This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File:                     _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier:          wWe8/+9rPbBlGQ08RdL7E4AugVx3Ph7dnbrGhuE1l3k=
Subject key identifier:   47:E9:DE:81:B3:EF:B7:CA:0A:EA:A6:4F:1B:DD:5F:87:A4:20:F2:3F
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer:       /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial:       019C43C6A6093BB13455F505B4EBC49D2A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number:          07DE
Signing time:             Mon 09 Feb 2026 19:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:17 +0000
Files and hashes:         1: 9IUhfW_W_atT4Rdt9waLsluclNM.roa (hash: Yv60tx6MkUHbKTa9fL1Ng3xfyWGESFLss/yfVo5hLwk=)
                          2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: Q36mjfEX3fXLza1JEDkh3kJzzYb/VqhNRZjwwuoBkqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a6:09:3b:b1:34:55:f5:05:b4:eb:c4:9d:2a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
        Validity
            Not Before: Feb  9 19:00:17 2026 GMT
            Not After : Feb 10 19:00:17 2026 GMT
        Subject: CN=47e9de81b3efb7ca0aeaa64f1bdd5f87a420f23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:ce:95:e2:0f:c9:f9:42:6f:56:5d:2d:e9:
                    bc:9d:fb:cf:9c:dc:5f:f2:a9:f2:85:85:20:c0:f7:
                    43:ba:5d:9b:eb:d9:1f:4f:b5:b0:f1:4b:e2:b5:6e:
                    93:94:48:d7:2e:eb:e7:3c:eb:0b:fd:39:18:fb:91:
                    ae:46:40:c6:99:3e:94:2f:d7:c6:00:52:ad:47:b6:
                    62:80:19:f7:50:87:b0:3f:9f:87:c4:53:00:7b:73:
                    46:dc:24:dd:53:4f:29:25:15:62:a4:4d:4a:8a:64:
                    8a:23:90:5b:86:53:6f:b3:e4:d4:9e:9d:d5:c2:f6:
                    48:36:e3:25:08:6a:d4:77:2d:80:c5:61:23:cd:39:
                    11:52:67:b7:8a:11:02:f8:e1:bb:b9:9c:1c:05:b1:
                    43:3c:1a:68:49:b1:cd:9e:70:51:11:b3:27:6a:7d:
                    b8:ed:d7:57:11:cd:d3:12:15:5b:e3:fe:8e:42:e5:
                    a2:41:96:5c:54:95:da:20:ba:73:3d:fc:95:b1:0f:
                    06:36:f6:12:41:a0:7d:11:56:72:8b:af:a7:30:74:
                    6f:43:4b:62:87:8f:b6:c4:23:e1:a1:f3:f7:f0:c7:
                    d5:6d:d8:3b:9f:14:84:14:b0:0d:03:f7:60:cf:53:
                    59:75:4e:4f:5d:fb:8f:68:e0:a0:ad:83:79:ca:1f:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E9:DE:81:B3:EF:B7:CA:0A:EA:A6:4F:1B:DD:5F:87:A4:20:F2:3F
            X509v3 Authority Key Identifier:
                keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4d:ec:18:0b:55:17:51:ba:18:67:12:1b:c1:17:a7:16:7a:
         be:03:b5:72:42:65:19:e8:11:65:6d:b2:79:0b:8d:7c:f0:41:
         c6:b4:27:50:61:09:0b:e8:57:5c:96:a2:7c:c1:5b:d0:7c:9d:
         a3:5d:b5:ac:c7:48:47:4d:dc:83:6d:b0:73:b8:f1:35:a1:4e:
         6d:db:db:bc:8b:fc:b6:6c:1b:f8:f2:f6:a3:c2:cd:8a:b6:c6:
         67:df:06:0a:4a:57:d9:b9:8e:e5:45:4c:9f:22:63:8b:ed:d5:
         28:8d:4e:f5:47:5d:b9:9a:08:72:4a:dc:8e:e7:18:a2:8e:1d:
         95:0f:32:34:b8:92:47:3d:8d:a7:1f:f0:a6:37:25:5e:4b:6d:
         b0:17:3f:7f:96:f4:31:35:12:09:01:ac:09:42:8b:7c:8d:50:
         6a:d1:3f:ee:a6:ac:4e:a1:e7:0a:0b:47:d3:2d:07:52:fb:eb:
         f8:8e:af:07:17:41:85:33:5b:ea:2a:38:a6:86:b8:bd:f0:e5:
         28:15:37:e1:1d:4c:8c:75:be:d0:29:63:8d:22:7e:62:8b:ec:
         e4:41:7b:73:17:4f:fe:e0:8c:7b:1c:74:9d:0f:f1:44:3c:ba:
         cc:79:7c:25:d7:fc:4b:85:12:b9:e2:fa:bb:ef:2e:41:67:41:
         e2:a6:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:12 2026 by rpki-client