This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File:                     8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier:          hg5QOVMdN/3NveHpKuioAvaXa/RWieH0V21mL5FPYI4=
Subject key identifier:   4D:3F:E4:CD:13:52:FF:99:82:63:1C:E5:51:44:A8:EB:22:F3:D1:E3
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer:       /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial:       019C432257441C5ADE710730EF2CBFBA975B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number:          08FC
Signing time:             Mon 09 Feb 2026 16:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:49 +0000
Files and hashes:         1: 1avUJiFsNY3nLQNObBHeiCUjQ1w.roa (hash: vp9JZlPKB90FOJI/qfqItkdrj8jNpEIMMm5ayvns90M=)
                          2: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: 8Dv9wCn3BxrCiJOY8OvyXPd3LS0A33SbaR2q+1zSbxo=)
                          3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:57:44:1c:5a:de:71:07:30:ef:2c:bf:ba:97:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
        Validity
            Not Before: Feb  9 16:00:49 2026 GMT
            Not After : Feb 10 16:00:49 2026 GMT
        Subject: CN=4d3fe4cd1352ff9982631ce55144a8eb22f3d1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:f1:38:70:03:68:45:69:61:df:e3:17:04:
                    f4:c3:7d:81:1e:17:3e:df:12:36:63:49:25:f8:43:
                    bb:9c:56:8b:2a:d4:44:c9:93:f1:cd:b6:70:53:55:
                    4c:6a:98:2f:65:cb:0a:82:91:01:11:6d:f4:1c:17:
                    79:9d:f3:82:0c:b0:4d:f8:2d:e4:23:5e:12:de:86:
                    79:7a:a3:8a:35:ef:68:ee:8c:e3:8f:73:24:e0:ce:
                    5a:aa:e9:3e:8d:0f:09:d2:05:db:91:48:b1:11:44:
                    44:00:b8:fa:2f:37:8e:e4:f6:65:19:cd:f4:91:c8:
                    25:e0:34:cd:df:92:ed:e1:96:83:f0:a9:cf:0c:03:
                    5e:8e:e4:ef:14:c1:c4:62:a6:bc:2d:53:8a:3a:da:
                    15:8f:06:44:de:3e:43:8b:74:5e:f8:e7:b5:c8:21:
                    30:7f:b7:29:89:c2:02:0b:7f:06:c8:53:42:83:91:
                    65:7a:0d:9e:b5:bc:7f:0c:4a:6f:e4:b8:d1:79:0f:
                    1d:53:8e:3e:73:85:73:94:c6:e5:cd:23:9a:74:f3:
                    dd:5d:86:75:7b:b6:b0:35:27:9e:e3:62:05:1f:f4:
                    f9:fb:2b:12:bf:86:56:7f:51:78:90:f7:b2:d9:c7:
                    16:d6:1c:5c:58:95:30:5a:41:cf:3b:f0:bf:49:86:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3F:E4:CD:13:52:FF:99:82:63:1C:E5:51:44:A8:EB:22:F3:D1:E3
            X509v3 Authority Key Identifier:
                keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:e7:07:55:a1:cc:77:29:7e:fc:a6:96:1b:aa:24:40:f0:
         91:12:c7:e6:fb:da:6b:15:91:6d:0f:34:49:ac:97:67:52:08:
         e5:51:38:5d:6b:74:2c:b6:3e:cf:c2:ea:1a:36:20:f7:66:44:
         7f:bb:13:aa:26:53:3e:62:09:c3:6c:32:62:5d:46:9f:81:85:
         5e:bb:d0:59:57:09:f6:e4:4a:31:da:a4:ba:b9:f3:c3:e1:01:
         a0:26:36:db:78:26:f8:ec:ed:1c:9e:f4:e0:2e:ad:c9:10:72:
         ca:ef:ea:1c:30:a5:a3:ac:d3:70:7d:3f:5f:5c:c3:32:6d:18:
         2e:8f:3a:09:33:04:5e:95:99:69:b3:87:9c:e6:9c:5f:d3:81:
         bf:37:5d:9a:05:c9:a6:b4:dd:42:d7:7a:a0:a8:9e:d0:37:46:
         40:f3:6e:8b:d9:0a:3a:f8:11:37:71:57:ac:63:7b:e5:f2:20:
         dd:1c:80:89:78:9e:4a:27:59:c4:56:70:3a:af:5f:6d:5f:ba:
         6d:0f:9b:f6:07:53:43:41:83:84:cc:78:b2:f3:7b:f5:1f:24:
         54:dc:21:a3:9e:f5:02:82:c9:12:29:2b:1b:ca:7c:c2:13:27:
         70:e0:3b:3c:0e:53:c8:8b:9a:ab:9e:9f:37:99:09:10:30:70:
         ea:f1:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:19 2026 by rpki-client