This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File:                     b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier:          dr7oYHiFvE+9IHLv34V6V1W9IGI7DEX66HHBaMG7VDU=
Subject key identifier:   71:70:4A:DE:DA:B0:7D:9C:CF:4B:53:87:10:D1:8C:C5:8E:49:C7:E1
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer:       /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial:       019C42B43C04F9F2CFCA9CDE3B730E8A0182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number:          0C1E
Signing time:             Mon 09 Feb 2026 14:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:33 +0000
Files and hashes:         1: V8n8ydghZMpsaWS-dFmHBwi4qdE.roa (hash: wby6j6Fvc4buadteItu1tm7omgxplHfuuMsm39nmHJc=)
                          2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: kzsoU7NP0Nmoyc9HtfqjxVxiIq0D01l1PiYzknBfhcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:3c:04:f9:f2:cf:ca:9c:de:3b:73:0e:8a:01:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
        Validity
            Not Before: Feb  9 14:00:33 2026 GMT
            Not After : Feb 10 14:00:33 2026 GMT
        Subject: CN=71704adedab07d9ccf4b538710d18cc58e49c7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:a9:c6:76:80:27:12:dd:13:cd:b6:93:9f:
                    12:16:75:cb:83:bd:48:be:58:0d:4e:81:f3:f6:95:
                    82:68:25:5d:c6:34:7b:b4:68:b6:59:55:24:e5:25:
                    cd:70:e2:45:b9:58:70:74:27:c3:d2:96:38:86:49:
                    ff:31:83:74:c6:27:e2:9b:89:4f:8f:f1:44:d7:21:
                    bd:1a:19:71:40:66:84:ec:f5:a7:14:9c:ed:97:6a:
                    9f:3d:94:81:3a:5f:15:7a:4e:0f:46:80:38:2a:0c:
                    fe:54:d2:df:ab:f4:db:56:83:11:0f:cd:77:0c:98:
                    30:01:91:10:a6:6f:7b:e1:20:ff:ce:3d:29:5c:c5:
                    e9:fc:2f:65:e5:86:ac:7c:bb:cf:13:53:4a:02:5e:
                    ad:29:6f:72:8f:35:c5:12:52:ae:da:45:38:42:65:
                    a2:cb:4a:e9:c9:7a:ca:df:4d:d9:60:60:37:0f:67:
                    13:6c:6a:d4:98:b9:11:45:86:bb:a0:38:8d:ac:da:
                    c7:d2:f6:99:f0:b8:f0:c5:6e:4e:29:81:db:87:c2:
                    98:51:c0:05:55:ad:aa:12:e2:31:62:ca:09:7b:f4:
                    ed:65:8a:33:b4:da:89:c3:e7:70:ab:74:f6:48:a6:
                    58:f3:de:a6:d8:6e:ae:9e:3d:0e:12:a7:30:a4:01:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:70:4A:DE:DA:B0:7D:9C:CF:4B:53:87:10:D1:8C:C5:8E:49:C7:E1
            X509v3 Authority Key Identifier:
                keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ee:66:c8:e3:26:2c:e2:82:9e:2e:15:19:14:00:92:06:3e:
         d2:f3:90:a7:41:3e:ee:89:3f:32:58:c1:5e:5a:f9:e8:59:23:
         e9:9f:e6:2a:24:22:7a:b7:24:0e:eb:e8:9a:07:b1:9d:ee:5f:
         0e:ac:fe:6b:23:f1:8a:54:6f:d5:dd:71:45:1a:a2:49:aa:b4:
         db:6e:f8:09:03:a8:a2:ce:d3:68:c3:43:c1:bf:8d:16:63:a6:
         81:0d:98:25:05:17:26:1a:05:a7:e2:f0:4d:1a:ed:e2:a8:ab:
         f1:f3:d0:7c:f8:78:f1:23:bf:df:17:66:42:d1:e2:ce:d2:d7:
         a7:ca:01:58:9f:ec:d0:1f:ad:62:1f:cb:49:d7:7e:1a:3e:e6:
         7e:f3:9e:a1:f3:1d:bc:e1:2b:4b:97:ba:4b:8d:e5:06:9c:0c:
         6d:10:1d:1e:ac:3c:36:91:22:1f:19:5c:8c:e9:30:60:ec:f0:
         bb:20:06:79:d0:a4:d8:e8:4f:0c:64:e5:a0:46:38:41:5f:13:
         05:ba:64:3e:16:f5:63:51:b7:4f:36:18:4a:af:60:1b:f8:d6:
         7b:98:9a:12:8a:88:55:69:f0:ce:09:34:9c:2d:7f:43:68:77:
         0e:d4:93:e5:ad:ee:7c:09:9d:00:1c:d8:c8:b3:fe:40:f3:fe:
         3e:85:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:32 2026 by rpki-client