This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File:                     Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier:          5ybMIS8Qs5Ly6ms/P4+MivIMUVRntnE2Iwjppj3slBs=
Subject key identifier:   55:0D:23:24:1A:9F:5E:CF:EE:1D:9E:9F:F8:8A:F5:D5:49:03:53:AE
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer:       /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial:       019C427D4B3D5CC6171529860139AA02741A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number:          0714
Signing time:             Mon 09 Feb 2026 13:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:33 +0000
Files and hashes:         1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: nDE00wP+bLpBMEZOPVz4jXBt5+l2c3ZgNPkl/AdIsLk=)
                          2: XfYuhkKGxuWqYVZsxvacmZ8NHqI.roa (hash: UsJsqIbh52Sv6gjqXGmIkydItbrzNspMFi73hbQ2V0A=)
                          3: mWJHoK6-a-RbSMXctOjcxEY0z2E.roa (hash: ngT421oZcibNfWWS77w2Is9S0y6uxm3ZtEGPEYicE6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4b:3d:5c:c6:17:15:29:86:01:39:aa:02:74:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
        Validity
            Not Before: Feb  9 13:00:33 2026 GMT
            Not After : Feb 10 13:00:33 2026 GMT
        Subject: CN=550d23241a9f5ecfee1d9e9ff88af5d5490353ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:6a:2e:e9:17:c1:4b:06:72:32:aa:c8:43:
                    cc:82:18:41:b6:f6:32:78:59:54:d5:a8:8b:2b:45:
                    03:ef:2a:d1:14:2a:55:2d:ff:e0:a3:40:7a:9f:31:
                    2a:47:d7:24:e5:49:c4:5a:37:e2:b8:55:cd:22:a3:
                    4c:6b:4f:01:e0:6d:4f:a7:7e:27:92:61:c7:ea:98:
                    6f:87:f4:24:d4:b2:30:26:e6:18:0c:e9:af:3b:65:
                    de:0b:3b:7b:9c:ea:7c:fd:e5:36:38:32:a6:50:33:
                    0e:6f:fe:92:68:19:3d:4b:67:cc:63:7b:be:47:78:
                    ae:27:39:59:3c:96:70:e9:4d:41:ab:1c:77:9f:a1:
                    d3:8e:6c:92:01:c6:7a:74:97:8d:30:a1:e8:d5:7a:
                    fa:8b:ca:5e:b7:ba:40:2d:5e:de:f9:cc:df:51:72:
                    64:f9:98:cd:37:7a:b4:3f:3f:69:b2:6b:01:dc:a3:
                    01:c0:b1:73:ec:c9:12:b7:d1:37:eb:a6:bb:4c:6f:
                    0f:a3:30:f0:a2:78:e7:98:f6:88:51:64:9b:79:94:
                    64:0b:0d:85:37:9e:30:83:ac:15:7e:65:0c:29:9a:
                    88:d1:85:d5:ae:5a:27:6c:07:9a:78:d9:c1:d7:7e:
                    da:55:4f:2d:7c:57:9a:bc:0c:04:03:6b:ed:f7:40:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0D:23:24:1A:9F:5E:CF:EE:1D:9E:9F:F8:8A:F5:D5:49:03:53:AE
            X509v3 Authority Key Identifier:
                keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:72:89:54:5b:b7:0e:c4:aa:d5:9a:3d:20:76:71:ca:12:
         66:6a:5e:92:4c:92:ad:53:4f:bc:77:53:d0:94:f2:1b:22:ca:
         5a:6e:ef:ee:f6:ef:e7:43:31:b2:26:f4:65:70:15:49:bc:72:
         1e:d1:0d:80:33:34:5e:5d:35:03:81:53:ff:0c:69:53:28:b7:
         ef:6d:15:71:ad:50:b5:68:32:1d:86:6b:92:d1:01:31:51:13:
         83:19:d8:5e:6c:0d:5a:7b:f6:58:35:12:27:b2:16:fe:74:cf:
         7d:d9:98:e8:7a:f1:4d:66:bd:41:4e:7f:94:b5:d5:2c:95:57:
         94:6b:9a:ce:38:cd:ae:8c:e5:49:79:07:50:8b:bd:88:f5:61:
         67:7d:2f:dc:2d:75:09:2f:34:57:34:eb:d9:98:cb:b7:02:a0:
         8e:fc:46:db:02:8a:e1:ef:eb:c7:66:75:b6:c4:b8:e0:da:a7:
         30:25:d4:df:91:c3:7b:d2:fe:a7:65:cd:43:43:37:50:d8:48:
         27:5d:7a:49:f2:39:66:eb:2f:a6:0c:8d:36:7e:e2:06:38:5f:
         f4:dd:80:b2:c7:06:da:33:55:70:63:fc:59:a2:59:a4:ef:d0:
         69:9d:79:e4:a2:f2:eb:96:e2:39:d2:8d:22:b6:ca:e1:b5:c1:
         bc:ba:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:50 2026 by rpki-client