This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File:                     8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier:          rcz4DxNq5Fc2m8sJLnmSSOTJ+/WSYdCx3o2SWrWaYt8=
Subject key identifier:   B0:24:AF:6A:4D:92:86:9D:08:7D:3B:5C:55:02:D5:B0:08:6B:32:21
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer:       /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial:       019C42B47DFF0C34252B47B483A0397AA0F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number:          0E6C
Signing time:             Mon 09 Feb 2026 14:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:50 +0000
Files and hashes:         1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: nOoMreZ98HMUigyDN5f4P8sBI8CKMNfj5lSoL3wYPUA=)
                          2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
                          3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:7d:ff:0c:34:25:2b:47:b4:83:a0:39:7a:a0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
        Validity
            Not Before: Feb  9 14:00:50 2026 GMT
            Not After : Feb 10 14:00:50 2026 GMT
        Subject: CN=b024af6a4d92869d087d3b5c5502d5b0086b3221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:a9:5e:a0:b8:27:b4:40:e1:7a:b8:3b:a1:
                    de:97:1c:f2:c9:9e:0f:3f:76:8a:24:95:a9:ed:fd:
                    0e:59:19:13:9f:75:9e:fc:b7:e5:12:c5:2b:53:61:
                    49:cf:9e:db:d8:e3:5e:78:0f:05:32:b1:31:2f:a3:
                    9f:10:8f:18:f7:c5:2a:81:35:d1:21:e4:7a:09:de:
                    23:b9:17:0c:db:60:aa:49:51:48:a8:ac:3e:18:68:
                    2d:bb:9e:34:f0:ed:e5:82:ae:e5:94:1d:34:a6:06:
                    0d:ea:40:87:20:b9:36:4b:42:bb:c6:ba:ae:18:61:
                    08:a0:27:21:bf:e1:c6:f3:9e:28:c2:e3:80:71:62:
                    fc:6d:08:c2:0f:31:8a:10:8e:1d:70:00:0b:06:20:
                    e4:fa:79:8b:a2:28:cc:77:23:95:44:12:b9:13:48:
                    dd:07:39:fc:14:c9:8b:c8:a6:91:3b:5d:fa:f3:73:
                    b0:91:9f:54:a2:8d:16:e8:34:b3:f4:17:a6:22:79:
                    5a:32:2b:b6:56:5d:0b:4a:ac:d1:63:e7:db:c9:c3:
                    5e:fd:47:b3:34:47:e7:48:d8:d8:50:d2:cd:a4:27:
                    69:60:72:00:d7:95:3c:11:45:95:43:e1:71:a0:c1:
                    c7:42:d9:57:cc:b9:88:06:df:d7:26:b0:22:8f:60:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:AF:6A:4D:92:86:9D:08:7D:3B:5C:55:02:D5:B0:08:6B:32:21
            X509v3 Authority Key Identifier:
                keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:93:10:db:c3:69:1f:bc:51:6c:f8:e9:b7:dd:d4:28:c0:d8:
         9f:46:f3:65:a2:6c:63:85:5c:a6:39:29:3d:d5:54:48:64:ab:
         d3:71:1a:9f:fc:11:65:f3:c7:7d:0f:ab:02:48:21:a4:9a:c6:
         a8:9e:5a:ab:30:a9:d7:98:1f:e1:77:12:71:c9:53:82:bf:57:
         b8:22:ba:37:43:17:57:aa:0a:8d:e8:68:8b:ac:10:92:27:92:
         a0:b7:68:4f:0b:22:af:6c:ce:39:e9:5a:ef:44:76:7b:ca:26:
         05:de:f9:d6:19:02:81:e2:72:d4:1d:50:bf:33:cc:0a:54:06:
         ab:79:4e:6c:22:b6:4e:5d:09:e2:6a:18:b6:2b:27:6e:33:0b:
         c3:2f:98:95:67:70:25:5e:b2:7e:ed:34:7b:6d:d6:0e:10:8a:
         d0:f7:ba:51:e1:ac:87:c8:36:62:09:38:fe:66:45:84:bd:fd:
         0c:9b:2d:7e:c6:7c:18:b1:f9:0b:f8:de:2c:bd:5e:1b:27:d8:
         64:2f:93:cc:ca:61:f2:a7:1a:6e:ec:c0:da:bc:90:55:a8:89:
         ee:ac:71:91:00:01:99:df:e0:dc:6d:93:f4:11:7e:f5:a5:e1:
         39:45:fd:58:38:f8:66:2c:1e:06:8b:b9:8b:80:97:9c:e3:e7:
         7c:bc:65:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:29 2026 by rpki-client