This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File:                     AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier:          WRd4t8OD6te1W84067f4VVQm53Y1FxGdloCVGiugISY=
Subject key identifier:   48:2C:04:A2:F7:B7:4A:6B:7C:17:A8:01:7D:3D:F2:45:DA:AD:DA:37
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer:       /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial:       019C4246B9293CA02CE427C2A761D97AA03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number:          0334
Signing time:             Mon 09 Feb 2026 12:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:57 +0000
Files and hashes:         1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
                          2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: QMDII/R5Wgexi/LuVjYl7f9yREW6qz0CqjP2mWfxJLs=)
                          3: d9Ge2npzpsYZ4-H4VMZTmU7XIWw.roa (hash: gyeML4vxjWokwcPNE5B6qDQbqzNUghx/e5PMeQjFWBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:b9:29:3c:a0:2c:e4:27:c2:a7:61:d9:7a:a0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
        Validity
            Not Before: Feb  9 12:00:57 2026 GMT
            Not After : Feb 10 12:00:57 2026 GMT
        Subject: CN=482c04a2f7b74a6b7c17a8017d3df245daadda37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:c1:00:4d:3b:3e:9a:6c:b6:07:d0:aa:26:
                    3b:66:ac:46:5a:7f:20:d4:b9:3c:80:78:78:1a:a4:
                    1a:13:5c:33:12:e9:3f:e1:5a:ea:cf:f9:16:31:67:
                    26:70:1a:7a:39:bc:82:6d:2f:03:a2:d8:fa:99:70:
                    22:5a:31:aa:f2:9c:18:a9:11:cc:b8:5b:68:15:f3:
                    68:34:71:5d:9d:c8:68:52:80:a9:d7:6c:16:19:2b:
                    a0:b0:21:84:b1:e1:8e:90:2b:53:d7:4d:b7:6e:ac:
                    03:b7:5d:07:06:c1:83:b3:3d:2d:f7:d3:e9:b1:0d:
                    07:79:b0:94:c9:0e:f5:6e:73:f4:e0:45:56:33:18:
                    1b:38:33:8b:da:6e:28:e8:aa:fc:94:23:c0:22:ef:
                    a1:8d:47:7f:30:76:33:6c:37:b2:c5:39:1e:41:d5:
                    1b:fb:1e:bd:8d:ea:11:49:ac:29:6f:a6:1d:74:a6:
                    aa:0b:23:7b:5a:fb:e4:b7:c0:ba:91:b4:d3:3a:23:
                    5b:59:ad:6e:76:0a:69:50:76:65:55:c9:f8:34:54:
                    13:bf:85:e8:9c:62:f6:89:ba:d9:19:25:89:5f:01:
                    53:19:35:23:b9:a2:65:58:95:47:d2:3b:ca:e0:4f:
                    31:98:22:45:ef:ed:ae:e0:0e:33:b2:6c:d6:ab:bc:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:04:A2:F7:B7:4A:6B:7C:17:A8:01:7D:3D:F2:45:DA:AD:DA:37
            X509v3 Authority Key Identifier:
                keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:51:7c:e7:a2:79:3e:a0:f1:95:01:a2:9b:28:72:ba:ff:fa:
         fd:89:39:e9:d5:fc:93:bc:88:c1:31:29:b6:89:31:da:d5:5f:
         69:92:ca:5c:e6:1e:6c:3f:dd:93:6e:3c:bb:6a:1a:2c:31:a5:
         58:64:af:1e:48:11:94:ee:82:ee:79:29:81:4e:c1:74:65:c9:
         96:9a:73:3b:43:78:4e:6c:12:aa:f8:41:d7:4a:f6:d6:61:6b:
         ec:3c:38:ea:7a:32:86:2a:f4:3c:20:85:a8:f3:9e:3b:2b:77:
         ae:cb:d1:ed:60:36:a8:cb:0c:88:4a:ed:10:0e:5c:24:8a:8d:
         03:c9:b9:4a:74:f3:08:37:80:1f:36:b3:a5:3c:0c:5c:0a:88:
         59:16:45:e1:4e:70:e2:6a:1b:8f:a0:9b:3f:e2:67:ab:aa:76:
         cb:e3:1f:e1:3f:18:d2:d0:d8:35:19:1b:64:8e:19:1b:13:25:
         50:cc:ec:92:1f:ee:13:c4:4a:6a:39:b5:c4:5e:33:d4:ea:ae:
         a0:5c:8c:5d:e7:54:8b:48:76:3b:14:36:0e:20:31:3e:8c:b8:
         49:06:f9:2d:0f:b1:5a:cf:d9:07:aa:97:c9:b7:ec:dd:dc:99:
         cc:e9:8a:68:62:3d:4a:46:68:2b:0e:7b:4e:40:a5:a3:31:94:
         f9:4e:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:31 2026 by rpki-client