This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File:                     A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier:          0X7pVmG/OqNGUO7aKnHgkV1kmfzVfnObbFF3XQfnSLQ=
Subject key identifier:   44:12:08:2C:3F:1A:31:77:FA:41:94:B9:E7:07:52:D0:34:23:7E:34
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer:       /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial:       019C43C6F449132282ACBEB618BBDC29DAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number:          06D7
Signing time:             Mon 09 Feb 2026 19:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:37 +0000
Files and hashes:         1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: fUb5th8S1U+v2HB7KkHxIGtqRAsnm/y+m5QPdfjsrzs=)
                          2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:f4:49:13:22:82:ac:be:b6:18:bb:dc:29:da:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
        Validity
            Not Before: Feb  9 19:00:37 2026 GMT
            Not After : Feb 10 19:00:37 2026 GMT
        Subject: CN=4412082c3f1a3177fa4194b9e70752d034237e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:94:c7:73:70:bc:b2:09:50:d7:41:5c:e9:
                    fd:f6:ad:91:69:2e:db:da:26:3e:44:01:1c:ee:19:
                    30:44:ea:04:76:1c:26:9b:64:6d:2d:b0:91:e0:64:
                    97:a9:a5:51:14:05:8f:8e:83:4e:02:2c:26:a6:e5:
                    76:be:37:d4:ee:c6:55:63:a7:d8:c7:86:8f:d4:28:
                    56:81:d1:f9:ba:1f:fe:ef:a4:61:3f:ec:0c:66:7c:
                    68:ba:a8:f9:b9:88:99:f2:3b:f8:1d:c7:61:a0:f0:
                    e3:ae:a7:d4:0e:65:12:32:a3:2b:4a:3d:07:28:de:
                    a1:48:c0:0a:d5:76:0a:20:64:9d:f9:27:b0:92:98:
                    a5:93:d7:21:63:36:1a:d6:68:f4:ed:2a:a2:94:ef:
                    c2:df:49:12:67:fc:38:e2:a0:fb:e2:e4:0d:00:5a:
                    36:15:d6:ec:37:4b:dc:29:cb:c1:03:74:25:a6:12:
                    7e:61:80:6f:d9:a2:09:bc:3e:ab:e5:db:2c:ef:14:
                    0f:f1:34:5b:cf:49:64:e5:8e:70:28:98:13:de:43:
                    7e:db:92:a5:ed:0d:b8:17:17:5e:8a:cb:19:cb:de:
                    83:47:90:b1:55:21:06:0b:45:e4:26:22:00:fa:65:
                    14:38:ce:4d:4e:80:f0:32:fe:10:96:59:9a:a3:de:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:08:2C:3F:1A:31:77:FA:41:94:B9:E7:07:52:D0:34:23:7E:34
            X509v3 Authority Key Identifier:
                keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:95:05:92:bf:42:27:c9:84:b1:5f:0f:7e:68:48:e8:b2:37:
         f0:76:d8:e2:f6:96:78:2b:a4:26:b2:86:1e:3f:13:93:cd:d9:
         01:e0:20:53:3b:5f:62:10:25:75:74:da:19:1c:51:4f:70:eb:
         26:4b:8b:81:17:9f:fe:2f:e2:cf:57:40:92:10:30:1f:5e:ea:
         bb:25:e9:40:8c:05:b4:c7:a6:27:49:1b:e0:9c:cb:4e:f3:76:
         d4:0d:ae:49:5d:32:bd:60:fd:83:a4:fa:8f:91:27:0b:50:10:
         92:fd:56:8f:84:38:2d:1a:fa:6f:90:71:c5:a8:96:45:c6:49:
         db:a2:60:5c:4e:75:6f:50:07:b7:ef:50:71:c5:0d:52:41:fb:
         f7:8c:7e:c1:37:f4:db:e2:e3:fb:bc:68:3a:79:9b:5e:63:4a:
         e7:86:e5:b9:7d:73:f2:64:48:26:9b:74:34:6d:18:74:f5:fd:
         5c:a0:99:c2:3a:df:55:d4:09:95:4b:a1:15:98:dd:bc:69:89:
         cd:41:1a:da:51:c4:09:c1:94:9d:06:bc:d0:33:50:56:07:32:
         8e:8a:7a:a3:52:23:0e:0c:aa:09:a9:45:ad:b9:1e:9d:01:dc:
         64:fa:1a:05:1c:e9:32:4e:e4:5c:72:4b:b5:dc:29:26:fd:cb:
         72:98:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:33:33 2026 by rpki-client