This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File:                     c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier:          wWVCRG0RMlwgTOs8sOopzuwgsbc9imyr2fKR0egRGw4=
Subject key identifier:   B6:12:B3:DD:0D:F7:14:BD:BB:DE:AC:87:6B:BA:59:C2:D7:B9:FE:E0
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer:       /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial:       019C41A1CBCF06404BD79BCAE2827FA7A9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number:          16A8
Signing time:             Mon 09 Feb 2026 09:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:48 +0000
Files and hashes:         1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: KuXqJCDbK6PjOLlanwo/jT1omjuTmjF7LYSLAKTLh2c=)
                          2: zjYqOLuQFupG2wqdmO2CYkpXQro.roa (hash: 7hKJfqNykVFaDvcY9bN4ItGluZTyIyU5j59eF7yp70U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:cb:cf:06:40:4b:d7:9b:ca:e2:82:7f:a7:a9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
        Validity
            Not Before: Feb  9 09:00:48 2026 GMT
            Not After : Feb 10 09:00:48 2026 GMT
        Subject: CN=b612b3dd0df714bdbbdeac876bba59c2d7b9fee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:9c:93:64:15:36:12:9f:68:71:53:dd:55:
                    72:d5:5b:93:d6:6a:62:49:17:e6:03:62:e9:47:36:
                    d8:36:e3:6c:9c:8d:cf:8c:3a:c9:30:8f:6d:d1:6e:
                    dc:93:ac:45:40:0d:12:56:f9:7c:89:a9:ca:7e:8c:
                    64:5b:83:57:37:cb:d2:ad:48:58:de:55:ee:7e:fe:
                    42:31:0e:21:1f:4f:e8:ef:05:c4:35:30:6f:e2:e3:
                    1d:1f:a0:f3:93:52:d2:14:7b:a1:f0:ac:ea:15:af:
                    6f:99:16:7a:25:be:2f:13:0e:3f:a2:d2:d3:72:6e:
                    f0:be:d5:fb:51:49:65:1a:3e:be:25:5d:bd:36:c4:
                    db:00:57:50:a4:5a:2a:05:ce:c8:f5:98:59:b0:30:
                    21:c8:f7:d3:dc:2b:4e:6a:7c:75:5d:6c:5c:0e:ab:
                    38:dc:0c:3b:00:8f:0d:66:ce:4b:50:a5:9f:ec:47:
                    29:b7:97:95:38:2f:61:89:6f:c3:70:f5:e4:ad:51:
                    da:70:4e:45:0e:b2:89:75:d2:6c:48:f7:72:6c:81:
                    66:3c:02:b7:e0:06:69:91:2a:4d:73:e2:9f:5a:f4:
                    d4:5a:60:26:e7:f6:d0:90:79:ef:6c:bc:a1:d4:a8:
                    80:e4:66:78:08:f3:07:0d:13:66:f8:28:dc:fe:a7:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:12:B3:DD:0D:F7:14:BD:BB:DE:AC:87:6B:BA:59:C2:D7:B9:FE:E0
            X509v3 Authority Key Identifier:
                keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:ff:70:b4:60:e1:c6:94:10:9c:16:11:6f:bc:2b:55:29:
         3b:1d:f3:6a:6c:51:71:e1:e9:c1:89:f6:ae:cb:bb:35:1d:a7:
         f2:cc:83:19:0c:76:03:56:8a:55:b0:cf:74:48:db:04:da:9f:
         7a:51:be:35:d6:cb:70:f8:93:05:e0:f4:f0:34:f8:66:f5:b5:
         01:dc:7b:8d:c8:f8:9e:e3:40:d7:c1:78:bc:94:d9:a6:86:5d:
         5d:c2:27:d1:c4:d6:8a:be:fe:ae:ca:a1:75:62:30:22:68:3a:
         0a:44:8e:66:9d:a0:a7:e2:c7:54:af:bf:ae:f7:cb:06:0d:65:
         b0:99:c1:28:46:01:3b:2a:33:e2:e9:af:e0:5f:b0:0a:8b:84:
         ad:fc:b8:7e:e2:4f:79:99:77:e2:2e:99:d5:d9:8f:0b:60:79:
         e3:12:11:ea:e6:ac:43:04:b4:89:5c:f9:2b:e7:97:e1:f1:b6:
         a9:7b:ba:f6:71:54:97:17:7d:50:46:30:ea:8e:9b:65:66:be:
         21:e4:a5:81:9b:04:55:f9:94:73:11:60:2c:64:c9:0c:06:de:
         a8:8b:6f:af:7f:bf:48:cc:ef:2b:4c:fb:e7:09:b8:8d:33:7a:
         96:ed:8a:56:7f:2e:17:3d:c7:2d:52:1a:2e:9e:04:14:b2:db:
         87:68:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:13 2026 by rpki-client