This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File:                     8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier:          TiqITpaJjOfaBPMUdVUkrFK5NVBDP+3REhfZeqGiZIA=
Subject key identifier:   A3:56:23:19:E9:9A:D9:2E:BC:99:F9:C1:3F:DA:7A:52:BE:06:0A:0D
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer:       /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial:       019C42B42D8B6F99117A4BF2080D8A4FA354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number:          0A4C
Signing time:             Mon 09 Feb 2026 14:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:30 +0000
Files and hashes:         1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: BdRGb+19RpM8ADjClHXeSWhptlHV7hVCtY6W441zvjY=)
                          2: Y3IZ9qCwUd5F2pR3sNX6lIyY6Pw.roa (hash: LV0AUIrFJfTCffSGhCZkNnJY82iWH8kCbOJwGo9wRiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:2d:8b:6f:99:11:7a:4b:f2:08:0d:8a:4f:a3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
        Validity
            Not Before: Feb  9 14:00:30 2026 GMT
            Not After : Feb 10 14:00:30 2026 GMT
        Subject: CN=a3562319e99ad92ebc99f9c13fda7a52be060a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:68:29:2f:fa:f8:8d:e2:9b:92:a9:15:68:
                    0d:56:39:7b:5f:d0:79:af:e9:59:b3:48:c4:91:df:
                    9d:71:92:e6:ef:a8:07:67:56:32:8f:f4:a9:50:41:
                    f0:db:27:2f:a8:bb:f9:69:a4:f9:1d:07:ba:2a:72:
                    2a:8b:37:0c:55:75:ac:94:a0:97:72:1c:2d:ee:d0:
                    d8:06:10:7d:53:ba:a9:44:b6:f1:b7:94:f8:65:e9:
                    79:f3:64:90:5c:8b:d2:65:aa:e0:f2:5c:ad:e5:18:
                    2f:4e:44:78:85:e6:36:f8:10:fe:bb:f1:e3:8b:78:
                    57:a3:fc:6d:74:fd:9c:e4:e8:c8:c9:a8:c1:80:df:
                    e9:3e:df:7b:16:0f:3a:83:c6:5e:9d:d0:8a:65:07:
                    f8:42:e7:32:7f:59:90:5f:ce:99:42:34:da:66:1d:
                    a3:06:91:76:45:fb:21:a0:3b:eb:82:b5:51:64:c1:
                    2c:eb:c0:fa:d4:de:04:0c:47:0b:98:b3:65:de:68:
                    67:38:0f:3a:cf:a2:b6:d8:d5:9d:b3:f8:56:f0:c1:
                    65:94:ae:d6:94:24:b0:da:06:44:7a:79:9f:a3:40:
                    b8:af:16:65:8f:14:66:7a:d8:fa:83:c8:04:93:eb:
                    d3:78:10:50:89:6c:b7:5e:f8:a8:41:27:f8:d0:67:
                    34:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:56:23:19:E9:9A:D9:2E:BC:99:F9:C1:3F:DA:7A:52:BE:06:0A:0D
            X509v3 Authority Key Identifier:
                keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a0:72:c2:c2:ee:31:cf:52:af:94:76:b1:a1:cd:7a:af:6a:
         e2:2a:da:83:9b:3b:c4:b4:a7:fd:2c:1f:62:c3:17:98:dd:a6:
         b7:83:30:8c:01:3e:fd:d5:b8:d0:9e:f8:79:a1:01:ab:ec:9c:
         1d:07:a9:cd:18:04:fb:58:52:ca:12:e8:c7:46:d6:55:ef:34:
         3a:23:3f:f8:dc:cc:19:f1:e5:69:71:a6:2e:fd:b0:bb:07:c9:
         48:96:35:bf:5b:5a:d2:3f:cb:43:94:04:bc:0e:8d:77:36:5f:
         c9:44:72:89:5a:d3:a8:4a:77:cb:e9:32:56:b4:ed:63:12:da:
         d0:02:88:e2:b9:02:d9:92:5f:f6:a0:ed:ac:ff:46:b9:2e:9a:
         79:a9:4e:f0:9f:82:1d:73:c8:ab:64:40:a0:25:80:50:2c:0f:
         41:53:da:f5:4d:92:e4:be:bf:58:c6:f1:25:7e:fb:17:7c:ae:
         97:a4:93:d3:ef:e7:57:7c:bf:0e:7a:df:28:d6:ac:bd:39:60:
         a5:44:03:24:0d:c8:6c:ce:b1:65:11:20:31:6d:99:c8:20:5f:
         b6:92:c1:b4:a5:68:8a:b0:89:05:7d:06:cd:4e:71:59:d6:1e:
         37:fe:05:04:1d:37:b3:05:3d:49:27:a9:0b:37:b0:26:43:54:
         58:cd:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:14 2026 by rpki-client