This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File:                     fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier:          CsPg58Vo2tZrs/c8uJ6077VQqcvwKd0eAczClm2fVwY=
Subject key identifier:   0F:4F:6C:87:8A:43:64:5A:01:28:77:C1:15:1D:BA:32:71:08:62:43
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer:       /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial:       019C43C73EDD4B464223637B153AB511B087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number:          09DE
Signing time:             Mon 09 Feb 2026 19:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:57 +0000
Files and hashes:         1: DCjkvpD_ulnCiu50xRH7vfyj8Z8.roa (hash: GhWbmT/ccSmGK7MXgJ3YFU4Byveo2K+FzqXT4zrtxYs=)
                          2: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: ev3bS70/qR1R/TvKmEhuCSfAMhdnm+f7G4Y1jRXqzgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:3e:dd:4b:46:42:23:63:7b:15:3a:b5:11:b0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
        Validity
            Not Before: Feb  9 19:00:57 2026 GMT
            Not After : Feb 10 19:00:57 2026 GMT
        Subject: CN=0f4f6c878a43645a012877c1151dba3271086243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:27:b4:f2:fb:63:09:28:21:73:72:26:73:
                    70:fa:91:83:f0:b3:be:f2:e8:1a:06:49:52:44:a1:
                    03:2b:eb:84:20:fd:80:00:e0:28:ca:31:9a:75:33:
                    32:fa:66:0a:ad:51:ce:e9:d0:67:15:7f:c0:c7:4f:
                    bb:b7:ab:ee:62:c6:e5:dd:b2:e4:82:04:22:89:17:
                    ac:a9:08:2a:ab:e4:a7:31:f8:73:42:3e:79:13:cc:
                    72:e8:38:3f:c8:22:1f:e9:10:db:27:6d:0a:9b:b4:
                    b0:cc:b9:d3:3e:27:a1:5c:e0:ab:14:17:7e:68:6f:
                    fd:b2:3f:ef:79:85:55:68:8d:ca:74:bd:87:48:d5:
                    90:91:9d:8e:c0:27:f7:4a:0a:e2:c3:fe:42:41:ac:
                    96:7f:f3:b6:46:8d:91:93:a4:fe:e7:7d:fa:9f:09:
                    08:55:8f:21:2d:06:fb:b3:98:2b:24:f2:e3:5a:46:
                    e1:f1:38:51:28:bd:aa:ac:0b:76:1f:90:30:4f:47:
                    7c:5e:de:6f:09:e8:db:b8:02:95:3b:b8:4a:f3:d4:
                    44:4f:c8:23:4d:57:1c:19:00:7b:3b:9b:32:cf:04:
                    fa:33:a6:d1:ff:fb:5b:45:da:e9:ab:5c:b6:79:48:
                    8d:cf:a0:e3:c6:1d:3d:2e:59:92:a6:2c:ea:47:dc:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4F:6C:87:8A:43:64:5A:01:28:77:C1:15:1D:BA:32:71:08:62:43
            X509v3 Authority Key Identifier:
                keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:95:7e:a8:93:76:34:19:d7:85:fa:ba:96:73:4e:86:ff:
         7d:b2:f9:3c:fc:f1:ec:fe:c9:d9:6d:e6:51:96:9b:e9:32:e6:
         ca:cf:15:2b:60:c0:d9:6e:13:2e:f6:4c:c1:2e:6f:2e:60:0d:
         8f:14:5a:2d:3a:73:bd:cf:64:a9:74:63:35:7f:c2:77:a0:db:
         93:7b:c7:0b:20:1a:c3:9c:1a:d2:b8:5a:c6:69:24:0d:69:3d:
         fd:4b:ff:91:32:f9:90:42:ca:d0:dd:cb:d6:75:d2:a4:74:70:
         a1:81:7d:61:2c:da:3f:8c:0d:83:02:c5:a7:be:da:23:04:1e:
         3a:cf:07:94:ea:59:d2:7f:79:b3:23:7d:6f:25:a5:37:2e:04:
         f3:7d:57:fd:ce:f3:08:00:7b:67:90:56:aa:a3:74:d9:e6:e6:
         1b:58:eb:7d:37:f9:c8:03:ad:17:cd:7b:48:1a:23:1b:d9:db:
         b1:2d:03:ec:55:f7:20:01:82:ff:70:11:a8:e4:6c:e4:26:38:
         90:31:63:40:10:b9:2a:24:c3:62:dc:9f:2b:99:ad:43:3f:71:
         8a:7d:52:04:58:c6:3a:aa:b1:53:7e:41:0b:e1:ca:67:ed:c8:
         1c:c9:3a:9e:6a:e1:02:a4:46:1a:65:95:d7:b2:06:64:4a:eb:
         04:bb:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:41 2026 by rpki-client