This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
File:                     B_IxNlmFgo1almPtG0QGJLJP7BM.mft (raw, json)
Hash identifier:          sOFMgoCxPNu+y2mylpI+SlkA85IcV77I/9lI3QW0waY=
Subject key identifier:   10:E8:B2:2E:1E:41:BD:FA:9D:8C:78:E9:AB:39:49:65:25:6E:24:3E
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Certificate issuer:       /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial:       019C4246C34D63C9280CF9A9E21659491A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
Manifest number:          1433
Signing time:             Mon 09 Feb 2026 12:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:59 +0000
Files and hashes:         1: B_IxNlmFgo1almPtG0QGJLJP7BM.crl (hash: XqJ4ZWJMpG3DMNmExXzN8413E6O7OOSVg3nIJOrBOKo=)
                          2: JgAnCeNDpTLcRHgLzRkMzF025K0.roa (hash: Ove/nj1pY736un6NN+0QVHsa6jfrCM9fia6JOsT8LGE=)
                          3: W5_tGp5OkvC1zzzyLDAcLsIiiEw.roa (hash: Ce5u3NFumbrG6KxipXK7ZFrTV36Y5P03dD20D+8E1Ho=)
                          4: bJyNeid4zdrFW3IUPYmwLbq4NG4.roa (hash: 2z38FIIDRiJhfVvxYoYf9BQ2qKet+jMuXWE1TA1lfuo=)
                          5: bQ8JzKucNoy5y0sVHTuRHBPDq2E.roa (hash: Vzo2HY5zSLFaP0LajL8wuixJXJWl1u/UqY8ZpfyfUCo=)
                          6: eKvvnoPa0Hg5dhkHPP-vXuZ-6qk.roa (hash: 8b2l6sLxKDcQzB4gntOXXFhK5d0o5i3qf8nwkLcMhwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:c3:4d:63:c9:28:0c:f9:a9:e2:16:59:49:1a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
        Validity
            Not Before: Feb  9 12:00:59 2026 GMT
            Not After : Feb 10 12:00:59 2026 GMT
        Subject: CN=10e8b22e1e41bdfa9d8c78e9ab394965256e243e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:61:9b:c3:94:54:00:93:c1:9f:a2:ca:f0:
                    17:dc:e3:6e:aa:89:3b:86:10:2c:28:bb:05:03:c5:
                    74:de:94:ec:41:44:69:95:2a:61:3d:f1:22:95:cf:
                    80:a3:fd:03:11:3a:c9:75:e5:f5:c8:34:d7:0b:44:
                    c0:f1:5c:27:7c:46:6d:d3:09:aa:6d:cf:8d:35:6b:
                    5c:94:35:04:b5:7d:91:a8:47:4f:91:21:32:af:be:
                    11:b8:03:6c:bc:23:47:5b:62:35:1a:23:17:50:10:
                    3d:57:26:55:74:53:bb:1f:3e:bd:01:64:af:45:30:
                    90:5f:a9:5b:b5:e5:f5:a0:bc:49:97:03:c6:ac:fe:
                    55:ef:34:5e:3f:cb:af:d4:4e:94:2f:0a:49:c5:0d:
                    a2:d9:fc:b6:77:49:de:85:ef:49:3d:d8:11:e2:ea:
                    33:e4:24:eb:2b:4c:78:99:4c:69:09:13:44:fc:e1:
                    ed:c1:22:bf:fc:02:ff:74:03:52:cb:ca:43:b5:59:
                    0b:30:4f:a9:8d:db:4a:34:e5:9f:b4:b1:7b:07:11:
                    c5:55:33:a7:87:ff:cd:5c:31:79:41:33:5f:0d:a6:
                    99:d0:56:2a:07:2d:e8:e5:01:1d:3e:ec:f9:ce:09:
                    f0:3c:aa:63:66:80:1f:34:4f:c9:fb:ae:66:7c:1a:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E8:B2:2E:1E:41:BD:FA:9D:8C:78:E9:AB:39:49:65:25:6E:24:3E
            X509v3 Authority Key Identifier:
                keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:8c:85:bc:f7:b3:7b:01:ed:e8:44:06:db:22:ad:8a:c9:
         7d:d6:f6:6b:24:d3:26:60:0d:ad:72:34:97:b4:36:e0:34:17:
         35:f1:95:0f:b2:26:3a:51:4e:99:a7:fe:67:6e:b5:4f:27:84:
         f3:da:32:10:ae:fb:b6:8c:38:43:d3:12:f1:d2:74:2e:4a:95:
         42:0f:ce:2d:df:02:08:10:b6:4d:52:67:00:a5:37:78:99:ca:
         f5:2f:c7:08:3c:19:e5:98:33:ee:79:6a:cf:06:86:65:0d:e6:
         b3:e4:63:6f:95:9d:ba:ff:60:c3:cf:41:d6:f1:d7:a2:28:45:
         76:8d:d3:73:10:9c:02:23:39:1c:15:af:a6:f9:b4:7c:80:b9:
         1f:21:ea:30:d4:d3:76:d4:8d:ea:90:04:fd:87:78:a3:07:20:
         e1:f2:22:b2:51:2d:dd:58:bc:b0:e3:fc:f5:75:03:b8:21:ff:
         15:5d:36:1a:9d:5c:45:6f:27:6b:5d:c4:a7:6e:fb:85:4a:d3:
         3d:23:6f:be:41:d9:27:e1:9e:9a:3a:e9:40:c7:2e:0d:4f:32:
         bc:11:7b:a1:68:af:c6:e5:9a:ca:0d:d7:1b:9c:db:d1:61:59:
         b9:4a:8e:66:d6:25:3c:6e:fa:d6:31:f8:8c:ba:9a:22:ba:da:
         41:a1:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:51 2026 by rpki-client