This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File:                     RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier:          SwIGswkvzcXCW+8L8VjUdf+IZAKB/DKhOWcJ/+bsX4U=
Subject key identifier:   B9:0C:E4:43:50:DA:F9:E4:17:3A:56:EE:09:73:84:0C:A4:CC:8E:51
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer:       /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial:       019C43C694213F5EB01E3E2348D5DA2F3F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number:          1213
Signing time:             Mon 09 Feb 2026 19:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:13 +0000
Files and hashes:         1: B-jEplfKinXm_aVY6XKJwZ6zffU.roa (hash: qovloFSiFG/W9rJh7fcNYETxsTgZ5QQyiO1DTttOrwQ=)
                          2: C8ndRUP4mG5i6Z7S5iDRwDHVA7s.roa (hash: x5nMtbiYKs0LuaiMOIAvyWWd3XFr7UWf1LhYWiYg0uo=)
                          3: I5hCyjrw2AXxjC1FvqHT6gWtqQs.roa (hash: 5bxftc/i5qFZpB6RRZJFqNI1hX1vXDX1myfyCTO9Lmg=)
                          4: MlrnVSg-D0WgaZMr-y5tTMSAriU.roa (hash: WIj5Ec9a2W/Di7tEM8lKik0rbLBOSepO4AecZmXJzEM=)
                          5: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: LnR8dfo5yQs8HsfK5MaK07ITIG+TwrcLeVN9CG00LQM=)
                          6: WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa (hash: gT6kAy3QC3WFVHTaMinwFIa4C3kHsmkq2W1J4go59R8=)
                          7: Z7YAJ4xfnW8yEXTxt7DbwgKIB-k.roa (hash: GKuomVfKG0bBmTKzxOPpDKeuM0owMJCeX+Ke/zhIJSw=)
                          8: ed8yDMGRECTMaD8k-df_wcQHSQA.roa (hash: cwhw+g6gV0Cc1yz+CyTGqM6EEaAW5Bb5GiWG5Dbv1YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:94:21:3f:5e:b0:1e:3e:23:48:d5:da:2f:3f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
        Validity
            Not Before: Feb  9 19:00:13 2026 GMT
            Not After : Feb 10 19:00:13 2026 GMT
        Subject: CN=b90ce44350daf9e4173a56ee0973840ca4cc8e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:bf:9b:5e:61:63:12:8c:e8:ea:5a:f0:3b:
                    ea:96:eb:c5:3a:97:36:85:a2:db:b1:d4:fb:55:48:
                    b7:8f:aa:0f:4c:21:f0:3e:14:14:a5:fc:9f:91:09:
                    6e:c0:8e:6e:57:24:dd:fa:22:0f:77:98:61:99:c3:
                    1c:7f:0d:96:df:d4:3c:53:23:65:0f:00:c0:c0:20:
                    ce:8c:bf:3d:42:65:6b:1f:81:f2:7d:8f:8c:e9:00:
                    f3:44:dc:31:36:d0:da:30:59:f8:aa:09:95:86:36:
                    6c:d1:5c:35:cb:3b:92:8e:4c:70:a0:82:5d:6a:8f:
                    78:ed:a3:13:e6:9e:4d:4a:9b:f2:dc:bc:bc:50:04:
                    94:a9:ca:12:fa:c0:e0:b7:29:26:f1:6f:23:fa:06:
                    2b:22:75:17:83:86:3e:b0:bf:d5:78:74:74:5c:78:
                    e8:28:d4:0f:e2:96:47:9f:09:11:56:62:bd:99:24:
                    7c:90:b3:56:ed:5a:49:fc:ca:95:54:2d:d2:08:83:
                    1a:59:aa:f3:8a:78:26:d3:6b:61:01:9c:cf:00:97:
                    57:16:77:90:e8:f1:63:4f:38:3e:63:8a:24:52:8c:
                    b0:6f:da:b7:9d:7f:4d:77:66:b8:11:4f:fb:8a:41:
                    79:a1:23:88:8d:ca:f8:f7:0b:9f:41:3e:17:39:5c:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0C:E4:43:50:DA:F9:E4:17:3A:56:EE:09:73:84:0C:A4:CC:8E:51
            X509v3 Authority Key Identifier:
                keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a5:72:f7:c0:43:46:4f:54:b0:ee:2a:c1:ac:f3:c6:e4:e9:
         1f:83:4c:ce:de:3e:6c:c9:14:ac:6d:2d:54:6a:89:44:e0:6d:
         f7:1d:63:a6:59:d0:25:fb:17:86:db:4e:35:68:06:60:52:2c:
         17:b9:c4:7a:37:f7:18:6a:58:b4:02:09:f2:b8:e5:23:d1:94:
         8d:43:fb:2b:1e:55:43:34:07:2c:bc:0c:3d:ce:57:98:3c:4e:
         65:39:a6:e3:4b:ab:50:53:60:91:10:72:c2:2f:31:83:00:1f:
         ca:6f:de:bf:9d:39:55:5f:f4:c4:c4:ac:5b:13:92:68:de:e4:
         35:95:dd:a2:c3:58:e7:62:7c:c5:9d:cc:65:90:9d:02:6a:c9:
         37:83:bd:04:5d:b7:67:3d:5c:1f:de:f3:bf:16:fc:ff:2b:30:
         50:44:87:75:84:94:7c:31:61:c9:47:00:15:0c:a1:99:d2:ef:
         7d:d2:a8:f8:67:b1:ac:8e:1e:49:e0:8a:e1:de:7c:af:97:4a:
         8a:6e:7b:e3:10:42:ba:b4:80:75:c6:e4:b6:cf:7d:3a:ca:0d:
         3b:93:64:68:a7:99:20:e2:ee:f2:e8:8e:0b:8b:58:cc:ab:3f:
         1d:e0:39:9d:c8:37:8a:42:35:73:10:ca:d1:be:af:0f:f4:eb:
         cb:58:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:26 2026 by rpki-client