This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
File:                     10itqKdHT1rZkMmB_2snzj3hRxM.mft (raw, json)
Hash identifier:          uXboR3DwXUpF92W0B737uZtYD7tjxf+Nrc4FCs/Vcgc=
Subject key identifier:   0B:E7:57:0B:19:23:00:A9:59:B0:19:91:C0:61:A9:6E:06:8D:F0:30
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Certificate issuer:       /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial:       019C4246C01B078932D0DC9AEE2885A01D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
Manifest number:          012C
Signing time:             Mon 09 Feb 2026 12:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:58 +0000
Files and hashes:         1: 10itqKdHT1rZkMmB_2snzj3hRxM.crl (hash: 8qlmMu4PprXFyGBiNavpBaXbZn7iv5Fwca/RYDps2NE=)
                          2: dh6O1KZT1UxJ74lXsViPoGTKRqs.roa (hash: GqWYfVTgp7zJ77InQ5zu+O/CisErYsq267odGYdVn8s=)
                          3: q2Sr6iNLEgQhXIhOj17x_U41yCw.roa (hash: v7+FGob3+laO9WE5TRGdJZbvI5tauk2y9nqQMlT/eeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:c0:1b:07:89:32:d0:dc:9a:ee:28:85:a0:1d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
        Validity
            Not Before: Feb  9 12:00:58 2026 GMT
            Not After : Feb 10 12:00:58 2026 GMT
        Subject: CN=0be7570b192300a959b01991c061a96e068df030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:b6:f0:e8:4e:f0:a4:46:dc:7a:d3:33:39:
                    3b:e2:d4:ea:5b:4e:31:5f:d1:ac:8d:44:f0:17:3a:
                    25:7e:8b:4c:31:7e:e9:22:20:56:27:b0:38:cc:cc:
                    30:4c:fb:43:2f:de:71:d3:6d:16:6e:66:1f:aa:72:
                    52:bf:63:d4:00:8f:bb:25:1a:7e:01:a7:95:c2:61:
                    df:01:03:4b:56:74:d6:e3:22:6e:4b:9d:09:b1:f1:
                    00:89:88:90:41:ff:3f:4d:ac:d3:4c:78:23:09:13:
                    2d:35:d4:48:86:f3:b2:06:a8:20:0e:e8:fe:70:83:
                    6a:fa:86:52:fe:52:be:0f:79:cc:aa:3b:89:a6:d5:
                    ea:36:74:3a:af:87:82:34:20:2e:c0:cc:82:b5:3c:
                    18:1f:47:5a:bd:51:ce:30:49:d7:13:bf:ac:e9:65:
                    20:6a:e2:c9:1f:69:11:b2:c6:70:40:fe:69:29:b6:
                    16:e1:0d:b5:96:f4:a1:58:f0:d7:f9:41:81:d9:4a:
                    88:c0:41:91:36:ee:fe:65:2f:e8:03:f8:a5:60:bd:
                    54:48:8e:39:d1:d5:97:f6:05:6e:f7:1b:8b:29:03:
                    8d:0e:7c:62:2b:a5:1f:56:a0:2d:cc:da:d9:82:ed:
                    bb:fb:0d:f6:25:85:7c:85:fb:7d:85:f5:22:bb:68:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E7:57:0B:19:23:00:A9:59:B0:19:91:C0:61:A9:6E:06:8D:F0:30
            X509v3 Authority Key Identifier:
                keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:47:ff:d0:c6:09:c4:63:eb:27:af:35:2c:5a:e4:75:c8:09:
         b5:be:96:da:2d:cd:4e:46:a3:7f:9d:61:47:bd:8b:fa:0a:e5:
         12:2a:e5:5c:4a:5b:f4:e5:ed:ab:e1:23:42:2d:00:0d:14:03:
         21:95:8c:b1:be:bb:64:4d:48:2b:ad:e7:a4:33:1f:b6:c7:fe:
         43:12:31:b2:6b:a7:9c:66:13:5a:f2:ac:59:3f:d5:11:8b:bd:
         b1:c7:5c:53:4d:27:b8:89:7a:17:21:f6:74:92:96:19:e6:49:
         21:0c:8e:33:47:4e:07:fb:56:55:fd:d8:49:e7:c4:5b:89:42:
         2b:d6:38:91:7c:38:70:06:0d:e4:ba:ba:b7:66:31:34:ee:32:
         40:0d:2a:a7:a4:97:29:2c:a9:c6:43:b6:45:49:3d:16:86:2d:
         ea:b6:36:66:3b:51:5f:c1:c4:d5:b2:05:27:1f:81:65:a0:5d:
         d5:86:ef:de:98:48:c8:d7:8b:b8:f8:59:52:b3:43:e4:87:ac:
         d4:ad:bf:74:a3:ff:d2:d6:ef:76:e0:e4:18:a0:91:69:0c:89:
         42:b3:20:12:21:e2:17:33:ee:c1:b6:be:a4:06:f2:a8:32:e1:
         18:a3:c0:ed:17:a1:61:50:9a:d6:88:d2:0e:11:86:ad:d9:2e:
         e2:16:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:33 2026 by rpki-client