This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File:                     mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier:          rj99/6woieZdA4DZPi+B/xzMlXDW7rivK570Y88n8ls=
Subject key identifier:   49:A0:7B:E7:58:59:64:DD:91:61:7B:36:F9:AE:ED:0C:64:4A:A9:99
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer:       /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial:       019C43C72B40387B07E0540FD9FB7E899C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number:          08FB
Signing time:             Mon 09 Feb 2026 19:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:51 +0000
Files and hashes:         1: aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa (hash: 3bBdTpTJvuXiahizaCJvEqZFOKH3JQrv3q1L3oXewkc=)
                          2: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: kMURXfq2TGTprlZ7A7TRXBrK7rr0FO4qwXuGLywwXKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:2b:40:38:7b:07:e0:54:0f:d9:fb:7e:89:9c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
        Validity
            Not Before: Feb  9 19:00:51 2026 GMT
            Not After : Feb 10 19:00:51 2026 GMT
        Subject: CN=49a07be7585964dd91617b36f9aeed0c644aa999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:60:55:bb:36:b3:de:9d:d8:2f:6c:ef:cd:
                    80:de:fb:14:92:39:18:ec:6e:e9:80:93:df:89:70:
                    b4:08:55:6b:6b:db:7f:ec:e4:a0:96:3d:36:82:7f:
                    42:55:aa:bf:35:3e:a4:6d:9c:02:c6:9c:ce:10:3d:
                    fa:bf:cf:a2:3e:8a:82:ce:28:af:46:6f:6e:80:0e:
                    6a:cc:9f:82:bb:db:f8:0e:07:2a:9e:21:3e:d3:65:
                    43:87:bb:58:d6:59:61:b6:8a:1f:2b:b6:56:19:77:
                    b0:82:fd:ff:59:13:da:58:b2:dd:84:97:85:a4:67:
                    55:13:bd:7d:c9:32:13:6d:26:bb:ea:d0:74:fa:85:
                    b7:19:7b:24:ba:83:82:d8:31:36:48:f7:fb:3f:25:
                    1f:a8:f4:32:c2:32:9e:2b:b8:e5:30:ea:ba:39:ae:
                    52:ff:69:5e:28:e8:25:16:8b:95:8c:f2:82:b2:45:
                    6e:72:e7:02:e2:35:92:d0:09:17:d4:15:f9:94:29:
                    85:f1:c0:58:6b:19:96:ff:66:80:e7:ff:fc:4e:f9:
                    c8:f8:33:fb:8c:f9:e1:49:86:f6:53:e2:23:4d:e5:
                    d1:ec:d1:4d:3e:bd:35:58:3e:66:74:c6:b2:0f:a2:
                    ef:91:8c:7e:d2:c0:b6:61:8d:74:c9:ef:f1:02:49:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:7B:E7:58:59:64:DD:91:61:7B:36:F9:AE:ED:0C:64:4A:A9:99
            X509v3 Authority Key Identifier:
                keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e5:93:d5:6b:b7:bb:ab:3a:bc:cf:ae:83:ad:9c:01:86:e1:
         5e:de:28:10:a9:d5:5d:90:45:75:9d:49:e8:06:db:6a:54:cd:
         96:a7:c7:7f:63:78:b0:cc:f7:e5:e7:c5:c7:fd:e8:00:68:61:
         57:7c:e5:51:e4:48:f3:1e:68:b4:e6:33:29:fe:ed:9b:9a:58:
         c5:b1:c9:b7:00:5e:0d:d1:2b:7c:1c:f8:df:8a:44:5f:45:2a:
         fc:a4:aa:54:a8:12:94:03:92:d5:6c:40:27:13:b1:5a:65:ca:
         b6:8e:7d:6f:c0:48:ae:31:a3:cf:d8:0f:8b:a9:76:b1:42:25:
         54:f9:70:6b:57:00:be:87:1a:d4:56:7f:cf:ae:41:b9:de:5d:
         ea:7c:ed:13:fd:e5:2b:15:38:dc:5c:fd:b2:d6:3d:47:ba:31:
         21:68:27:59:02:4e:60:cf:74:d3:31:43:41:4e:f8:d4:80:d0:
         1d:d7:1c:20:de:7e:94:dd:ed:39:3d:2e:29:9c:95:60:d1:99:
         3d:ac:1b:9b:d5:6b:86:94:21:23:9e:49:5c:d5:c1:79:a6:b5:
         4b:12:a6:9e:f5:26:99:c8:2b:30:8b:54:5d:f1:92:21:ab:b0:
         33:d0:4f:6d:10:7a:42:06:99:c8:1d:1e:f9:18:a7:dc:49:3b:
         3f:27:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:28 2026 by rpki-client