This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          9UBxW2VmRSwTDTwS5adm0n0gtVpKyCBlUePwsydx0KU=
Subject key identifier:   ED:50:FE:F5:FB:FB:1C:98:76:A7:74:A3:1B:48:EA:F7:E8:29:88:47
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       019C413405B183E2651F104B34BD20662477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 07:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:54 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: h+BSA2/2AY4kJjs1dOqJ+3XXs4QPK5tXOz5BBnC0H5I=)
                          2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:05:b1:83:e2:65:1f:10:4b:34:bd:20:66:24:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: Feb  9 07:00:54 2026 GMT
            Not After : Feb 10 07:00:54 2026 GMT
        Subject: CN=ed50fef5fbfb1c9876a774a31b48eaf7e8298847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:fb:a7:59:97:15:ac:68:f9:9f:64:29:1a:
                    5c:46:c3:84:c9:f0:5a:7a:bd:67:71:16:97:4f:50:
                    e5:29:1f:d1:d9:04:49:b0:26:7c:ac:dd:00:45:65:
                    81:9d:11:fb:57:74:9a:47:13:42:1c:5a:59:f5:10:
                    8a:d9:00:c7:47:77:67:7e:71:21:97:b3:26:ec:8e:
                    f6:b0:2c:b9:02:20:b1:72:b8:25:a8:f3:95:4c:e4:
                    0f:d8:91:46:0d:9c:c7:b0:8c:d0:bb:b3:90:e2:61:
                    df:ed:ec:2b:1d:db:02:f5:98:88:09:ae:a2:15:f9:
                    c2:df:da:7b:66:ea:31:98:f6:a0:b7:c9:ae:2c:d5:
                    27:b3:e6:0d:76:0c:46:f4:56:b2:2d:aa:06:c3:76:
                    85:f3:08:bb:b8:b6:44:76:d2:96:ad:16:9c:27:70:
                    9d:8d:8f:49:13:82:28:eb:49:cb:f9:00:97:29:e2:
                    8f:f0:2e:96:d2:40:f6:4b:d7:dc:16:a4:be:f8:cd:
                    e3:d1:06:94:30:2e:f1:a5:34:a8:22:5c:53:85:f8:
                    d5:f6:ae:d0:85:c4:bf:38:a8:25:73:f7:f8:36:8f:
                    93:01:8f:11:d4:97:f9:1d:e5:1d:1f:ed:37:56:22:
                    3f:66:a8:76:c3:07:24:3e:e6:33:10:46:5b:38:ff:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:50:FE:F5:FB:FB:1C:98:76:A7:74:A3:1B:48:EA:F7:E8:29:88:47
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:64:b4:1b:5a:d4:27:df:08:cf:56:5d:76:b2:93:ce:93:84:
         46:7e:01:d8:27:0d:d8:8a:7c:8b:87:ef:d2:02:8a:20:78:b9:
         78:c2:6f:c6:e2:2e:84:bc:d7:03:71:90:c3:e2:2a:06:e0:38:
         41:47:de:b4:b8:fa:02:88:bc:ca:73:63:7b:f9:67:75:b5:b8:
         53:8a:26:22:28:81:c3:7e:ae:6f:01:38:8c:44:ab:50:ee:a4:
         d5:d6:6b:ad:9a:f6:46:38:4e:8d:ab:d0:77:db:4b:39:1a:cc:
         07:d7:64:27:9c:c5:4c:37:06:84:6a:28:65:ac:17:42:36:05:
         c8:6e:db:ab:47:9c:e8:84:b7:53:d0:c4:bc:47:cd:48:dd:ba:
         53:73:d9:91:4a:b7:09:73:9a:38:ba:b6:d0:7c:8e:af:d1:cf:
         d5:98:dc:b5:14:38:87:3f:0f:56:0e:09:78:be:df:46:b5:a8:
         ce:f8:a9:92:4a:71:9d:81:34:39:ca:da:19:de:97:4a:26:b0:
         98:5e:60:c7:c2:f8:0b:30:5d:2d:47:0f:cb:4a:3a:49:76:29:
         44:fb:63:eb:e4:f0:7d:4d:bc:b2:08:34:ce:98:43:17:6c:b1:
         57:df:ce:c4:54:a9:63:51:88:8a:df:87:2d:cb:b2:9e:a6:58:
         17:d6:66:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:32 2026 by rpki-client