This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File:                     8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier:          f7WS8bIIWRKoqJJFu+r/MPVfq+yiLp34t+XTGrmUrSQ=
Subject key identifier:   73:F1:0B:3B:9F:21:14:AE:49:87:A4:15:1A:AF:A7:02:5F:9D:B4:45
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer:       /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial:       019C42B464DE65BF7871A36A11173916A6FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number:          023B
Signing time:             Mon 09 Feb 2026 14:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:44 +0000
Files and hashes:         1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: 1WS6JXbLKUab9B1uOp831F2cYTZy7f8lZViR5unGPyY=)
                          2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:64:de:65:bf:78:71:a3:6a:11:17:39:16:a6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
        Validity
            Not Before: Feb  9 14:00:44 2026 GMT
            Not After : Feb 10 14:00:44 2026 GMT
        Subject: CN=73f10b3b9f2114ae4987a4151aafa7025f9db445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:94:42:d7:f5:2b:ff:04:b4:d3:f8:2e:ce:
                    36:c1:2e:87:78:99:52:b2:32:86:0c:93:6d:23:d7:
                    90:19:de:bb:69:65:7c:db:4a:25:f7:32:7e:57:33:
                    37:6d:24:70:a5:41:bb:0f:55:bc:ac:32:92:a1:ff:
                    01:4b:38:c1:71:25:1a:9f:9d:54:60:da:42:87:eb:
                    9e:5d:bc:42:98:29:73:65:40:75:84:52:89:7c:23:
                    b1:1e:51:01:e5:48:ba:3f:92:4a:7d:bd:ca:f7:5d:
                    b9:aa:de:f7:70:0e:b6:0d:68:a9:86:bb:b9:00:f0:
                    c7:43:73:da:90:72:6c:2f:a1:65:1d:df:53:fb:17:
                    6c:00:42:ec:d9:98:c9:d5:84:2f:20:63:e6:19:74:
                    88:33:63:79:2f:03:64:13:e9:da:fa:43:2a:53:70:
                    87:96:63:b1:e2:a9:b8:fc:1f:3a:e9:d5:6a:91:1c:
                    6e:56:99:f8:d6:8e:ad:9b:c3:80:14:e7:4a:e8:1f:
                    d0:70:b6:6e:8a:9e:db:d6:46:d3:ce:5d:c8:cf:c7:
                    11:6f:35:da:5b:9e:8c:1c:71:d6:68:a0:43:a9:d9:
                    69:df:34:74:0e:5b:d7:c2:fd:5b:91:0b:8b:08:4d:
                    c0:41:03:8e:f8:ba:c2:fd:e8:de:95:c9:21:04:cd:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F1:0B:3B:9F:21:14:AE:49:87:A4:15:1A:AF:A7:02:5F:9D:B4:45
            X509v3 Authority Key Identifier:
                keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:24:98:3b:a6:e1:55:9c:f0:8b:91:75:0f:8f:8b:2d:2a:23:
         c3:41:ad:0c:cb:71:fa:81:26:48:c8:4f:00:33:09:74:ea:3d:
         c4:d3:79:f9:7e:d7:9d:69:da:e4:33:7d:31:82:6c:40:3f:8b:
         85:b6:c2:7c:17:d1:ee:e0:03:a6:e6:88:03:eb:3e:54:f8:a9:
         3e:ee:71:92:a9:fa:fd:d3:80:f4:59:68:c4:86:7b:d1:d0:79:
         b9:2d:1b:af:a0:b6:38:20:77:72:18:2b:b4:69:ed:df:b3:ac:
         14:42:22:18:ea:a2:86:9b:6b:4e:b1:fa:e6:29:8e:8b:8f:07:
         f2:99:41:1f:db:16:34:82:3f:4f:95:41:7e:7c:39:98:ed:81:
         ea:e7:50:e8:0f:b6:59:68:a2:7a:2c:85:a8:0d:f4:43:a1:95:
         e3:04:a7:4a:55:d3:64:2c:d5:bc:6a:f9:68:9a:7d:17:27:36:
         cc:83:2f:b2:69:07:73:bd:e7:42:02:86:f3:13:a1:eb:d1:2d:
         5f:61:95:c3:52:ad:0a:e8:c2:f7:52:1d:25:0d:e3:33:78:68:
         25:ed:7e:00:e0:4e:c1:7a:90:bc:c3:27:ea:47:49:1a:29:79:
         e6:ae:d6:51:c6:38:e6:1c:cc:20:21:b4:f6:dc:1b:08:d9:e9:
         47:58:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:06 2026 by rpki-client