This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File:                     MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier:          TRJ3QfbF+XzUegCFqkx26FSjYkkYVQGb1X5m2Rz9MtI=
Subject key identifier:   C9:09:93:A6:E4:97:CD:77:08:2F:5F:D8:79:35:3F:96:A7:EC:C5:C6
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer:       /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial:       019C42B486F18F5A7748ABE9D2DAA98C0587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number:          07F3
Signing time:             Mon 09 Feb 2026 14:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:53 +0000
Files and hashes:         1: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: CMqy54MaJ98+9ggHK5jaz8IfuA4D2r7FugJ98WL1/UQ=)
                          2: T-lMXkCMAUn1cSmP84QNKdTnqzE.roa (hash: u0b6RMkrcz22t0V1+AakCj/CnEAS32OtK5Ml5FCc9x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:86:f1:8f:5a:77:48:ab:e9:d2:da:a9:8c:05:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
        Validity
            Not Before: Feb  9 14:00:53 2026 GMT
            Not After : Feb 10 14:00:53 2026 GMT
        Subject: CN=c90993a6e497cd77082f5fd879353f96a7ecc5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:69:8a:7f:b8:78:7c:b2:e5:4d:90:57:af:
                    40:ec:e1:98:b5:c9:c1:70:9a:bd:11:bd:84:25:09:
                    8d:e7:85:08:06:b2:fa:68:74:b5:2a:2c:8b:b1:24:
                    9c:cd:ea:27:ac:02:31:af:a0:2a:54:5f:61:70:3d:
                    cf:47:bc:b4:ed:a9:77:21:57:7a:ae:35:65:9f:4b:
                    8e:e7:e5:ee:8a:0a:7d:97:a4:73:25:31:66:23:9c:
                    e0:ea:d6:27:52:31:a4:af:59:84:f4:50:41:18:4d:
                    b1:52:5d:9f:06:94:4b:55:43:30:2b:dc:ea:64:0e:
                    68:bb:d3:90:ab:b1:76:64:a2:a2:da:84:f5:4d:b5:
                    06:46:d6:d7:3d:0b:77:35:7a:da:ed:b6:2a:de:14:
                    cb:4e:b7:e7:52:8b:12:9f:0a:93:67:d2:8e:f3:da:
                    71:85:8c:1e:a8:8e:06:d3:57:d5:fa:1a:85:2e:1c:
                    a0:1c:14:d2:4e:b8:f8:53:d5:17:c8:27:4e:c9:f0:
                    c6:9b:77:c6:48:eb:54:e0:1b:75:4e:df:15:89:a1:
                    42:be:32:ec:ec:0e:64:64:b7:33:3b:7f:c6:5e:ba:
                    f8:53:07:bc:a5:f6:8d:a1:02:e1:42:d8:69:7e:7a:
                    6f:69:2d:2c:bc:14:0a:1b:8f:bd:d0:e1:0a:f4:93:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:09:93:A6:E4:97:CD:77:08:2F:5F:D8:79:35:3F:96:A7:EC:C5:C6
            X509v3 Authority Key Identifier:
                keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:4f:15:87:25:69:6d:c1:24:aa:c9:ed:3b:a0:88:e4:dc:
         91:12:84:dd:a7:c0:b0:9e:c7:37:e2:49:81:82:91:64:2f:a7:
         aa:3a:ec:92:92:92:a5:a2:4b:1e:00:61:64:b5:7b:87:ae:1e:
         d2:eb:c3:26:e1:c5:60:5a:00:8f:3b:fc:94:cb:fe:25:89:8f:
         08:cc:e1:e3:4d:29:82:16:6c:e1:28:5e:b7:18:30:93:98:de:
         2a:d1:c1:0b:d5:a5:41:41:33:87:84:ea:48:6e:56:e6:c7:d8:
         91:ba:77:68:49:ae:75:42:8a:d0:89:e7:1e:5f:13:0c:6e:49:
         af:c5:17:a8:1f:09:ca:ae:12:ed:c1:97:c3:60:20:ae:a2:6a:
         74:ac:bd:ea:c5:86:bd:11:cc:24:02:60:a4:92:76:44:ed:69:
         07:0f:be:12:49:2f:fe:68:02:a0:9e:64:a8:ee:57:8d:f4:03:
         a1:b9:b1:c2:81:f6:1a:7f:bc:c8:4a:95:f8:24:41:ae:2f:38:
         7c:ad:62:06:ce:58:eb:22:30:2f:30:a0:d9:f4:40:cc:e2:15:
         e8:0f:cd:e1:78:be:7d:62:ea:30:e9:2a:5f:ed:3c:da:e4:d6:
         09:66:09:16:e2:9b:34:c6:33:6f:cd:a6:ff:23:fe:fc:1b:67:
         4e:54:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:23 2026 by rpki-client