This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File:                     8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier:          P39DKiGU+vMmTVM1JCZVt/qP6VkJ5mOLQoMV1zaRebY=
Subject key identifier:   FF:FD:98:58:1C:4D:07:02:84:24:0B:B9:C6:0A:F9:54:59:B0:6C:EC
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer:       /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial:       019C43C6924B0F1FB2B96D3DBE1D1C539A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 19:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:12 +0000
Files and hashes:         1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: WhrtqSdvuUyZ4JlcLmeiX4F8pTVxJNBxvAD7QkIJKO4=)
                          2: XXKVsIY0HbIJymCv56HgZpurwFA.roa (hash: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:92:4b:0f:1f:b2:b9:6d:3d:be:1d:1c:53:9a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
        Validity
            Not Before: Feb  9 19:00:12 2026 GMT
            Not After : Feb 10 19:00:12 2026 GMT
        Subject: CN=fffd98581c4d070284240bb9c60af95459b06cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:47:d4:77:c2:ed:61:5b:78:9e:9d:40:3f:
                    0d:f4:6c:c3:4c:a3:39:a9:7e:2c:64:8b:a2:f6:6a:
                    08:80:d5:e7:92:68:c1:c5:cf:85:d4:2f:df:92:de:
                    0b:d7:68:27:36:cd:2a:23:2c:9b:a0:96:83:2b:16:
                    37:dd:fd:e1:98:0c:67:0d:c3:21:ff:4c:35:70:ac:
                    69:89:96:43:5d:5e:f7:97:cc:0d:7b:30:c7:d0:c1:
                    6f:de:50:1b:25:64:41:5e:e8:70:38:92:50:d7:22:
                    8d:ed:30:21:24:0e:5a:6e:93:c3:32:e3:c2:c1:51:
                    0c:21:04:eb:cc:7b:8c:c1:fd:24:7e:01:8d:10:32:
                    9f:ae:b2:5f:fe:86:96:06:21:11:b0:c9:b8:73:dc:
                    29:74:95:51:9a:ad:30:5a:4e:fe:92:e6:70:9c:89:
                    fd:1a:13:64:07:c5:2a:48:db:1f:f9:19:02:6c:2d:
                    10:2a:d5:c5:81:23:bc:20:fe:9e:7c:b5:53:d1:ed:
                    73:a2:d5:bb:10:86:25:39:29:3a:fe:8f:50:df:5f:
                    98:d1:28:00:18:68:a8:b9:b5:cd:53:f1:49:f7:5b:
                    22:dd:1f:f3:47:48:a5:5c:33:ff:ef:3b:41:de:eb:
                    e5:50:e7:95:f7:43:36:6c:9b:99:4e:0e:8e:f5:44:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:98:58:1C:4D:07:02:84:24:0B:B9:C6:0A:F9:54:59:B0:6C:EC
            X509v3 Authority Key Identifier:
                keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f3:a0:c3:7c:63:3b:d8:97:61:4b:0d:1c:43:92:00:f4:2a:
         67:b8:06:44:0c:f1:a1:84:36:99:7b:27:a8:b8:5c:74:3f:d4:
         3d:da:06:16:78:f5:7f:0b:85:4e:63:ff:30:7b:e9:c7:bd:eb:
         3e:7f:7a:41:b8:e1:e0:1e:6c:b4:2e:f0:09:f6:e9:41:dc:6a:
         8e:8c:c4:05:41:f6:d2:51:19:b7:0a:f4:b7:0d:46:c8:fb:59:
         1d:fe:7b:f5:b6:10:85:9b:16:67:d6:db:2f:52:1b:52:11:95:
         b6:e8:40:64:29:e6:54:cf:2b:5b:51:3f:52:f9:5a:f6:02:29:
         40:2e:94:f8:61:db:cf:b0:8e:a2:ef:5f:16:2a:c3:83:2c:ad:
         75:f9:54:a5:97:d1:d4:95:1a:eb:f2:cb:c5:5b:3a:ba:06:46:
         e9:01:d6:8c:fd:17:e8:24:d9:93:c4:30:4e:0c:55:0e:05:6d:
         4c:39:09:dc:fe:2f:49:cd:f2:a5:52:22:04:4c:ff:fa:cc:76:
         37:fb:bb:1b:4c:58:94:9c:b3:0d:c8:9a:a2:09:2d:59:b2:14:
         82:b4:7b:d9:8e:30:f7:3c:37:26:2d:d0:0b:e5:56:e5:0d:82:
         15:6b:48:06:13:23:a6:1b:09:c4:7e:36:2b:ff:9f:17:77:90:
         04:0b:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:24 2026 by rpki-client