This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File:                     C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier:          776X2tWhuB7qMxkUwCAfvdb9F4qmGSpMxUG2slqRKhQ=
Subject key identifier:   0D:61:D3:0A:94:86:76:43:81:39:1A:2C:C8:C2:85:71:C3:3A:12:89
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer:       /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial:       019C4434D7CDC78F3B76BA4FE33032CFF1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number:          0C7E
Signing time:             Mon 09 Feb 2026 21:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:39 +0000
Files and hashes:         1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: N8Y4p4XquqGj8SaqTgKsaAIGUAB79CL6odQfY0Qkk/s=)
                          2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:d7:cd:c7:8f:3b:76:ba:4f:e3:30:32:cf:f1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
        Validity
            Not Before: Feb  9 21:00:39 2026 GMT
            Not After : Feb 10 21:00:39 2026 GMT
        Subject: CN=0d61d30a9486764381391a2cc8c28571c33a1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b5:57:6e:75:26:ff:13:01:74:8f:a3:53:45:
                    b6:2f:6f:67:b3:c3:0a:be:ad:c3:cf:94:62:b9:a8:
                    43:15:d0:ce:1f:15:45:f9:3a:a8:a2:62:d7:7a:1c:
                    d7:74:4e:83:de:8e:87:76:66:24:c1:b3:78:3b:61:
                    ce:84:fd:92:0d:c0:43:ff:1b:5e:7f:11:48:d8:c2:
                    a5:dc:9a:07:0f:e5:3c:01:5a:46:60:10:ad:38:27:
                    09:12:f5:f1:40:7e:3d:22:43:19:d9:89:8c:7c:04:
                    a2:dc:d2:52:da:0e:e5:94:45:76:9f:bd:af:5a:6a:
                    65:8f:4f:22:16:07:ce:ef:05:5b:5a:5e:06:b4:f7:
                    ee:49:89:1b:25:cd:4d:2b:c2:9f:d9:5f:c5:e5:30:
                    e8:2b:3c:cd:d7:25:17:42:8b:aa:20:f6:7a:39:ac:
                    57:61:85:a5:28:bf:e5:33:e9:02:70:6a:78:e6:ce:
                    fc:e8:81:46:c2:e7:80:e0:ea:dd:5b:f6:18:03:84:
                    2e:84:75:32:79:ac:dc:36:14:27:cb:62:72:69:b0:
                    7a:18:2d:fc:96:4f:c2:16:a0:2c:45:15:8b:65:69:
                    39:d1:3c:5b:77:a7:28:1a:e0:89:05:dc:db:6b:71:
                    14:c4:e3:11:d3:30:25:94:b1:42:1e:af:84:36:54:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:61:D3:0A:94:86:76:43:81:39:1A:2C:C8:C2:85:71:C3:3A:12:89
            X509v3 Authority Key Identifier:
                keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d5:3c:65:6d:88:ef:05:12:b0:a0:47:ab:d0:e2:c1:a8:c3:
         d3:5a:2e:d4:08:c7:a6:36:5c:db:10:5e:ef:ed:1c:18:55:1b:
         05:5e:03:33:05:48:0e:69:dd:fd:a0:6f:14:5f:31:2a:39:2e:
         3b:f0:5a:97:af:86:56:c9:ea:ee:2c:08:6a:7c:7f:d0:53:50:
         ed:f2:41:80:af:0c:95:54:9a:81:fc:49:d3:ed:95:d8:bb:b6:
         56:b3:8f:60:ba:e0:92:bb:50:8d:fd:ff:ca:30:5a:f9:7c:ae:
         f5:ba:94:d2:32:f4:fe:cf:87:d0:5b:ca:d0:d2:da:c6:91:31:
         1d:88:1d:b6:cc:68:f4:c6:95:11:cb:ea:be:e6:93:b0:37:db:
         ee:9d:76:ae:62:8c:1b:40:d2:21:df:4b:97:03:b5:57:a0:24:
         ee:92:5c:a7:72:f2:fc:64:44:bf:e5:28:7b:9e:75:87:c4:ae:
         d0:c7:71:ed:73:93:51:f4:bc:25:d7:83:89:30:8d:4e:cc:f2:
         64:f5:05:4f:26:22:01:f3:60:26:89:ee:c6:52:72:15:fc:6a:
         f6:d3:c7:a1:1e:7b:92:79:66:b6:bd:9b:48:c5:b2:24:83:41:
         19:29:d6:44:be:b5:14:ca:41:2e:0f:14:63:f5:f5:b9:27:88:
         65:30:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:47 2026 by rpki-client