This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File:                     lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier:          SPGTlf7X1q7xFb4fYpSMjPlBgov9fBDXTBcfz5tZYXQ=
Subject key identifier:   76:FB:8B:B6:0A:B0:1B:54:71:C6:4D:9C:F6:71:37:64:CE:FF:E6:27
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer:       /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial:       019C427E0EC5886C20A8607797F648AC0BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number:          0707
Signing time:             Mon 09 Feb 2026 13:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:23 +0000
Files and hashes:         1: XCAs1bdvDVK0mf6fnpHwHSrCy_s.roa (hash: vPe5QDgsOEWj+wwao+43Qg6PstZ+Q+ujB68nk8LOfvM=)
                          2: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (hash: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw=)
                          3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: aphcEGErML6JbVbeTYA8nKInK6yGB4aLEa+kpthoTPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:0e:c5:88:6c:20:a8:60:77:97:f6:48:ac:0b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
        Validity
            Not Before: Feb  9 13:01:23 2026 GMT
            Not After : Feb 10 13:01:23 2026 GMT
        Subject: CN=76fb8bb60ab01b5471c64d9cf6713764ceffe627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:49:36:35:40:00:b1:8a:28:ae:3e:0d:71:
                    e1:c5:63:8a:42:bd:7f:be:3f:2a:13:ac:1f:1a:5b:
                    b7:a9:d4:e3:99:b9:ba:ad:22:bd:10:e9:73:46:24:
                    4f:11:e3:ad:63:2f:14:b5:3d:93:65:bc:25:fd:fd:
                    e3:b6:4d:a9:03:08:03:1d:07:8e:00:55:95:dd:55:
                    bd:a0:dc:99:2b:8f:14:89:5b:0e:bf:33:4d:6f:c2:
                    c0:87:dc:cf:c2:62:cd:d6:7f:bf:a9:eb:6e:c4:15:
                    13:20:90:e4:53:9a:30:9c:21:2e:5e:92:63:7f:64:
                    fd:21:4c:10:f0:42:bd:b7:d4:18:fc:20:d5:e7:c5:
                    6b:b1:63:6e:6d:cc:f0:3b:3d:2e:7f:ca:a1:ae:87:
                    0b:d9:cb:78:d9:6f:7e:83:bc:85:a8:26:b4:d4:74:
                    d7:18:c6:69:03:54:8b:f3:46:0a:6c:eb:ff:2c:f2:
                    20:8d:a4:3c:c4:8a:bc:14:c9:93:33:ba:d3:12:34:
                    2a:0e:16:db:9c:30:b2:d9:bb:ca:89:4b:f7:55:5f:
                    12:43:5c:a8:30:5a:ee:bd:61:06:27:11:99:1f:89:
                    b1:b6:f7:ae:b4:3f:fb:45:96:2d:6c:bd:83:5f:8d:
                    2b:da:aa:07:a3:28:59:e9:91:56:55:fe:c9:80:0d:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FB:8B:B6:0A:B0:1B:54:71:C6:4D:9C:F6:71:37:64:CE:FF:E6:27
            X509v3 Authority Key Identifier:
                keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:ea:63:52:3e:96:8b:9a:3f:26:7d:28:0a:b0:42:07:52:
         5c:a5:24:89:25:06:11:d3:3a:86:0f:28:b6:a2:e2:74:77:bc:
         c5:9d:9b:f0:61:a0:cd:f4:a5:f7:d6:2e:46:d3:8e:14:03:4e:
         1e:aa:de:82:3a:3d:79:1d:6f:f7:7d:ed:f9:7a:3e:1f:3c:ee:
         2f:4d:7a:2d:5b:1c:aa:ae:ba:bc:ef:f1:dd:1d:49:52:95:3c:
         da:1c:f5:fb:e7:81:af:ea:65:55:ec:51:43:83:47:dc:d8:3f:
         cb:9c:1f:99:b4:98:17:5f:c1:73:76:08:fc:a8:dc:69:bb:04:
         62:b2:ab:c1:0e:de:b8:0e:40:e0:e6:77:d5:a6:a1:97:e5:54:
         1b:80:d4:f5:bb:77:67:71:38:b3:9a:20:1f:28:1e:cc:a9:66:
         f5:37:f4:8c:66:a4:33:55:6b:44:d2:11:9a:4f:ba:6d:93:b2:
         35:62:7b:7c:3c:1e:a0:ef:9f:c7:1f:f3:ed:62:b8:99:62:46:
         de:14:6d:69:a1:a2:c0:59:ac:f4:0c:d3:73:76:6e:90:66:1f:
         fb:a4:49:5d:cf:19:db:7b:7f:50:8b:67:fc:42:48:45:80:22:
         a6:9d:15:df:46:62:b6:7f:98:2e:cf:d8:1f:0f:77:b7:12:0b:
         63:a8:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:08 2026 by rpki-client