This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File:                     AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier:          Teu5BsQB02I9KAKBYMmwxZ/FkwhvErcIXNeeKZc5pYA=
Subject key identifier:   A7:40:93:2E:7E:0C:4F:7E:CD:84:FD:F0:65:E8:0C:6C:80:1A:69:1A
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer:       /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial:       019C439076CF8C8E40337C61703DECFA5637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number:          08E7
Signing time:             Mon 09 Feb 2026 18:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:06 +0000
Files and hashes:         1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: 058XV4XixNLb2IKaeN4iiKRrRhRoO/QQYsEHowkaUWE=)
                          2: JpSPlDAfnmaVaihRumPcTPfmvXc.roa (hash: Y5Z9rAeAn1T7cnOOHo3m55iyERIOyEhwXNrdUR5k5k4=)
                          3: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (hash: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:76:cf:8c:8e:40:33:7c:61:70:3d:ec:fa:56:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
        Validity
            Not Before: Feb  9 18:01:06 2026 GMT
            Not After : Feb 10 18:01:06 2026 GMT
        Subject: CN=a740932e7e0c4f7ecd84fdf065e80c6c801a691a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:93:2f:28:a1:fa:0e:87:e1:ba:df:45:83:
                    e2:df:5e:27:7d:88:74:a7:bd:e5:8a:54:07:4d:31:
                    e0:0f:80:b2:79:f8:da:5e:6b:29:ba:74:c4:eb:fe:
                    f6:df:bb:a8:b8:7d:1e:65:f6:d0:22:f2:3c:03:80:
                    75:f8:35:50:c4:07:d2:84:8e:ad:fe:09:44:88:16:
                    f2:5d:05:64:04:aa:d4:87:4c:dc:62:0f:54:3b:f1:
                    f7:4c:14:c9:99:22:8a:19:c2:9f:dd:4c:38:47:42:
                    2a:3d:da:75:b6:f9:13:54:5b:19:db:bf:44:81:da:
                    2d:30:d5:62:c9:57:63:13:d9:1e:2d:eb:23:11:d5:
                    fb:40:31:43:b8:e3:48:59:6b:d3:a6:94:55:00:e3:
                    71:93:bc:64:12:10:94:ca:30:02:39:b2:7b:e0:d2:
                    b0:7b:0d:0b:35:c1:dd:e5:7c:ef:b0:1a:bf:b8:e6:
                    d0:33:63:ab:35:af:fc:c5:bd:d0:d2:c2:63:63:53:
                    83:44:b0:ff:66:38:5d:2e:b8:eb:b3:47:63:99:32:
                    56:bf:e5:a7:de:f6:7c:a2:a3:2e:c5:10:46:a5:b5:
                    79:cb:d7:71:e1:3f:e5:0e:c4:be:b4:23:6c:8e:c3:
                    68:4e:0f:f9:8b:28:e0:28:62:05:cd:b1:91:79:2d:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:40:93:2E:7E:0C:4F:7E:CD:84:FD:F0:65:E8:0C:6C:80:1A:69:1A
            X509v3 Authority Key Identifier:
                keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:51:1c:1a:0f:24:d7:4f:28:4c:0e:55:e7:5b:53:a3:f6:
         ae:68:46:31:6d:8a:d8:92:7c:41:f7:df:32:01:48:43:2e:02:
         fd:11:d5:ee:d7:dd:d1:f2:d5:99:ee:ba:c2:6c:ed:e3:49:7a:
         7a:36:e9:5e:19:8f:40:f8:c5:12:8d:b9:07:54:d2:e7:35:83:
         61:e9:4c:73:8e:97:0c:cc:e4:8c:ed:c6:84:e4:a1:69:15:a6:
         72:cf:01:dd:15:76:46:fa:c9:bb:22:ed:1f:7b:58:e4:d7:91:
         aa:40:6b:21:78:f0:65:a1:3d:41:d3:a1:16:76:84:86:ec:1a:
         8d:59:53:4d:ce:56:7d:27:97:dd:c6:34:13:2a:0a:01:4c:6e:
         18:53:62:1d:13:61:da:c8:9a:e8:1d:18:7c:b3:0e:2a:cc:75:
         9b:d7:a1:1e:f2:51:57:04:01:7b:27:cf:d5:4d:88:3e:71:8d:
         65:e9:89:b3:7b:9f:0a:49:51:22:40:6b:39:a7:6c:f0:f7:09:
         0a:f8:e3:40:d0:5c:f2:bb:a6:f2:6e:30:9f:3b:56:b2:ab:ee:
         d8:a8:dd:32:35:46:9c:67:58:2c:73:b8:89:cd:b1:3b:9f:ce:
         d7:55:40:cf:52:0e:3f:6d:b7:19:29:4e:60:17:af:41:cd:98:
         9f:23:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:55 2026 by rpki-client