This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File:                     sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier:          Sgfcr0x3lLzK5keaPwzcMqvciyIsGmTARKnZDUYa+jU=
Subject key identifier:   25:DB:27:96:AD:72:0D:F7:78:F5:87:3E:8B:BB:F4:7A:80:13:85:54
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer:       /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial:       019C43FD8A1D0727CA7D3BC417A668C2CF84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number:          0CCC
Signing time:             Mon 09 Feb 2026 20:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:15 +0000
Files and hashes:         1: MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa (hash: 4Sap9NoQcaB7qcwGKxc8FZ4d2698TBnl8zwNLDBPALw=)
                          2: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: 8x0JTZ0++qxHWmt+mYlKAOsj7BGVIDFd6+iipnERZ7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:8a:1d:07:27:ca:7d:3b:c4:17:a6:68:c2:cf:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
        Validity
            Not Before: Feb  9 20:00:15 2026 GMT
            Not After : Feb 10 20:00:15 2026 GMT
        Subject: CN=25db2796ad720df778f5873e8bbbf47a80138554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:b6:a7:25:ba:7a:3a:2a:1f:43:a4:02:f0:
                    e1:58:01:25:0a:82:bb:b4:e5:ff:61:e0:27:77:fd:
                    49:d3:2c:53:36:e8:ea:f5:27:bf:b7:8a:2f:a6:e9:
                    f9:07:dc:79:02:0d:40:41:82:69:42:5e:61:b1:09:
                    c5:c2:a9:50:97:d7:55:19:31:fd:dc:46:06:78:b4:
                    f3:a9:2d:48:49:fd:83:24:36:c6:9c:82:d0:c0:b9:
                    99:8f:8f:35:94:e3:0e:6c:75:3e:48:f1:8f:cd:ec:
                    71:e8:e6:10:93:f6:73:05:1c:34:5a:f9:cf:7c:71:
                    80:87:f1:fb:0e:bf:ec:dc:29:8e:16:39:87:b4:4f:
                    fd:cf:01:a8:b3:6b:b3:19:7d:96:5d:4c:d8:d1:9f:
                    d4:6d:a2:b2:82:2b:c5:62:12:25:a0:6e:c8:c0:86:
                    74:62:a6:cb:f1:c7:a4:04:b1:5e:ba:4c:76:fe:21:
                    d7:a8:17:00:21:eb:f3:99:43:01:b7:61:1e:22:24:
                    fc:3f:aa:da:dc:f3:3d:6f:ac:d9:3e:28:8a:d9:6f:
                    c1:2b:6c:1a:0e:43:59:d1:e9:4f:c5:43:7c:77:de:
                    57:4f:15:fc:b7:05:36:2c:ed:7d:42:b6:5c:fc:76:
                    ca:cc:9f:20:b3:3d:07:d6:83:a0:9c:8f:ad:03:75:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:27:96:AD:72:0D:F7:78:F5:87:3E:8B:BB:F4:7A:80:13:85:54
            X509v3 Authority Key Identifier:
                keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:19:90:0f:e8:8e:48:25:c0:12:8d:6c:0c:99:74:93:dd:
         11:b6:33:17:c8:00:c6:27:10:1d:5d:1c:f4:de:b7:a3:0b:e7:
         58:ec:35:89:0c:8d:21:b8:33:7e:fd:69:d6:63:ea:a2:0e:ed:
         33:54:10:7a:f0:65:65:69:97:ff:da:a0:89:71:88:6f:55:f8:
         63:c6:76:8a:dd:03:67:29:b7:48:d6:9e:5d:14:06:23:c1:d2:
         7a:00:23:a6:95:d5:f7:55:a7:54:e1:da:4b:92:ff:b2:f4:1d:
         56:be:b3:be:18:03:2d:d4:17:00:10:48:e6:aa:59:55:64:8f:
         82:33:fe:50:1d:65:d4:71:08:ae:f6:43:61:e7:14:4b:43:0a:
         18:19:ae:8d:8e:16:ca:9c:04:ed:0f:b6:03:9b:69:dd:56:12:
         66:de:89:c6:3a:04:52:99:30:ab:18:bc:eb:b9:25:30:a8:87:
         4e:06:d5:e4:67:c3:4f:b7:5f:41:ec:7f:0c:77:24:98:f2:3e:
         55:45:c5:d6:81:67:4b:72:a4:d2:aa:d0:16:da:92:5d:a2:df:
         d9:dd:a1:12:1a:43:26:90:32:a9:23:27:bc:60:61:da:d5:69:
         89:e1:44:6a:08:aa:b3:f0:98:4b:71:c5:b0:87:91:f2:b2:99:
         cd:4f:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:02 2026 by rpki-client