This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File:                     52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier:          oiDxlgmCAL2OvWNuhPbhtVnz45kwVohLvoYRgYLl004=
Subject key identifier:   D3:47:A0:38:79:4B:44:F0:6D:90:C8:4F:C6:80:33:85:9A:CD:09:88
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer:       /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial:       019C43FDE69843656CF06A426DB08FAE651F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number:          0B0D
Signing time:             Mon 09 Feb 2026 20:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:38 +0000
Files and hashes:         1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: UWg8VSKH4hYTTar41XBPijBuRUYAbOLOcMo7td1nrnI=)
                          2: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (hash: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=)
                          3: aHre3p3mljnQo6pgr_PAHWNasWI.roa (hash: jfHBeKOKc5HfS6IdGbqjCGEVckZ/9KBZc/hoke7dPEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:e6:98:43:65:6c:f0:6a:42:6d:b0:8f:ae:65:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
        Validity
            Not Before: Feb  9 20:00:38 2026 GMT
            Not After : Feb 10 20:00:38 2026 GMT
        Subject: CN=d347a038794b44f06d90c84fc68033859acd0988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:11:48:e2:c0:d2:61:c1:eb:a6:77:7b:d4:
                    17:ee:3e:b5:05:e2:87:79:5e:76:4e:ba:cb:6a:53:
                    c2:79:09:64:e9:5a:d6:10:3c:58:22:2c:44:d7:fe:
                    5e:04:fa:c1:a4:e6:e0:49:0e:b7:54:b0:34:9f:f6:
                    1b:fc:02:76:83:6d:65:c1:89:bc:3a:5b:29:36:47:
                    ed:7b:ab:42:46:79:c1:9a:59:6a:1c:1e:06:28:b8:
                    50:84:cb:9d:28:8b:41:58:7a:61:32:be:87:69:67:
                    9b:cb:62:32:b8:3e:42:65:79:90:7b:c2:2a:8b:e6:
                    10:90:4e:6a:a1:c3:22:cb:78:ca:ad:1e:3e:1a:78:
                    c7:65:4f:55:d1:46:ed:b2:e0:dd:b8:40:34:20:35:
                    a6:80:6a:8c:fc:13:fa:02:73:e1:6c:09:99:66:cd:
                    68:1e:49:23:40:36:90:94:f9:04:5e:b0:ba:16:68:
                    e2:25:1c:48:fd:04:f0:30:ab:58:05:21:da:b6:1e:
                    d1:08:19:4c:7b:16:4e:01:5c:60:78:50:b6:7b:33:
                    1a:af:48:47:58:08:98:6b:c9:a1:7e:34:e6:d1:65:
                    68:1c:8e:83:73:54:b3:94:a3:93:2c:19:52:7b:e7:
                    2e:ff:a0:df:4f:17:8e:f2:8f:8b:0f:b7:c0:89:de:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:47:A0:38:79:4B:44:F0:6D:90:C8:4F:C6:80:33:85:9A:CD:09:88
            X509v3 Authority Key Identifier:
                keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:68:9d:8c:f3:96:6c:5b:5a:a9:e3:41:c1:f3:74:ad:03:b7:
         0a:80:d5:d8:31:08:c8:f0:65:ed:28:6b:03:10:07:df:cb:76:
         4e:fc:34:ad:de:e2:be:0d:7a:bc:e2:e6:f0:8b:be:59:1b:57:
         b2:19:0a:79:43:e0:00:f8:fd:69:92:fe:68:64:56:ff:44:99:
         03:ec:49:3f:4e:b3:c4:ad:0d:52:cf:fe:71:70:7f:e9:7a:a8:
         30:82:ec:2c:12:22:5a:da:49:16:a6:c1:08:77:1d:61:5b:a3:
         03:17:17:24:23:fc:41:26:45:cf:8e:c9:13:e2:98:cd:89:89:
         a8:6e:4b:02:8b:aa:ac:ab:74:e2:a3:73:83:78:0b:f3:b8:e1:
         66:30:59:6b:04:22:4b:72:bc:0e:02:27:83:b9:66:ec:f8:ed:
         57:93:30:e6:6a:d6:c0:25:38:85:ff:41:7a:92:1d:20:ac:af:
         94:bb:4c:86:7f:c0:26:93:af:81:96:43:2f:75:b2:46:1e:be:
         31:b5:fb:1a:3b:e9:2a:17:42:80:ee:44:5a:e5:0c:71:dc:ed:
         83:38:69:19:94:2e:b7:62:95:cb:3f:b6:f8:db:e8:74:3a:8b:
         af:ad:4f:71:0a:dc:32:3a:6d:28:cb:eb:38:0f:f4:cc:e5:d2:
         27:5b:8c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:12 2026 by rpki-client