This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File:                     70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier:          5pnKSR1/BYGthed8Qb1MXo9mjqxLb0mnw/1QK50/K9E=
Subject key identifier:   6E:EB:FC:F7:6F:5D:29:35:14:07:46:F0:13:C0:30:25:1B:E9:63:9D
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer:       /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial:       019C420FEA7024EC8BFBD8F62D8129200D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number:          17A4
Signing time:             Mon 09 Feb 2026 11:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:05 +0000
Files and hashes:         1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: pPtNGY/MchfbnLHMQvKZgdLyVS+a0deHK2qabNWg1K8=)
                          2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
                          3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:ea:70:24:ec:8b:fb:d8:f6:2d:81:29:20:0d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
        Validity
            Not Before: Feb  9 11:01:05 2026 GMT
            Not After : Feb 10 11:01:05 2026 GMT
        Subject: CN=6eebfcf76f5d2935140746f013c030251be9639d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:89:29:1b:11:31:20:4f:ea:de:c0:09:1b:
                    ba:12:2f:f9:9b:94:e1:dc:67:b0:a3:f3:14:10:96:
                    68:11:6e:8b:1c:3d:1e:f1:7c:d2:b9:1f:b4:1c:b9:
                    11:4e:f0:62:c9:5c:2a:40:1f:e1:1b:f4:e5:79:c4:
                    c4:c0:9a:90:a6:09:0e:a6:cd:d0:b0:60:1c:dc:13:
                    74:f7:5f:c7:74:6e:91:7e:58:66:f1:fe:1c:c0:1a:
                    7d:67:a0:d1:c4:b5:62:61:ba:1c:30:a2:34:b7:69:
                    63:62:27:30:53:71:39:51:00:47:23:55:11:ad:07:
                    6c:f4:7a:51:8b:b6:6d:e2:41:7b:83:cd:dc:78:71:
                    d1:39:24:dc:b6:e4:a6:3a:5d:2e:af:8e:25:fd:80:
                    f5:23:36:8b:f6:2d:6a:26:53:b5:15:78:3a:86:5e:
                    eb:f0:2f:06:0c:4f:80:12:c6:60:6d:b8:5c:6f:09:
                    fe:b2:95:a5:18:65:51:45:b9:24:4f:4c:c3:74:bf:
                    98:22:ca:6d:9d:3a:30:34:45:15:5a:ca:27:70:a7:
                    1d:0b:68:d9:90:c0:48:2c:a4:92:f5:d3:10:ed:2b:
                    62:c8:31:32:fd:71:53:f5:ff:0c:dd:22:d6:1d:a3:
                    df:31:4f:e3:36:a4:ed:38:43:9d:c6:05:f4:d4:4b:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EB:FC:F7:6F:5D:29:35:14:07:46:F0:13:C0:30:25:1B:E9:63:9D
            X509v3 Authority Key Identifier:
                keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:81:cf:e7:09:b8:70:28:65:bf:9b:ca:c9:26:46:b0:39:8b:
         64:da:4c:bd:2e:51:ae:b7:48:37:fc:57:6e:d2:62:27:73:0b:
         07:41:45:f1:fd:e4:d9:ed:b6:31:a6:13:78:54:3a:94:b2:a2:
         0b:42:c3:31:f9:26:1b:1e:72:70:ab:63:20:68:e4:1b:76:06:
         f4:a2:f0:81:ef:67:83:82:5d:10:b8:30:85:e8:31:b8:9d:cf:
         e1:4a:e7:10:4a:f3:52:18:96:a2:98:92:c5:4c:31:63:a9:8b:
         76:07:28:cc:7d:39:7a:5f:e0:82:17:f2:22:c6:8f:81:8d:62:
         f0:03:60:9e:be:e1:5c:6f:0e:ce:37:02:b8:ac:fe:a7:22:1d:
         32:02:e8:3e:f5:09:4e:40:67:a3:89:bf:70:b0:1d:41:e5:18:
         52:5a:20:9b:4d:06:90:92:d6:a1:ac:07:23:b4:fc:77:db:fe:
         31:f9:89:ae:51:47:9d:c3:92:0b:d3:71:a9:c4:9e:10:5f:01:
         19:42:72:5d:d9:4a:16:4f:25:b8:1f:90:ed:7c:a4:5f:f7:95:
         d3:8f:fb:f5:42:30:f2:53:9f:8a:6d:d8:8a:54:c4:42:52:da:
         9d:3f:2b:1b:db:0d:0d:b4:cd:c6:15:e2:8d:da:b2:7b:e3:bf:
         b6:6f:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:15 2026 by rpki-client