This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
File:                     sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft (raw, json)
Hash identifier:          C2ClMm857eQaNsawvE4fum6ZDIdbdEzQBK80mxvRWns=
Subject key identifier:   69:4B:D4:44:97:58:CD:4C:91:21:A7:6D:54:3A:62:D6:71:CA:9D:95
Authority key identifier: B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
Certificate issuer:       /CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Certificate serial:       019C43C746D5BEB18EE4E32A2DC47FB36FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
Manifest number:          060F
Signing time:             Mon 09 Feb 2026 19:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:59 +0000
Files and hashes:         1: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl (hash: Qo6b4K1v/Bj4sxBCvJ66RSCx7TZzL6FTPQ35hZNAPdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:46:d5:be:b1:8e:e4:e3:2a:2d:c4:7f:b3:6f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5ae0cf27526243b2376fed90c160dd7382160
        Validity
            Not Before: Feb  9 19:00:59 2026 GMT
            Not After : Feb 10 19:00:59 2026 GMT
        Subject: CN=694bd4449758cd4c9121a76d543a62d671ca9d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:96:f4:99:2c:b4:1e:ed:85:fa:37:5c:16:
                    28:4f:08:0a:2a:ab:2e:b9:22:28:a8:52:35:0e:73:
                    e4:d7:83:6d:a1:c9:ee:a2:d3:9a:10:59:e9:17:1e:
                    92:f1:e1:e7:b8:79:fc:b4:8e:69:63:31:b3:26:52:
                    9a:c8:69:c1:44:c2:5e:d4:09:4c:f1:6e:1c:46:cf:
                    eb:e5:9e:88:a5:1f:b1:b4:3d:4a:e7:9f:c7:6f:74:
                    04:8b:73:5c:78:67:ab:d5:78:d6:3d:0a:b9:1d:ab:
                    96:4a:9c:de:a1:7c:31:74:05:50:b6:d3:38:e8:da:
                    96:b7:14:8a:c4:2e:32:5d:08:96:c5:d0:87:10:81:
                    e1:75:6c:7c:35:d6:a1:00:03:72:67:a6:40:9a:63:
                    f1:e2:f2:52:3f:30:e9:39:fb:1b:03:c0:bc:3f:da:
                    c6:7e:b0:a1:4f:7f:ed:db:99:b2:a5:33:f0:3c:92:
                    82:a0:6b:ee:81:ca:29:32:5c:f7:fe:68:b6:68:4b:
                    d4:85:0b:1d:50:66:de:de:4a:df:2a:30:8b:1a:8a:
                    36:90:52:68:f7:bd:38:42:1b:99:45:d1:17:8e:ec:
                    1b:2a:88:43:3f:3f:f8:19:d4:a8:6f:03:42:c2:5e:
                    66:90:72:ed:54:aa:37:fc:c2:8b:5c:47:b3:fe:c2:
                    46:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4B:D4:44:97:58:CD:4C:91:21:A7:6D:54:3A:62:D6:71:CA:9D:95
            X509v3 Authority Key Identifier:
                keyid:B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a1:7e:5b:66:5a:b8:25:6f:08:a2:5f:a5:a2:b9:08:96:56:
         af:1b:ad:b2:ca:a7:fd:66:34:ff:1c:85:c1:28:67:a4:80:d4:
         85:bd:f5:ed:92:c5:bf:8f:97:be:62:77:e2:95:fc:aa:3f:cb:
         ed:66:eb:18:f8:3c:b8:fd:ba:03:4b:6a:7e:2e:fc:6b:b2:fb:
         0d:f9:28:b4:3a:1f:9e:e5:4e:a1:e5:34:f4:5d:4b:d5:49:8b:
         55:1b:9e:02:d5:13:f9:e8:e9:2d:8f:94:0b:c2:61:6c:a9:79:
         7b:69:a2:ac:82:f9:84:e7:2a:96:e6:83:14:73:6b:8d:71:a4:
         18:95:fd:4f:68:9e:8b:ac:67:53:68:81:fc:45:a6:7d:c1:74:
         69:0a:b3:96:b8:bd:5b:ca:35:00:a3:e4:ee:97:1d:fd:a4:b2:
         f1:d1:30:d3:72:8f:cc:69:41:6c:74:4e:bc:ee:1b:14:db:6a:
         84:6b:9d:c1:b3:96:62:0f:0b:4b:f1:2f:a1:d9:1e:17:19:6f:
         58:4b:2c:b3:f1:27:e7:4d:3e:91:9c:8e:4e:5c:f1:cc:84:da:
         dd:81:5a:39:d5:f4:96:47:ba:20:3b:31:37:71:f3:45:84:c2:
         b4:63:57:b8:79:d5:d1:cb:33:73:11:91:bd:a1:6e:ed:d5:97:
         f0:0c:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:58 2026 by rpki-client