This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File:                     0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier:          /Z02SydXioYANHkSFlQabHzR+SC0WCXmR2L+F6GnAIk=
Subject key identifier:   36:0E:BC:89:6E:87:1F:E5:2B:12:0A:54:93:B0:9B:A7:FF:33:22:7C
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer:       /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial:       019C41D84494F7E697A957DDB224C0DBFE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number:          1740
Signing time:             Mon 09 Feb 2026 10:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:18 +0000
Files and hashes:         1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: hNvTYjrC2YiQToYLn8Ok6YpfAcScS4IdhDxi7Pw/6D4=)
                          2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:44:94:f7:e6:97:a9:57:dd:b2:24:c0:db:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
        Validity
            Not Before: Feb  9 10:00:18 2026 GMT
            Not After : Feb 10 10:00:18 2026 GMT
        Subject: CN=360ebc896e871fe52b120a5493b09ba7ff33227c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:e6:4f:80:fa:c7:5e:9f:8e:dc:8a:d1:4f:
                    93:4a:db:73:3b:c8:b9:8a:13:aa:96:c2:d4:29:69:
                    8c:e1:22:d3:c3:e5:6f:7c:29:74:47:20:c8:3a:77:
                    fb:3d:8f:76:f7:72:2f:0f:fb:95:48:eb:92:65:ff:
                    93:d2:3b:88:0d:be:25:a3:d6:54:af:55:bd:d9:0e:
                    d0:29:ef:30:99:56:fa:ff:a4:3f:1e:17:11:9d:f0:
                    9c:10:46:f1:54:56:46:43:71:83:47:30:36:6c:0d:
                    42:26:68:94:5d:9c:64:7e:08:59:10:23:28:1b:c3:
                    4a:b8:98:7e:3a:7c:8f:45:a7:9b:9f:58:1f:4f:63:
                    3c:63:59:20:be:1b:cf:70:f7:f5:33:ed:91:b9:17:
                    8f:88:66:f2:b6:ef:ed:2c:48:39:3d:60:66:35:d4:
                    e8:fc:29:ee:bc:a5:5a:d8:0f:5e:af:ad:5b:bb:98:
                    c8:10:30:6d:e6:51:b4:36:f1:cf:a6:3e:13:6d:f2:
                    bc:1f:f9:66:ba:06:11:ce:1e:04:6e:6b:47:43:d9:
                    24:ca:5c:ad:f9:da:cb:f4:84:9c:57:bd:9c:1d:dc:
                    56:fa:a5:46:ee:28:82:f4:f9:f6:09:16:c9:ef:9b:
                    6e:9c:8a:72:00:ee:31:09:d9:54:7b:c9:94:82:ed:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:BC:89:6E:87:1F:E5:2B:12:0A:54:93:B0:9B:A7:FF:33:22:7C
            X509v3 Authority Key Identifier:
                keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fc:ec:35:23:74:e9:e5:c1:5e:cf:00:cf:07:46:a1:bc:d4:
         ba:d8:a7:ac:f9:98:7b:e3:6c:2e:10:e2:69:95:bf:28:c7:ef:
         76:50:9a:51:f3:11:2c:25:5b:6e:7e:d9:cb:b5:32:4a:d0:d5:
         94:b0:ed:6f:b2:68:78:27:54:f0:27:70:a5:95:ce:48:12:1d:
         22:ab:3b:32:0d:a9:1d:d6:a8:e9:2a:64:2f:5e:02:21:74:bd:
         2c:56:ef:2a:c7:6e:7f:ce:80:bf:34:4e:cc:3e:bf:18:17:ef:
         14:d6:0f:f6:1d:23:77:8c:21:48:0a:b9:f5:45:30:fc:08:53:
         f8:65:00:cd:2b:ad:de:1b:da:46:fb:6e:e7:fd:8e:d8:67:ab:
         53:d3:7a:ff:b3:c7:f4:01:74:f9:05:21:f1:14:70:58:dc:5c:
         d6:81:d4:01:12:b7:a1:d0:8c:98:9f:55:70:7d:9f:13:25:da:
         cf:ec:45:38:27:b5:8a:de:20:e0:f4:e2:4b:2b:75:ed:30:cb:
         bd:11:b8:d2:9f:f7:2f:3f:66:2e:7c:78:bc:d7:5e:b6:e8:1c:
         0b:a1:da:be:8a:72:f5:5b:62:13:52:e6:18:ba:c7:95:34:b6:
         69:b4:94:6b:2a:3a:59:d9:de:af:53:70:ab:f9:0a:e9:93:2f:
         09:04:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:12 2026 by rpki-client