This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File:                     m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier:          wDhw6xtsDTXRVWAuyXHEL5cKjrH+hKd6j/Cn23G/72k=
Subject key identifier:   B4:65:36:59:17:BA:4F:27:14:E0:5F:84:E9:C7:90:1D:3A:86:97:B3
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer:       /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial:       019C446B5DB49005B35F0267FA074F64EA09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number:          1061
Signing time:             Mon 09 Feb 2026 22:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:12 +0000
Files and hashes:         1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
                          2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: HpNK0TJzdTSM+qoTENeDZu45FfSypK24Wcxh42ZRF5Q=)
                          3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:5d:b4:90:05:b3:5f:02:67:fa:07:4f:64:ea:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
        Validity
            Not Before: Feb  9 22:00:12 2026 GMT
            Not After : Feb 10 22:00:12 2026 GMT
        Subject: CN=b465365917ba4f2714e05f84e9c7901d3a8697b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:cc:3e:13:77:44:93:f9:45:b3:f3:5e:76:
                    5a:5a:a4:a2:ef:81:4b:05:5d:dc:93:96:c1:65:11:
                    81:ab:0b:23:88:79:7f:c6:02:60:99:d1:52:61:e7:
                    6d:d2:44:ed:35:14:8a:2d:b5:63:dc:30:cf:ba:a6:
                    11:06:22:e9:a1:bf:55:4a:ba:70:5a:af:50:2c:b0:
                    c7:68:4b:ee:89:5a:f7:37:0b:1b:99:b2:cb:6a:e2:
                    45:0f:27:40:ce:ce:c8:3e:df:cf:97:c3:2c:16:80:
                    cb:75:e5:6b:02:20:d9:dd:5d:7a:13:2d:2a:3c:f4:
                    45:76:9b:d4:40:f8:7e:61:55:f8:79:7b:2f:96:40:
                    55:62:ae:8f:2f:81:8a:17:11:e8:4a:ad:30:be:5c:
                    5b:04:82:09:86:44:0b:7a:09:21:1b:b2:6e:1c:14:
                    a3:d1:cf:bf:42:88:2c:03:28:5c:20:c4:f6:3b:a0:
                    82:31:62:2a:3b:20:63:e4:19:1f:f4:52:a2:86:cd:
                    ef:31:dc:40:d4:40:8c:08:cd:29:c5:fa:c3:1e:b7:
                    15:90:ac:bd:b5:fd:bd:66:5b:93:cf:01:ff:e4:fb:
                    46:58:02:37:c8:30:9b:7f:bb:21:46:f6:d7:18:cb:
                    a3:d4:d4:31:c2:57:66:25:71:7b:a3:94:3d:27:22:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:65:36:59:17:BA:4F:27:14:E0:5F:84:E9:C7:90:1D:3A:86:97:B3
            X509v3 Authority Key Identifier:
                keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fc:1d:8d:1a:2b:58:0d:8f:5e:d8:33:d4:91:6f:91:e0:86:
         46:b3:0b:e1:90:7e:e9:0c:30:d3:44:08:10:68:7c:38:ad:56:
         bf:c1:a5:35:da:02:a9:cd:f7:44:0e:0a:2e:1d:27:28:7b:c8:
         ab:18:f8:83:c0:35:5c:61:a5:fe:82:29:35:02:4e:14:e0:89:
         98:08:fb:20:ed:c4:a0:fd:f0:22:64:4c:71:b3:86:4e:3f:1f:
         d2:bc:1b:cc:49:39:99:f8:55:0f:32:69:dc:6b:f1:fb:7a:cd:
         e8:fb:9f:ae:6b:d0:68:52:0b:f9:45:a6:bb:10:36:dd:44:18:
         fd:fb:3e:8e:65:84:86:ff:f4:6b:8c:99:48:dc:3a:4d:0c:4f:
         04:5b:55:fe:8c:c1:b9:6c:9b:8a:19:4c:eb:f2:72:e9:73:11:
         78:a5:12:78:48:4a:be:14:a0:d0:90:8b:1b:35:19:fa:ca:9f:
         ff:47:b5:ff:48:7a:e8:ad:42:ab:bd:35:29:06:34:92:5b:86:
         9b:a7:0e:37:d7:2b:2a:7b:a3:bb:a0:3e:91:d2:3a:fc:4b:a6:
         3b:b0:3e:b0:bc:46:99:10:65:87:a0:e1:93:f1:4d:d7:b5:0e:
         9d:0b:67:c2:e4:9a:8f:46:46:33:f3:10:b8:3f:62:fd:4c:28:
         43:21:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:42 2026 by rpki-client