This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File:                     REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier:          4RfqOHzCukZou2W1ahTnpAxO6P4x7M3TpIG6N9HhxFo=
Subject key identifier:   7D:E1:CA:3B:2F:3B:10:D6:44:3F:99:2B:79:2B:7A:B2:89:4F:45:9B
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer:       /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial:       019C41D8ACCB7CDDDAC61EBF19D08F8EBB46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number:          0E43
Signing time:             Mon 09 Feb 2026 10:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:44 +0000
Files and hashes:         1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: RYWsMaFvHnJo8GdKoUqMBEcU+XBPxzXqdm9xxcq9DFE=)
                          2: gCwdPZm7-2mkCNs_6h-_knpGMgA.roa (hash: zOOdjbIrjBtj8zo7gLNAmynH9YT4viYiJaXTAoE0p/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:ac:cb:7c:dd:da:c6:1e:bf:19:d0:8f:8e:bb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
        Validity
            Not Before: Feb  9 10:00:44 2026 GMT
            Not After : Feb 10 10:00:44 2026 GMT
        Subject: CN=7de1ca3b2f3b10d6443f992b792b7ab2894f459b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:91:ad:b3:0d:19:c1:52:57:20:f2:df:f9:
                    ce:43:3e:6c:dd:2b:68:61:91:a1:f8:c1:98:02:c2:
                    3f:dd:9c:30:5c:45:cf:d2:f1:43:45:05:4d:d2:e4:
                    d2:5b:22:c8:4d:92:5e:90:6b:ee:25:98:1c:de:a6:
                    5f:e5:e5:19:7d:26:b3:1d:bc:72:5d:47:e5:94:9b:
                    9f:8f:9e:4a:f2:94:de:35:b5:25:f7:fc:4f:09:65:
                    63:2f:60:8a:13:12:bf:f9:44:b2:b8:1e:b6:aa:97:
                    92:e0:91:ee:77:7f:57:01:84:5b:82:24:c7:6f:43:
                    6b:4e:b2:3a:78:56:ec:bd:6c:f2:6a:1b:e3:e7:7b:
                    ed:cf:96:83:f5:28:ba:ad:fd:c6:d7:65:50:7b:a3:
                    c1:31:ea:09:a0:50:ff:59:1d:59:b8:7c:98:1e:e0:
                    1a:e2:52:06:41:0d:f3:fa:cc:cb:fe:9e:5c:3f:7f:
                    e0:44:7a:13:6d:97:d8:c1:53:bd:ef:ec:d4:bf:e3:
                    65:fa:86:72:03:26:54:69:c4:fd:f0:90:a5:00:9c:
                    f1:34:82:0e:2d:23:f6:97:19:50:31:c0:a9:8d:9e:
                    d5:b1:c3:1a:1e:0f:bf:48:86:7e:a5:99:c9:27:b3:
                    04:e8:39:fa:35:64:53:0d:c2:08:97:88:8a:90:21:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E1:CA:3B:2F:3B:10:D6:44:3F:99:2B:79:2B:7A:B2:89:4F:45:9B
            X509v3 Authority Key Identifier:
                keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:27:ba:e5:1c:69:4c:e9:88:3a:46:d2:64:0a:11:9e:f1:
         36:8f:23:9e:b9:59:49:79:0a:9d:52:c5:77:47:f7:65:b8:93:
         22:62:d2:4b:f6:4c:9c:0b:9f:ea:ef:4b:19:d7:01:58:6f:51:
         24:1d:39:a3:6f:b0:08:eb:39:8c:b0:56:98:4f:ff:c5:13:91:
         19:d4:d3:b0:70:ca:97:58:56:3b:9d:e7:32:2c:f2:a5:cb:66:
         c2:9b:92:fc:46:7d:d2:fc:41:65:b4:20:b7:52:85:97:1f:d6:
         7c:be:4f:59:6a:ee:72:5e:92:71:31:73:7b:5b:7e:ab:93:fc:
         1e:3d:52:5b:e7:1d:db:ee:ba:ad:49:ad:55:42:e5:a9:f8:2a:
         ac:93:e7:67:53:4f:8f:7e:23:38:d6:8c:94:0b:f8:e9:5b:c4:
         ee:a9:ee:15:49:8b:3a:93:be:5d:5a:03:e7:5d:e0:68:84:5f:
         5c:4b:72:e9:df:68:aa:2a:9d:6a:4d:80:62:3a:33:46:45:b7:
         df:20:69:e7:cd:e9:2e:2a:e5:d1:69:25:92:62:b3:03:92:9d:
         eb:b9:29:94:a0:d1:88:aa:57:44:71:f3:8a:2e:51:c1:f6:c1:
         dc:f3:a7:79:3f:04:15:92:b1:33:91:7c:41:02:6b:3f:5a:2f:
         97:f1:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:56 2026 by rpki-client