This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File:                     MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier:          CiUVz6W7X53XQOGzrX+9ZkBQnDWuT/I3432CDAVZzEA=
Subject key identifier:   C8:1E:3C:AB:38:1E:56:2C:A5:6E:5E:A0:2A:C1:14:24:23:37:A2:E1
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer:       /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial:       019C427E2B36A94D4175A54B2E06BBB88179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 13:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:30 +0000
Files and hashes:         1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: o9Vy2Exw2Zlfy2KX9lE0Iy2DOmVEJRUyfOIQLPX1bS8=)
                          2: qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa (hash: Nfcf0dxf81UBVMjoGjSg559+Hju5Dln2RKJKCrFeGVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:2b:36:a9:4d:41:75:a5:4b:2e:06:bb:b8:81:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
        Validity
            Not Before: Feb  9 13:01:30 2026 GMT
            Not After : Feb 10 13:01:30 2026 GMT
        Subject: CN=c81e3cab381e562ca56e5ea02ac114242337a2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:16:e2:f9:f6:76:0d:c8:74:cd:d3:66:9c:
                    c3:db:38:5f:e6:4f:62:da:fe:e8:a0:8e:5b:40:54:
                    61:58:8d:3c:43:fe:fe:c8:c3:75:5a:d2:83:c0:4c:
                    a3:54:c0:55:09:a6:6d:84:eb:5f:cd:5d:4e:fe:b9:
                    1d:38:06:9b:31:3a:3c:12:ed:46:d8:ae:bf:34:73:
                    c8:2e:81:bc:ec:25:b5:db:05:ee:cc:e1:22:05:91:
                    85:05:23:ec:1f:29:92:f3:87:25:f5:28:2f:56:ff:
                    af:c9:f0:ea:73:d4:3b:4d:d0:5e:39:81:f3:c6:a1:
                    12:14:a6:ce:84:fd:27:c5:69:a0:27:f6:6b:22:8b:
                    1f:7b:ae:77:dc:13:ef:f7:38:09:bc:5d:b5:06:82:
                    4a:81:e5:07:3a:59:9c:6b:92:73:46:90:d5:f4:c9:
                    8e:d0:29:45:30:ae:9a:1d:9d:01:37:9a:03:90:fc:
                    a4:3f:92:37:8e:59:73:03:36:bf:4a:4a:22:f2:94:
                    c5:90:c3:7b:a5:38:e9:2a:e3:a9:25:45:3b:29:7c:
                    b6:b4:96:25:8c:a1:9f:2e:3f:5b:c2:b3:ad:ce:80:
                    4d:c2:76:66:f9:c3:c2:2b:6a:4b:77:47:67:a0:1e:
                    ef:41:bc:d5:9f:65:0f:3e:71:83:30:55:2b:6a:0d:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1E:3C:AB:38:1E:56:2C:A5:6E:5E:A0:2A:C1:14:24:23:37:A2:E1
            X509v3 Authority Key Identifier:
                keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:93:78:ca:69:2f:af:70:c7:d8:20:d8:99:ab:ac:8e:e6:13:
         43:0a:bc:22:e3:ad:29:94:4a:c6:cc:2b:66:d8:4d:d1:56:e4:
         9b:20:bf:21:81:5a:26:1e:36:48:bd:db:9c:aa:6c:1d:57:94:
         b7:61:53:70:71:d4:ad:4e:87:13:20:6a:73:40:6e:28:d6:92:
         04:2d:09:63:bf:22:8c:79:b7:6f:b4:8a:c0:7c:d6:49:ab:fc:
         af:3c:0a:ad:ec:fe:45:73:39:5e:59:c4:4a:36:eb:2e:21:70:
         d0:68:fc:2c:48:46:cb:c4:2f:26:36:a5:af:85:4d:3a:37:4d:
         b4:68:e7:20:63:11:3a:ed:32:92:33:64:ca:36:e6:d2:bf:8c:
         fd:fa:b5:49:90:d2:ef:8a:4e:c6:46:32:b6:f7:c9:3b:71:4f:
         ee:06:ab:d1:30:a5:75:c4:8b:dd:e2:40:a3:d2:51:b0:b6:99:
         5d:97:89:f3:c6:58:7e:5c:cf:0f:56:b6:6f:98:00:bc:ab:4a:
         38:7e:5d:cf:6a:e1:d3:3a:5d:32:5f:90:52:ef:5b:5d:b3:9a:
         1e:8e:fa:ba:b4:2c:b0:cb:a4:0d:43:0c:64:1d:2c:5b:3f:f0:
         3f:00:fc:74:ae:1a:a9:1b:05:7b:85:0e:a4:4c:47:61:18:1c:
         aa:b3:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:01 2026 by rpki-client