This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File:                     L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier:          DDsic7z7coddISRnY4IYreT5/t5I8zli8apNksuIFnU=
Subject key identifier:   8F:3D:41:26:E4:B5:95:28:3D:E5:56:B7:B0:55:24:6A:8D:4D:48:8D
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer:       /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial:       019C42465075B91E60136A64DB4B7E33197B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number:          0925
Signing time:             Mon 09 Feb 2026 12:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:30 +0000
Files and hashes:         1: 1-qvywlUOO4Ge41Le6wGpOYKjfsE.roa (hash: uTZC4bs1/WWd7D50ShkF2YU/qDypq+687eQWyfUK4VA=)
                          2: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: V5lzJYgMB44fm1p8yfS1hkQcvRmmA7PnvFMsuEbFlOA=)
                          3: Xix9A97ayWDPHJAD9nOZlkvalAY.roa (hash: 01E/73qs5IxYDyn0I+VrJJgO3tRvtSmgt4GyIQH4+tw=)
                          4: fuaQin5ZNjrCTdUWmvEBDcXFz8E.roa (hash: qhuqnAm2EiQwhhu/ckeDsixilbyWujECBgBwASP6+ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:50:75:b9:1e:60:13:6a:64:db:4b:7e:33:19:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
        Validity
            Not Before: Feb  9 12:00:30 2026 GMT
            Not After : Feb 10 12:00:30 2026 GMT
        Subject: CN=8f3d4126e4b595283de556b7b055246a8d4d488d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ad:3a:4c:4e:91:1f:47:37:db:41:ef:ba:c3:
                    6b:c9:77:2c:e1:df:ed:7d:a1:3b:c5:18:14:b9:d5:
                    19:12:fe:bb:34:ea:52:0a:75:9f:2a:a7:d8:04:d6:
                    63:45:d9:a6:8c:7e:41:99:07:ac:6f:c6:15:ef:e0:
                    c0:a9:6a:f6:6c:7e:50:15:d4:e4:26:13:67:52:e2:
                    bb:ef:d0:b6:0b:ed:c2:e6:c1:92:f8:79:66:00:ab:
                    aa:e6:d0:67:25:d3:2a:cb:dc:11:be:de:c9:82:e8:
                    3c:c0:d1:bb:0a:4a:64:94:35:59:86:1f:9e:87:04:
                    74:a3:80:08:69:e8:e7:cc:cb:de:a8:e6:f9:85:ac:
                    c6:08:cf:e8:2c:f3:54:57:a3:1d:80:e5:ba:bb:47:
                    82:7f:dc:78:57:84:09:e7:3c:04:30:ef:1f:c7:1b:
                    e7:49:8d:d6:7f:54:99:4f:3e:a6:ff:7d:cd:69:94:
                    d6:03:a0:c5:5b:cc:a8:b2:e9:57:3a:11:05:0d:7e:
                    8a:e3:da:0b:13:15:12:89:3b:74:e3:20:01:e7:2d:
                    21:ec:75:31:78:84:2b:33:21:78:33:b6:4f:55:bf:
                    2a:ba:68:78:c2:a4:31:5e:a0:fc:fd:33:f9:38:35:
                    43:05:b0:a8:fe:64:01:5a:68:54:c3:80:1e:39:61:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3D:41:26:E4:B5:95:28:3D:E5:56:B7:B0:55:24:6A:8D:4D:48:8D
            X509v3 Authority Key Identifier:
                keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:38:27:ca:53:30:34:e3:46:88:d3:c7:f0:9e:43:62:38:d8:
         43:4a:e2:df:cc:9e:a3:32:a5:df:8d:e4:ef:99:f9:0b:e9:d5:
         d4:65:08:17:20:93:7f:5a:f8:23:0f:3d:32:ce:a4:f6:66:81:
         55:8c:32:40:00:5c:ce:ed:bd:4e:a8:6b:47:c7:da:01:a8:91:
         cf:08:a6:89:82:dc:12:56:c0:fe:1d:c2:c4:de:56:2b:41:f6:
         c3:45:28:b6:f3:2e:f7:de:ff:77:28:bd:ec:d2:fe:21:02:e4:
         af:65:2f:07:ca:c8:5f:d3:40:14:00:fe:5b:f3:5a:93:56:72:
         d2:e6:c8:1a:f9:4e:85:07:20:b5:25:3b:32:de:c6:40:15:c3:
         c2:7c:2f:70:b2:85:d3:15:24:f4:92:6f:f4:aa:e5:be:5a:44:
         02:04:15:4c:84:a3:5f:b1:ee:27:7c:27:6a:50:9e:c7:10:a1:
         d5:1b:58:f4:6a:a1:f6:fb:37:86:ee:1a:0b:13:db:74:bf:d6:
         d2:6f:4c:d5:ae:f8:31:da:54:9e:95:aa:59:b9:4d:eb:41:4c:
         10:27:9d:72:d0:b6:f7:00:a4:4f:c3:fe:9e:8b:de:a1:c5:68:
         b5:fb:69:5c:47:56:7c:fb:ff:16:32:f4:85:9e:d4:6d:c3:31:
         70:b7:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:43 2026 by rpki-client