This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File:                     240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier:          JcTGJfm0BCSEh8RopAkt78aq/JJtbEehvQ/WJPbJbI4=
Subject key identifier:   B1:55:E8:4F:42:B3:71:9F:0D:76:1D:D4:C9:8D:98:36:0F:04:FA:8E
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer:       /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial:       019C4359528FAE59B105B7977B5E4F2DDC62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number:          14E9
Signing time:             Mon 09 Feb 2026 17:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:53 +0000
Files and hashes:         1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=)
                          2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: k6TpjbAeVAtLWyEjml2kGrnX8nWUiXU5WZU0B9J7UuY=)
                          3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:52:8f:ae:59:b1:05:b7:97:7b:5e:4f:2d:dc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
        Validity
            Not Before: Feb  9 17:00:53 2026 GMT
            Not After : Feb 10 17:00:53 2026 GMT
        Subject: CN=b155e84f42b3719f0d761dd4c98d98360f04fa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:17:50:12:b4:4a:48:a3:2a:9b:e3:69:3b:
                    2e:40:0c:e4:fa:f4:86:df:ea:8d:04:02:97:6d:e3:
                    d8:01:98:7b:1f:60:87:19:d4:84:a1:cc:34:20:a0:
                    00:ec:89:99:c2:a5:84:90:82:1d:4d:53:53:5e:ef:
                    05:da:00:d4:fe:58:87:14:9f:7c:bd:2f:1d:47:0e:
                    ae:57:41:0a:3b:35:ce:f1:d4:2f:58:fe:c2:18:69:
                    90:ba:77:10:b4:f9:16:1c:f9:2b:ca:d9:38:24:f7:
                    75:a8:5c:77:0d:6c:4a:e3:57:e6:5a:bd:3b:5a:14:
                    7d:2d:6c:b7:39:6b:82:25:3b:ba:8c:93:8d:ad:1d:
                    54:69:a6:5b:e0:e9:4b:fc:4c:22:e7:08:59:ab:f5:
                    3f:12:9a:64:98:07:c1:a3:20:d9:91:56:73:d0:fb:
                    6e:9e:22:52:a6:df:04:3e:6f:af:16:ff:d6:04:eb:
                    45:86:98:b7:53:4b:0c:6b:f7:d5:6f:b5:f8:3f:45:
                    3c:f7:b8:d2:cc:71:2e:72:58:72:cd:0e:59:90:a3:
                    7e:3a:b4:1b:e0:c2:c4:61:f3:0e:89:5e:4c:0e:04:
                    47:21:8e:ca:05:ad:e0:27:d2:55:3f:34:4b:80:f2:
                    21:f3:49:fd:79:2c:e7:88:71:b2:99:24:6a:1e:5b:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:55:E8:4F:42:B3:71:9F:0D:76:1D:D4:C9:8D:98:36:0F:04:FA:8E
            X509v3 Authority Key Identifier:
                keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:89:e6:06:9a:26:44:88:6e:2f:3f:50:f5:b2:8f:76:e6:
         4e:1f:e2:a8:f0:f8:38:9c:31:10:32:f7:62:ea:81:93:89:f4:
         e4:ac:3e:cb:96:06:96:c6:23:e6:de:43:b9:0e:4a:c5:b7:8f:
         97:b0:10:33:ea:45:84:0a:30:6e:1d:ee:23:8b:be:a7:49:8b:
         19:4a:a8:a3:df:c1:95:d7:80:08:3c:f7:02:3c:c9:00:3c:2c:
         49:9a:30:50:f2:bf:b6:28:00:0b:90:70:20:1f:b6:30:21:c8:
         dc:c0:b2:de:bd:4e:3a:e4:dd:28:d0:ac:b1:d9:3c:ae:ee:9e:
         12:60:66:a8:a7:b3:e3:ec:f8:9b:26:b1:b0:6c:14:ad:3e:e8:
         39:a1:98:16:17:be:bc:74:a2:c9:e4:05:44:1e:1d:12:0f:40:
         fa:cc:41:48:8c:25:05:b7:e0:4b:7c:5c:7f:03:bc:e8:46:a9:
         37:4b:a8:82:9c:6c:a5:08:87:6b:0d:41:ba:65:1b:51:2e:85:
         ab:87:1f:88:5f:6c:9d:aa:1c:ae:a7:73:fe:ed:2a:6c:77:80:
         52:5f:a0:58:e2:4b:59:06:dc:b9:3f:d9:35:07:ae:2b:ce:04:
         cc:d6:26:b9:1b:d9:77:64:41:20:05:a2:81:6f:a1:5d:51:4e:
         d3:f8:3b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:14 2026 by rpki-client