This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File:                     76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier:          fCuk1Terq/WrbYjbbfjJZEiP42IgbeDxW67JSwtHGzo=
Subject key identifier:   9D:91:AA:B6:1C:59:BE:C1:D7:EB:88:97:B5:D6:A1:F0:D1:78:AD:BE
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer:       /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial:       019C43FE35D788043C6586609FF7E2B7FCA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number:          111F
Signing time:             Mon 09 Feb 2026 20:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:59 +0000
Files and hashes:         1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: jtsZ27GkxW9pa3tvNRtzrYqTFPcSFqdHoNfTTFY4WiE=)
                          2: d0r-Z1tATflEg34xH8LpeTJxCeg.roa (hash: /VLriREqzzV93h2U9Y2YNTNewlDjbuqqOCTeloMXxjY=)
                          3: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (hash: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:35:d7:88:04:3c:65:86:60:9f:f7:e2:b7:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
        Validity
            Not Before: Feb  9 20:00:59 2026 GMT
            Not After : Feb 10 20:00:59 2026 GMT
        Subject: CN=9d91aab61c59bec1d7eb8897b5d6a1f0d178adbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:74:5a:a6:36:ba:ce:01:fe:e0:cb:17:3b:
                    0c:c9:dd:17:2f:da:fc:b9:42:d3:7b:61:e6:c2:d7:
                    c4:ce:a2:74:b9:c6:46:7a:e1:07:31:65:3c:4d:c7:
                    32:db:7e:5e:a4:0b:28:85:9f:ce:60:10:44:53:ce:
                    ac:d6:8e:cb:60:37:7d:b2:51:3f:a3:6d:3c:d6:60:
                    1b:68:82:2e:13:96:8b:70:1e:a6:6f:a2:2f:21:7e:
                    6b:f7:16:df:c7:a8:92:36:5e:28:b4:7b:e8:e9:cd:
                    1f:23:0b:d0:96:0c:a9:b8:f1:42:f4:1a:92:2a:63:
                    3f:dd:e7:e4:cf:5c:92:15:9e:0d:54:f0:f5:ee:65:
                    17:e5:5c:73:25:49:99:03:7e:9f:23:99:08:6d:01:
                    2c:3f:32:23:6e:b0:59:ea:c8:e2:2f:38:21:eb:69:
                    e8:9f:7c:12:96:1d:98:64:f9:d7:0e:79:0f:92:1b:
                    22:df:e3:b0:5a:1a:2e:80:e4:c0:89:c3:8c:ac:c0:
                    3e:50:84:32:20:2a:90:40:9c:a9:a9:4d:c0:fe:a0:
                    d1:08:23:0e:84:59:48:7d:60:e0:84:0f:c5:f5:81:
                    a8:dd:a5:07:93:07:cf:8f:9e:20:30:49:d6:34:d2:
                    c1:e6:27:6e:ad:15:cf:25:d4:ff:01:62:ae:d2:b3:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:91:AA:B6:1C:59:BE:C1:D7:EB:88:97:B5:D6:A1:F0:D1:78:AD:BE
            X509v3 Authority Key Identifier:
                keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:be:69:06:f4:bc:e2:0d:99:62:0b:57:ce:bd:4d:fd:70:ce:
         7d:e1:72:ad:c6:61:fc:73:76:3d:1c:ec:ae:6f:11:4c:ee:3a:
         2d:65:41:b4:28:1b:b0:b2:a3:13:7a:8a:fe:73:38:23:08:e0:
         57:e9:2b:32:28:ac:a9:84:3e:d4:87:42:d2:bb:20:eb:76:9e:
         bf:53:e4:a8:8e:7d:19:4e:7b:b5:cd:85:c2:a4:a1:82:d1:32:
         5c:b0:e8:ba:f9:ee:52:02:0d:c8:5c:21:8c:46:66:2b:86:f9:
         97:75:b4:4a:97:15:e1:83:e3:37:18:1c:9e:e1:05:85:69:75:
         45:67:b0:67:59:ea:6e:5a:68:13:37:eb:28:00:1c:18:3d:c1:
         d1:cd:39:b9:03:4c:dd:6f:93:78:fe:fd:d8:03:ff:c3:8a:a3:
         7a:27:a1:00:20:29:14:ab:25:c5:58:f0:73:50:6e:e0:3b:b1:
         b2:7f:7c:0b:49:63:53:d2:2b:c1:ee:10:a1:2e:77:dd:8b:04:
         37:06:3e:d5:29:1c:2c:04:a1:62:5d:0a:95:db:40:fa:e6:f5:
         39:73:53:12:a9:a8:ff:db:3a:3e:b4:25:3f:18:e3:c2:d0:ac:
         40:1a:a8:67:b1:7e:6f:bb:35:15:26:a5:eb:02:59:11:e8:ad:
         ee:61:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:06 2026 by rpki-client