This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File:                     lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier:          vaX/VYkl+1sQRqzvuZi1WO3nPT4ZAG6Y6O+AlTIis4w=
Subject key identifier:   68:30:7C:F1:A8:3D:4D:E9:D6:49:8D:07:35:B0:E0:F7:DC:4C:39:D6
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer:       /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial:       019C41A1B91222F9D84A9A7B05EFA0628060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number:          07C9
Signing time:             Mon 09 Feb 2026 09:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:43 +0000
Files and hashes:         1: 1ygXWl56xqWdwn4TflC3PtLjSqY.roa (hash: wDz5snBxEXcvrvGiZ9XQ0363TdLN4FN6tQlUAGosd4Y=)
                          2: kMPviltRtqxAKO4xs3FL286WfMI.roa (hash: b2KX7/1WNd0ZVOSNk+xrifaPOCqz2zXGvf6d4rAcmDs=)
                          3: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: pMGrQds2fydD4YhqjDSCOs/5zZtHpO6J5aZltQAE3Rs=)
                          4: xPQBc7eZ2R1OmzVk_QznLDcH24Y.roa (hash: EfDW7rBbqgixbRFm/O3kOxDuO6fhmyskTYvpF7yhzcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:b9:12:22:f9:d8:4a:9a:7b:05:ef:a0:62:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
        Validity
            Not Before: Feb  9 09:00:43 2026 GMT
            Not After : Feb 10 09:00:43 2026 GMT
        Subject: CN=68307cf1a83d4de9d6498d0735b0e0f7dc4c39d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:1f:88:42:78:3d:14:df:36:16:2a:c2:93:
                    19:ae:66:ae:78:99:7c:6e:4e:27:2e:0a:67:3e:f4:
                    99:36:ea:12:6b:00:6d:b8:91:e2:ac:8c:31:e5:24:
                    fa:3c:89:12:39:89:af:97:c4:b4:42:36:8b:92:ce:
                    48:8f:40:7d:38:c8:a0:4b:fa:52:66:7f:a0:82:be:
                    6b:58:a9:3b:d0:df:ee:1a:e8:b4:33:af:e6:4f:e3:
                    dc:5e:40:89:83:42:90:db:9f:23:8e:27:89:95:2e:
                    d1:42:80:77:bb:38:7d:8d:ad:f8:8d:c2:55:ce:e6:
                    3c:9e:49:3d:e7:a4:a2:82:e8:69:32:b1:b8:4e:23:
                    1d:0d:c0:4d:2b:5e:1a:60:29:bc:71:66:05:59:a2:
                    b6:7c:99:d5:3e:b2:09:6e:59:b2:3b:4f:d8:c8:d1:
                    29:7b:18:50:d7:f5:05:e2:91:71:f3:96:07:58:0e:
                    db:f0:9c:46:fe:ca:7b:fb:99:d4:b9:a3:d1:0b:62:
                    13:6c:d4:9e:5b:cb:bc:bd:0f:7a:f1:33:6e:a7:f7:
                    ec:ef:1c:26:19:8c:49:81:92:8b:2d:0c:0c:97:b4:
                    1f:36:d7:e2:f5:07:41:70:68:6b:d1:f3:15:82:fa:
                    72:94:d8:c4:ae:70:05:4c:a9:93:44:e6:8d:a1:c8:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:30:7C:F1:A8:3D:4D:E9:D6:49:8D:07:35:B0:E0:F7:DC:4C:39:D6
            X509v3 Authority Key Identifier:
                keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:27:53:59:fa:3b:7d:ec:c7:fa:fd:b5:01:1c:0c:af:80:
         6b:40:c3:3b:a4:a0:68:78:e7:1f:56:21:5c:55:76:6a:ce:8e:
         51:10:9b:d3:aa:0d:51:40:f5:6b:e0:0a:d6:68:0d:82:a2:7c:
         54:4b:55:f9:d7:14:46:2a:5c:e3:07:49:ea:1a:d9:24:37:09:
         15:43:e0:95:8a:b2:5f:4e:bf:a3:f3:33:78:a0:b1:38:40:c9:
         cd:3c:3b:e4:bb:fa:29:79:4d:0e:89:5b:74:48:61:4d:27:87:
         35:93:e0:05:6b:f8:4f:b4:84:57:ed:72:94:38:85:6f:19:a9:
         94:54:3d:14:13:99:49:fb:36:81:6e:1e:9c:c3:91:05:ec:2d:
         37:5f:34:86:ff:18:9a:f0:b0:bc:58:09:a6:13:31:2c:f5:32:
         04:06:c6:99:fa:5a:9e:0c:4a:ce:8c:81:45:59:04:72:f4:57:
         56:ec:60:bf:f3:31:b0:bc:a9:40:9e:03:95:f3:d0:c1:f7:f2:
         92:56:9d:76:77:08:d5:a0:bd:cf:0a:c3:58:49:64:f6:5a:a2:
         d1:d8:a9:5e:0b:84:18:bc:6b:81:d8:82:d1:c9:5c:7c:de:72:
         f9:18:62:fd:d1:8a:91:1c:ae:e8:fe:e4:9b:68:c2:97:38:03:
         07:e9:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:28 2026 by rpki-client