This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File:                     AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier:          K7Cvuu8sQpB0v7/0arOm4KUbkra44IAs9fmh9Pm14sg=
Subject key identifier:   71:E5:9E:7B:EF:C4:06:96:32:31:5A:BD:0F:87:56:63:88:03:F5:90
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer:       /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial:       019C4359034AEAD65C79086F18929D347E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number:          0A31
Signing time:             Mon 09 Feb 2026 17:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:32 +0000
Files and hashes:         1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: LZqhopQVHE2zKMa2UaAI/ObwYB87emsr8/NLDSr5tX4=)
                          2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:03:4a:ea:d6:5c:79:08:6f:18:92:9d:34:7e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
        Validity
            Not Before: Feb  9 17:00:32 2026 GMT
            Not After : Feb 10 17:00:32 2026 GMT
        Subject: CN=71e59e7befc4069632315abd0f8756638803f590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:69:a0:87:01:b4:86:95:01:26:e3:17:52:
                    e8:a7:e5:2d:db:4c:4d:e5:c7:2d:04:be:0b:47:27:
                    16:b2:11:30:d4:83:e2:a0:26:8f:16:df:b2:64:c2:
                    f3:c9:5d:a3:f2:47:8d:76:ce:43:38:a5:ea:65:72:
                    f8:c8:ba:f5:8a:83:30:5a:95:20:00:ce:55:0c:de:
                    b7:29:c6:d1:b2:3a:90:eb:24:f1:5e:6b:b1:c0:26:
                    64:33:e0:a4:83:4a:64:b1:62:5d:85:24:3e:06:6a:
                    37:dc:3c:83:0c:84:56:eb:e0:ad:2d:ad:ec:2e:f2:
                    15:b6:fe:7c:38:64:d4:91:6d:10:94:1f:60:54:27:
                    8f:55:7a:a2:fd:b2:20:7c:df:e8:7a:fa:20:40:30:
                    4c:38:ff:10:37:7c:1d:50:ee:c7:e2:65:3f:77:03:
                    bc:10:ba:85:f1:70:05:76:da:6c:02:90:3d:a5:ad:
                    48:7b:15:cd:43:6e:5a:61:48:c6:28:ba:d4:82:cc:
                    f2:2e:03:de:19:16:ec:a7:d6:c4:a2:a6:07:c7:14:
                    e6:e7:3c:12:8b:92:1f:1f:cc:64:e2:9a:54:b3:65:
                    95:a5:f5:8f:f0:f1:ce:18:15:c3:d3:08:ec:02:56:
                    dc:e6:e0:67:17:d1:30:53:0c:be:fd:72:d6:ae:b8:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:9E:7B:EF:C4:06:96:32:31:5A:BD:0F:87:56:63:88:03:F5:90
            X509v3 Authority Key Identifier:
                keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:0d:90:07:75:fa:7d:d2:59:97:d9:f5:0f:90:0c:c8:62:
         04:ce:c3:87:d7:29:41:11:68:07:f8:23:1a:b7:a0:65:09:59:
         82:7f:5f:11:b8:b3:66:39:44:79:a9:74:56:09:0a:b0:ea:c6:
         95:2b:71:ff:f7:68:12:7d:f5:33:e6:69:9a:1d:2e:7f:aa:7e:
         ef:38:83:1d:fa:cf:b8:e2:f9:d4:69:d5:2e:11:40:31:63:06:
         81:18:73:94:b3:47:10:44:69:cf:c2:67:92:e0:8a:d6:39:2d:
         b7:1e:8a:68:7d:36:12:71:79:42:3c:95:ec:21:09:b8:93:2c:
         71:af:65:39:3a:d3:35:30:40:a2:2e:77:d9:71:ee:ff:68:f4:
         3c:c2:42:4a:95:55:1f:04:9a:ed:5f:23:98:5e:24:65:e7:65:
         24:46:a8:90:a1:4e:3a:4d:4f:eb:91:80:03:16:9c:93:a4:37:
         f2:82:9f:93:74:60:92:5b:f1:53:b5:e6:92:21:b5:75:68:76:
         a8:62:d3:f9:e8:73:35:e3:75:83:9a:df:55:1e:1a:83:5d:e1:
         30:22:5f:67:45:1b:49:9b:d0:5d:5f:cf:fe:25:a2:57:7c:34:
         36:f3:5e:61:34:43:80:3f:bc:8f:a1:16:e8:a0:c9:ae:57:fc:
         ec:a5:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:26 2026 by rpki-client