This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File:                     A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier:          H0Uk8Yc+nIznJNbHTW6BLC2TDOZ1RCR3lbOcTwwljDI=
Subject key identifier:   3E:B1:27:29:F8:2C:46:6B:C9:21:40:E6:5D:0D:CA:CD:F3:8D:FD:D2
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer:       /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial:       019C43FE8FE620B0FED20CADC2A7A870D7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number:          08EF
Signing time:             Mon 09 Feb 2026 20:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:22 +0000
Files and hashes:         1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
                          2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: Dlb7hTDNjq+X0o5RiA0JOHtHAwuweDHTyQoCOmEiUc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:8f:e6:20:b0:fe:d2:0c:ad:c2:a7:a8:70:d7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
        Validity
            Not Before: Feb  9 20:01:22 2026 GMT
            Not After : Feb 10 20:01:22 2026 GMT
        Subject: CN=3eb12729f82c466bc92140e65d0dcacdf38dfdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:90:97:63:17:61:0a:04:93:b9:ce:7c:46:
                    98:ed:9b:98:04:5d:0e:98:d7:a8:ed:49:24:28:1f:
                    66:dc:7a:4e:f0:d9:ae:02:44:fe:bc:fe:e4:24:72:
                    27:b7:ef:f1:39:5a:ad:d0:79:ef:b8:b2:29:90:da:
                    db:25:5b:3c:d9:06:89:b9:21:ec:6b:f6:49:91:fd:
                    50:71:36:60:11:43:a9:d0:49:5d:69:30:84:e0:bc:
                    f3:17:29:40:20:50:27:d6:0a:d0:6a:14:d7:54:25:
                    d6:bb:09:85:26:e3:fe:2d:0f:c6:0c:fd:b6:08:12:
                    5d:6c:ce:14:35:6d:40:55:22:16:3b:df:15:22:3d:
                    df:52:51:d3:7e:b9:82:3f:6b:6a:98:11:ce:ee:30:
                    6d:22:34:2b:c5:e2:84:b9:c8:d8:90:9c:f3:1a:c0:
                    b8:68:fb:a5:e7:1f:da:36:a3:80:a4:1d:a8:fc:b0:
                    67:17:75:4d:aa:4f:14:f6:25:29:41:da:7b:5b:b5:
                    5c:db:6c:6d:65:04:54:ce:a9:10:c1:db:ad:15:08:
                    b5:fa:4a:5c:85:4a:7a:f6:18:47:4f:64:ae:7d:69:
                    d6:08:5f:a6:96:92:79:c0:5b:7c:fb:4c:bb:45:34:
                    36:11:0b:5c:a4:95:7c:2e:79:62:c6:71:9b:8f:86:
                    f0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B1:27:29:F8:2C:46:6B:C9:21:40:E6:5D:0D:CA:CD:F3:8D:FD:D2
            X509v3 Authority Key Identifier:
                keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:28:95:bf:29:be:ed:d0:e3:4c:e9:48:5a:2b:8f:92:a5:a8:
         07:9f:8b:c6:a4:04:e4:66:a4:57:24:d6:7c:e2:02:56:62:23:
         f0:79:b7:e5:c3:e2:6d:d8:a2:87:33:05:26:a1:45:70:85:8d:
         9f:51:c7:0f:e2:5b:be:c6:0e:1e:78:78:78:79:52:66:ba:93:
         e4:1a:c0:2e:cb:80:1b:e5:a2:61:b9:dd:d7:bf:1a:f9:50:38:
         17:66:b9:91:ae:6b:22:c4:79:70:fe:ab:ae:1d:27:cb:03:05:
         71:87:8a:c1:09:48:4a:e3:03:16:d2:a3:5e:a3:56:7b:92:c4:
         44:0a:15:06:3e:7d:eb:c8:ad:0d:66:a4:1e:54:82:fd:7e:4b:
         a1:00:66:ac:7c:31:25:d2:16:a1:6c:df:aa:2b:b3:b1:68:85:
         8d:50:43:e6:7b:41:c5:4b:32:8b:08:06:44:39:bf:98:f8:7c:
         43:97:c8:c6:09:6a:41:86:a9:bf:35:cb:28:32:d3:ae:2b:b0:
         4a:41:67:94:bc:b7:53:8e:99:dc:f7:1f:e5:b1:d6:75:47:a0:
         51:f3:dc:74:aa:51:24:e2:69:95:77:f4:94:e9:19:1d:37:73:
         ef:8f:a2:bf:64:bf:4a:42:17:0d:6f:34:6d:f9:5e:02:8e:29:
         1b:9f:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:53 2026 by rpki-client