This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File:                     8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier:          r9CjpUqPYiiNCMCaPd3Qqrd04s07QklJfqIJiX8FkRY=
Subject key identifier:   86:A8:EF:F8:61:CB:C1:1B:E3:75:0B:DD:2E:56:03:28:A6:AD:AA:45
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer:       /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial:       019C487F50F39E1E98BAB509826B2BDE7117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number:          0992
Signing time:             Tue 10 Feb 2026 17:00:29 +0000
Manifest this update:     Tue 10 Feb 2026 17:00:29 +0000
Manifest next update:     Wed 11 Feb 2026 17:00:29 +0000
Files and hashes:         1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: F4iOwDTNlmr3N8ncs8j0Dhgbezlb/hWdDiSV54jvuw8=)
                          2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:48:7f:50:f3:9e:1e:98:ba:b5:09:82:6b:2b:de:71:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
        Validity
            Not Before: Feb 10 17:00:29 2026 GMT
            Not After : Feb 11 17:00:29 2026 GMT
        Subject: CN=86a8eff861cbc11be3750bdd2e560328a6adaa45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:44:65:e6:c0:7b:22:b4:d5:0a:a9:b3:1a:
                    11:b8:94:36:ad:ba:e9:90:7d:d2:1c:1a:c2:66:aa:
                    f7:61:d7:ab:ca:63:e1:84:6b:7c:da:e8:cf:11:bd:
                    73:2f:ed:d9:57:6d:c6:18:c8:b9:f4:d7:c7:28:b1:
                    7c:af:55:2b:48:7d:a2:19:3c:2d:90:24:0a:c8:0c:
                    09:56:0c:4c:13:e3:7a:73:af:47:de:7c:2a:57:b4:
                    2c:37:ad:08:d3:53:54:95:29:2f:86:0a:9a:34:52:
                    5b:22:55:92:f6:ad:1e:4c:fb:33:4a:84:4e:28:5d:
                    47:77:26:94:fa:b9:64:63:39:86:be:02:3e:3e:8e:
                    a0:50:03:41:46:2d:45:3c:b3:09:9c:e3:44:cb:66:
                    89:c4:19:fd:81:2d:a4:22:b3:41:e0:e2:a4:9a:6f:
                    5c:d1:e2:a0:55:2a:5b:4f:4c:f6:a7:b2:a6:e7:e2:
                    b4:bc:6a:e1:96:20:a8:34:4f:19:17:fa:84:49:99:
                    0a:ac:6b:e2:82:7f:3b:63:a3:23:4b:29:9f:3f:49:
                    49:4f:9f:d7:3a:da:49:11:ba:53:f2:4b:8b:a3:54:
                    ae:55:27:16:5e:68:9b:64:39:c3:ba:cc:56:72:f9:
                    76:10:02:38:7c:30:f0:10:f8:28:78:5b:40:ab:3f:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:EF:F8:61:CB:C1:1B:E3:75:0B:DD:2E:56:03:28:A6:AD:AA:45
            X509v3 Authority Key Identifier:
                keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:20:0a:73:32:db:90:f8:85:51:be:4c:f3:8e:ce:f0:96:95:
         69:a3:ee:35:c2:f6:44:8e:36:32:a3:c1:6a:93:a9:11:01:d9:
         e1:49:25:69:04:d9:3a:92:55:91:38:27:6d:0c:d8:fa:4b:6c:
         ee:1a:49:48:0b:d4:9d:88:b1:88:1f:a1:ae:8a:e5:3a:a5:a2:
         28:ad:ab:75:63:64:8a:30:54:8d:ab:48:b3:81:b9:bd:40:72:
         d3:55:c7:d0:4f:fa:18:e9:a7:29:b3:f9:dc:32:d3:50:8b:e4:
         f1:1a:38:b5:48:a4:85:af:5f:b9:01:e2:e0:23:0c:33:2a:ec:
         0f:d2:b9:74:f3:06:cd:91:92:b0:88:27:4b:12:42:5d:80:cd:
         e8:b9:e1:38:85:79:a8:fa:77:c1:10:ed:8b:94:d0:20:50:68:
         87:eb:ae:93:1f:73:f4:e0:b7:2c:98:c4:db:8a:f0:cf:be:7a:
         1e:df:b1:ff:73:d6:c3:b0:53:b5:13:ad:43:f6:65:1b:34:d7:
         f2:a7:aa:0b:0e:23:af:91:9d:c0:d7:33:46:c4:9d:45:ae:04:
         3c:11:63:80:f8:14:bf:96:3f:f1:c4:1d:eb:7b:3f:e4:4b:e6:
         f6:c9:7f:bb:f8:64:df:eb:c3:a3:63:ac:a6:24:c4:d6:ce:85:
         a9:17:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 02:29:31 2026 by rpki-client