This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File:                     A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier:          vsA0J6G2RcMvKBufPqSd9yza7PwVcoOukDAf4X1YaX4=
Subject key identifier:   23:8D:DD:AE:4F:8C:66:E2:AA:FC:9B:27:20:D5:00:84:13:C4:BE:80
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer:       /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial:       019C41D85F0BBB25B1DDFA264B207B8F9A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 10:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:25 +0000
Files and hashes:         1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: XKoMkZqluJafEM6FbeWyJjDy/djJ22EP+KEFNHngJwI=)
                          2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
                          3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
                          4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:5f:0b:bb:25:b1:dd:fa:26:4b:20:7b:8f:9a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
        Validity
            Not Before: Feb  9 10:00:25 2026 GMT
            Not After : Feb 10 10:00:25 2026 GMT
        Subject: CN=238dddae4f8c66e2aafc9b2720d5008413c4be80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:fd:93:a3:37:db:40:40:24:6e:a4:dc:02:
                    97:90:8a:84:6f:37:c2:bf:9e:de:64:c3:7d:91:16:
                    f1:a7:e3:fa:81:4e:dd:48:d3:ef:44:88:07:2e:ec:
                    2c:32:ae:1f:2f:ca:7d:0c:15:f1:03:89:c4:e5:18:
                    7f:1b:94:14:0c:50:21:10:b9:17:ab:a2:95:d2:e5:
                    ca:2a:14:f4:af:54:ff:2e:f4:1e:c3:a4:1f:b3:97:
                    fa:0d:0d:73:06:ee:d1:e4:14:8f:bb:38:28:25:3a:
                    3d:85:fa:21:4c:0c:38:c0:57:fd:f9:55:28:47:3c:
                    66:12:8e:9e:bd:c7:5f:d9:fc:c3:61:51:20:76:6f:
                    2b:2f:10:91:cd:71:b1:42:d7:67:14:6b:5b:66:8f:
                    54:ac:25:eb:ed:fd:9f:ca:ef:36:81:b9:e1:d5:76:
                    35:9e:c9:4d:07:28:62:54:c4:b6:ef:1a:5e:5b:95:
                    5f:b0:df:e7:b0:b2:9e:d4:f3:ef:38:04:8b:77:47:
                    23:b8:94:cf:3b:2c:65:ea:84:6b:d2:66:cd:d7:13:
                    24:a4:e0:ef:59:81:5a:64:7a:11:83:f0:c9:5d:56:
                    e5:0a:cc:a0:ae:6d:4c:c2:28:48:13:2f:ac:c3:7a:
                    46:dd:86:42:cf:4d:c7:73:d2:82:64:b0:60:fe:3d:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8D:DD:AE:4F:8C:66:E2:AA:FC:9B:27:20:D5:00:84:13:C4:BE:80
            X509v3 Authority Key Identifier:
                keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:34:33:61:27:6b:21:b8:7e:ed:fe:30:fe:7e:0b:89:42:b4:
         79:81:b8:72:fe:68:83:bc:1f:90:e8:d1:2b:89:2f:dc:f4:68:
         a8:c4:9e:01:eb:8a:02:f2:39:92:30:90:ba:a0:4b:a4:11:f4:
         bf:64:fd:20:95:bc:ef:34:d3:80:9d:eb:71:77:82:d8:91:e1:
         49:3e:a8:48:1f:6f:bb:4c:97:b0:13:76:a5:00:31:ec:0c:4d:
         02:bc:3f:38:23:7c:36:fb:64:39:60:24:80:29:e4:f7:0b:9e:
         08:2e:d8:0f:b3:5d:02:19:99:70:51:c2:54:51:a6:54:2d:fc:
         63:cc:cb:37:d7:28:e1:f2:da:fb:87:71:3a:21:14:f2:0f:93:
         6f:1d:5d:b2:94:ab:c6:82:a2:81:92:69:26:7a:83:46:d3:30:
         a2:69:eb:61:bb:35:a6:c4:2f:84:7f:57:62:36:ee:2c:d8:92:
         cc:08:5d:40:ff:bb:89:d7:dc:79:8d:c1:33:fc:54:4d:c3:ee:
         aa:49:8d:22:09:94:fe:57:52:6b:ae:e6:f5:ae:3b:8a:b9:3c:
         9e:df:e9:e5:f3:59:aa:c4:3f:3a:4c:3e:13:b3:53:af:1c:77:
         da:1e:3b:7a:e9:ed:c1:66:6d:7e:42:47:7b:2f:32:30:17:89:
         eb:b9:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:41 2026 by rpki-client