This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File:                     AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier:          eblV+k2g3cH0XFuH1nrdGBbG2BuIWt1uDmWmPQPoE9Y=
Subject key identifier:   F4:CF:2A:02:A2:2C:A3:5F:A8:48:FE:57:B3:A8:41:C8:39:36:17:11
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer:       /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial:       019C4322DFF2248B416E0C129E1D2235BF40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number:          078F
Signing time:             Mon 09 Feb 2026 16:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:24 +0000
Files and hashes:         1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: dTjlPFYGxFT46Hu/gIe1WImpPy9j0uCntnw1d5YyzEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:df:f2:24:8b:41:6e:0c:12:9e:1d:22:35:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
        Validity
            Not Before: Feb  9 16:01:24 2026 GMT
            Not After : Feb 10 16:01:24 2026 GMT
        Subject: CN=f4cf2a02a22ca35fa848fe57b3a841c839361711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:ea:90:5b:f9:69:06:c2:b9:2f:d0:6b:3d:
                    e0:dc:e0:e0:5c:fd:b6:84:00:1c:df:41:f7:4a:57:
                    48:ad:d4:98:00:5e:45:98:98:3f:42:e3:bd:22:9f:
                    b1:f0:af:6d:66:a5:1f:2a:cd:43:d5:5f:e7:f8:e2:
                    1c:ed:45:7a:d6:ee:e4:7f:cd:84:c9:31:62:49:b9:
                    11:80:6a:cc:e9:9f:a5:61:4d:87:41:43:4f:9c:2d:
                    15:be:a7:7e:79:f3:60:46:c6:8d:4d:ec:47:19:3f:
                    ba:8a:98:6d:e2:e2:47:0c:f5:6b:1c:8e:5f:2d:90:
                    ca:ee:8e:c7:00:64:60:f1:65:e7:9e:d2:62:6c:77:
                    51:ce:e4:97:38:b1:b1:e9:5b:98:87:25:5c:50:21:
                    fd:7b:c8:28:62:9b:bc:a1:75:c4:10:cd:b4:7d:d9:
                    36:98:50:c9:0d:0e:5f:7f:e6:3d:c5:c6:cd:c2:d5:
                    d8:b5:1d:99:e1:28:38:48:7f:42:69:5f:ce:f1:f5:
                    71:8f:c1:49:41:aa:ff:62:f7:c7:43:c3:10:3d:80:
                    ee:10:d6:b1:83:ff:2f:e4:4d:1d:f0:24:f1:9e:c6:
                    81:56:22:ac:71:ee:a7:bc:ab:7b:36:05:84:25:1d:
                    c9:75:08:dd:51:c3:96:10:af:d5:6c:03:f4:eb:98:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:2A:02:A2:2C:A3:5F:A8:48:FE:57:B3:A8:41:C8:39:36:17:11
            X509v3 Authority Key Identifier:
                keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:07:ba:04:d1:e2:6e:aa:22:95:86:fb:01:89:6b:06:4d:77:
         79:4b:e8:53:72:cd:e9:b5:51:7d:ae:38:e9:9c:c5:6a:13:64:
         24:5a:70:fd:7b:8d:7c:a2:4d:c3:b1:c3:63:b9:15:af:9f:f9:
         18:b5:9b:ba:7e:e9:1f:4b:ac:02:cc:c0:41:a5:a9:f8:bb:d3:
         62:bf:78:fa:d9:37:81:92:52:b6:36:b1:34:0c:5e:41:c9:29:
         de:e3:8a:ca:66:30:35:b8:0c:44:60:90:08:8f:95:dc:e2:df:
         11:27:68:4b:a9:e4:ca:ea:4f:3c:a6:be:4e:dc:9a:96:06:6d:
         81:ad:a4:d1:eb:38:0b:26:6c:5f:9a:17:e7:1b:12:a0:5b:27:
         3f:25:1b:d7:37:98:e8:d7:8c:1f:a7:ea:e3:67:d1:77:67:4c:
         5d:e5:69:60:58:e9:23:42:59:ba:fd:8e:4d:06:f2:d7:90:b6:
         7f:8d:6d:7e:ab:3f:ee:66:9c:f7:11:2e:06:f1:7b:00:42:5d:
         53:e7:c0:b5:86:a3:55:18:7b:86:cf:c3:4b:83:c0:80:99:7e:
         af:e9:e4:6f:82:24:98:d7:03:e2:e1:1d:d6:ae:c0:bc:b4:ee:
         c9:8c:28:20:90:dc:65:7d:66:19:e5:35:ad:01:2b:7d:36:20:
         94:21:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:55 2026 by rpki-client