This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File:                     R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier:          CYJqQQ+4F4faA098gAEwtTUSTJAc6JjfMo/TOjlKqvU=
Subject key identifier:   D0:C6:75:14:5B:5B:AF:70:B4:EC:60:AD:5E:7D:CD:82:0C:4B:BD:B1
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer:       /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial:       019C41D835B079F9DA499D2A29E24C7F012E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number:          0817
Signing time:             Mon 09 Feb 2026 10:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:14 +0000
Files and hashes:         1: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: Y98PCgjxpIxjBEtcDK/Bu4Qku8g7mZV1hIOlI5/n9g0=)
                          2: WTosev28vey7PdFKL1WZrUA91xA.roa (hash: ekI8w6gEsIIlqKjdpz2Fpya3mgwzySEILZV+ipAS2Wc=)
                          3: oRnNr1FlB4M-Ncw9fTwXwhAU40Q.roa (hash: y4K7So4r58lf5Yn7iRGJ9lrvo2ssl9GpvWxcRF0or7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:35:b0:79:f9:da:49:9d:2a:29:e2:4c:7f:01:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
        Validity
            Not Before: Feb  9 10:00:14 2026 GMT
            Not After : Feb 10 10:00:14 2026 GMT
        Subject: CN=d0c675145b5baf70b4ec60ad5e7dcd820c4bbdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:d1:c5:b4:16:c1:f1:31:a6:78:49:ad:b5:
                    fb:c6:f8:8b:98:64:fa:05:43:f2:8a:d0:9a:63:2b:
                    ba:0c:c9:76:9e:2c:01:00:6c:23:d8:d0:38:af:b8:
                    76:bb:34:29:de:2a:b3:d9:d1:1d:69:87:e0:a6:ed:
                    0c:c4:0a:de:30:33:d6:e6:ba:e7:22:c2:8d:61:1d:
                    22:62:95:fe:f1:a3:9b:f2:65:98:d7:74:b2:a2:d8:
                    b1:04:c1:2f:df:be:a9:24:44:0f:08:30:08:b0:ab:
                    d4:0a:e7:ee:9b:ab:9b:a3:a5:48:c9:99:ec:f5:a0:
                    9b:fd:e1:8b:59:01:1b:c7:6b:04:13:ba:c7:7d:d8:
                    86:14:d2:3c:fe:96:7d:c2:57:cf:c8:60:9f:01:fe:
                    25:5f:91:66:60:17:10:03:1a:9a:c5:7a:27:16:4e:
                    e1:2b:9c:4e:a6:f1:1e:53:da:3e:32:c2:a1:1c:56:
                    7c:d8:25:a2:c9:9e:28:c9:74:d8:bc:30:41:f8:f2:
                    6d:73:80:ae:43:fc:e5:49:a6:8f:bd:4f:3f:21:bd:
                    20:f5:95:24:48:14:6d:f6:87:34:b3:02:d8:26:41:
                    5a:15:e2:9a:7d:dc:50:1c:4e:7a:21:93:6b:85:12:
                    60:19:88:5a:72:4b:c6:cb:ad:7c:f0:f4:c2:74:e5:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C6:75:14:5B:5B:AF:70:B4:EC:60:AD:5E:7D:CD:82:0C:4B:BD:B1
            X509v3 Authority Key Identifier:
                keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e7:66:29:86:92:bf:6a:29:3d:87:09:ee:01:cd:53:25:f5:
         88:55:10:67:9c:3b:80:1c:b2:70:c5:db:70:a1:30:43:bf:e7:
         3e:07:24:b3:70:30:3e:96:b4:be:0c:8d:13:1e:64:a8:f6:b0:
         15:ca:aa:2f:70:53:3d:59:79:0d:0e:ad:a5:91:2f:b6:80:50:
         8f:12:90:b4:fd:8c:a2:67:c9:f7:4f:37:42:b2:e5:04:02:55:
         aa:77:4d:ae:6b:9d:cd:37:39:f8:3f:5f:71:5f:fc:cc:d7:f3:
         3c:76:28:45:36:d9:b4:82:e2:e6:f2:ef:3a:90:e1:95:d5:6e:
         a2:a2:23:09:45:4e:19:8e:73:be:b1:e5:ad:a1:16:10:61:60:
         ef:35:62:35:07:7f:87:22:a7:3a:86:f7:7d:73:44:a1:0c:22:
         02:83:25:8e:5b:1c:ae:25:78:ee:1b:77:21:09:2c:1f:5c:e9:
         d1:23:e3:fb:84:4d:d4:80:55:cd:02:0e:1a:de:dd:fb:4b:0f:
         27:35:38:b7:01:84:c2:ea:a9:2c:30:9a:1b:50:08:ce:6a:88:
         00:73:11:5d:fb:ae:76:df:fa:b6:8c:9c:21:36:3e:03:1f:64:
         7b:99:17:36:05:8a:69:e4:80:cf:18:cf:63:65:09:a1:ab:4d:
         c0:95:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:33 2026 by rpki-client