This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File:                     0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier:          6r4Cod922b/nRDx9VOAME1nHLQ3BmkKG2eS7Y0qNzMI=
Subject key identifier:   8F:C5:B5:EB:04:65:91:B8:B5:40:65:0F:D6:1B:A7:80:9E:E2:53:85
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer:       /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial:       019C41D8E5AB07B536AA226AF393CD035252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number:          04CA
Signing time:             Mon 09 Feb 2026 10:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:59 +0000
Files and hashes:         1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: kr3oqGnXNwjHFZvS9APzNQKgmK1Jml/WMS1e8SJHg9I=)
                          2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:e5:ab:07:b5:36:aa:22:6a:f3:93:cd:03:52:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
        Validity
            Not Before: Feb  9 10:00:59 2026 GMT
            Not After : Feb 10 10:00:59 2026 GMT
        Subject: CN=8fc5b5eb046591b8b540650fd61ba7809ee25385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:7a:af:92:f7:22:74:b2:59:1b:71:72:25:
                    7f:ee:2e:c7:40:a5:10:b9:a1:88:96:1d:fd:12:61:
                    42:27:2c:8c:f4:49:e9:f2:35:fe:b5:53:0d:0f:74:
                    13:b2:8d:49:77:5d:13:40:cb:8e:45:6c:40:7a:0a:
                    27:77:03:d1:c0:71:69:08:f6:cf:14:50:a6:13:ba:
                    55:fe:c7:94:8e:fc:08:2a:6a:ee:53:d2:5c:1d:54:
                    97:e8:5b:d6:e6:21:9e:d5:0d:62:04:4a:29:9e:9b:
                    01:d5:94:fb:1f:3d:31:b5:54:da:21:26:c3:60:9c:
                    d6:f8:cf:af:9d:81:15:ba:7b:29:c0:4b:80:13:9f:
                    f6:5f:e5:96:17:52:28:f2:eb:89:51:28:aa:ae:8a:
                    b5:ca:91:ac:ad:6b:83:88:d1:d7:83:94:4e:85:73:
                    64:45:9f:c7:d2:33:01:df:4c:ab:71:13:b0:35:e6:
                    11:61:6b:b8:c3:9b:2d:91:ba:15:6c:ce:ee:a9:89:
                    8f:0d:bc:03:c7:3b:d7:8b:f3:6a:aa:8a:a6:37:9e:
                    5e:1d:7c:bb:e2:30:3c:bc:0a:9b:34:d7:e0:35:2f:
                    27:95:cc:7b:fe:48:c6:e4:dc:2f:da:06:10:b1:39:
                    ca:82:c1:b6:38:ae:54:97:b0:9b:9d:4b:0a:81:03:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C5:B5:EB:04:65:91:B8:B5:40:65:0F:D6:1B:A7:80:9E:E2:53:85
            X509v3 Authority Key Identifier:
                keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:07:4f:54:d8:e0:12:59:93:7e:bc:7c:d1:c4:e3:80:8f:
         9e:d5:11:02:05:94:68:b3:b1:b1:58:55:2a:66:98:22:8e:6a:
         dc:af:06:0c:08:5a:32:3e:50:fb:46:da:d8:01:ae:33:cb:82:
         8f:29:af:fe:cc:38:07:10:21:08:00:79:2e:48:82:6c:c9:9f:
         ae:a2:05:81:03:7e:e2:0f:eb:44:33:07:ce:34:50:03:55:e3:
         4e:75:a5:67:46:25:8a:64:5f:7d:32:7b:8a:00:70:53:e8:a1:
         b8:9f:1c:2a:e5:31:08:09:36:ba:5f:cc:4f:99:a6:27:a8:00:
         3d:a8:8f:d3:bc:6d:a9:ed:29:00:65:af:18:24:e7:f3:0a:3d:
         af:08:3b:f2:72:f6:2d:1d:88:a0:a8:f0:2c:1d:2a:02:4f:62:
         a2:16:1c:36:d2:4f:9f:2c:53:6e:14:60:a9:3e:5f:b1:2a:14:
         fd:fc:fa:4b:6e:f2:50:f6:85:73:e6:40:3a:eb:cf:a6:cb:bd:
         67:e6:ba:93:94:d1:5b:40:63:a5:67:60:a1:cb:c8:e2:ae:79:
         bf:cf:32:ae:8a:00:3a:e2:1b:c0:68:ea:f5:9f:99:83:f1:0c:
         e2:e7:74:5b:9c:cd:42:ed:cd:6e:a1:88:17:10:43:b0:49:c7:
         e2:a0:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:00 2026 by rpki-client