6c:c2:03:e4:37:2b:7f:ad:ee:
                    c8:b8:f7:ee:3f:7f:37:5e:d0:45:d0:03:76:9a:4c:
                    5c:93:10:aa:ff:4e:9e:ef:0d:f1:ac:d7:a9:6f:26:
                    d7:0b:30:1d:c0:92:82:c9:d9:0b:9a:00:14:3e:a9:
                    5a:0c:56:f9:65:52:55:9e:c8:d4:59:20:62:bb:06:
                    f9:c9:80:3c:89:f2:8d:06:3d:7c:f3:67:2c:15:80:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C2:8C:F9:25:9E:E5:C0:A3:CD:CF:76:BB:98:B4:B9:E3:A1:C9:1E
            X509v3 Authority Key Identifier:
                keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:43:bb:89:14:1e:de:b7:6e:64:8a:40:5b:dd:23:ac:d1:b2:
         03:c5:72:f4:95:dc:b7:a7:13:da:6f:16:5b:a9:ea:41:14:cd:
         83:e2:91:10:34:d2:c4:d8:70:6a:44:93:dd:92:58:5d:66:14:
         93:a4:5c:c2:75:d5:61:35:1c:96:08:f4:3f:e1:39:12:58:be:
         27:9d:b7:82:fb:a2:09:b1:0c:a0:78:f5:3f:2b:cb:da:db:6c:
         fd:84:ef:2b:d1:37:f3:55:72:a4:69:21:b9:a3:50:6e:58:d6:
         d7:91:be:02:5c:85:c8:48:e5:ee:d6:be:1d:eb:3c:00:3f:9b:
         d9:39:34:45:ec:29:58:04:92:86:31:b0:3d:f8:78:a1:ea:79:
         14:cd:b7:a1:42:ad:22:e5:49:ab:ac:81:88:b1:18:38:7f:d8:
         fe:68:2d:3d:8e:29:28:91:4e:e3:c1:f6:fa:f9:98:a8:60:3e:
         21:fe:ba:60:fa:ac:35:d8:b9:f6:33:b7:ef:87:a4:77:4a:46:
         f1:10:ff:56:7e:78:16:25:ca:de:62:ad:f5:7e:14:ef:db:d7:
         c4:4b:3e:23:c8:87:e2:d5:36:c8:51:e4:02:16:87:20:6c:10:
         aa:36:58:5c:1e:06:77:52:34:b4:f0:99:1a:ea:46:26:0d:ec:
         e6:07:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:25 2026 by rpki-client