This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File:                     sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier:          pTpX7ZjBYO1r18rNMtBfR+FWIuMu9ek7+c+joR8RYe0=
Subject key identifier:   B0:92:F8:2A:BB:9F:E2:DC:09:AF:1F:51:2D:3A:19:39:55:10:99:EC
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer:       /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial:       019C424620C96EF4BE3FDE1EE9C6BCCCA6F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number:          0B8F
Signing time:             Mon 09 Feb 2026 12:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:17 +0000
Files and hashes:         1: IJKIXwWuN6-eGYq5G-LYUVnvIT8.roa (hash: 6DhTi3XwDZIX8aIPWMhc+0Awf+2qKC+vCqi+I2myhow=)
                          2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: NgVEFFfJx8eW1cU1UseZRkNLIFwLQdMk7a0OvlkEtbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:20:c9:6e:f4:be:3f:de:1e:e9:c6:bc:cc:a6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
        Validity
            Not Before: Feb  9 12:00:17 2026 GMT
            Not After : Feb 10 12:00:17 2026 GMT
        Subject: CN=b092f82abb9fe2dc09af1f512d3a1939551099ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:70:20:80:b1:33:4c:66:ec:d4:95:ea:53:
                    b1:aa:56:62:03:cd:4c:5c:32:30:6f:88:f6:91:f6:
                    3d:97:2f:77:5a:cc:27:c3:09:2c:51:93:43:f3:df:
                    3b:ac:39:f1:a7:91:5d:a2:73:d7:a7:03:bb:9c:b2:
                    ca:b4:55:d8:b1:fd:d5:1e:08:b3:b4:eb:57:78:08:
                    0f:d5:0b:df:98:23:42:7a:dc:2d:cc:14:9f:6b:15:
                    bb:11:4e:23:10:63:5e:d1:42:a8:00:4b:58:9d:8d:
                    0e:62:ff:58:9d:0e:50:e2:d0:93:c6:a0:4c:07:72:
                    41:e7:9f:af:04:80:c7:86:c0:02:77:04:c8:4b:9d:
                    cc:8d:9b:7a:f4:ee:be:e5:32:39:92:cd:ee:33:26:
                    96:9d:0c:d8:ad:2e:f3:88:84:3f:88:d4:34:39:21:
                    64:7e:28:25:48:ed:2d:05:0a:84:ff:6a:89:a0:6c:
                    b2:ce:18:f1:06:2f:a3:03:c7:1e:3e:c0:31:11:a6:
                    b5:da:8b:5d:2a:9b:ff:11:21:cf:f6:1c:56:90:19:
                    0f:8f:fc:3e:59:16:bd:7d:0b:a0:70:05:e5:9c:69:
                    c5:5d:65:dc:95:78:64:1e:21:51:94:6a:ba:ed:76:
                    b1:a7:74:4e:cb:9b:ad:ea:dd:f6:f1:c0:25:30:c7:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:92:F8:2A:BB:9F:E2:DC:09:AF:1F:51:2D:3A:19:39:55:10:99:EC
            X509v3 Authority Key Identifier:
                keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:55:8f:09:48:6e:fa:64:e6:15:80:f3:b3:02:39:2e:ed:8c:
         22:28:b6:4c:59:ef:7c:29:59:41:93:52:ad:f6:e0:66:8a:28:
         c7:ac:87:56:1e:2e:77:18:26:99:69:29:16:db:21:8c:bd:d0:
         37:f4:60:1d:ae:eb:a6:da:d7:64:32:e4:cd:d9:ad:96:5b:dd:
         17:31:50:14:15:db:7f:08:03:e7:c0:5e:c3:aa:97:31:be:78:
         61:4a:44:4d:5d:eb:fc:ac:78:3f:78:31:5a:ea:1f:78:e7:02:
         96:e8:f3:d4:eb:a2:eb:8f:36:99:97:de:a0:91:2a:38:48:6c:
         3a:5d:ea:bb:26:4b:e1:b5:f1:aa:2b:ef:a3:db:2b:11:cb:ae:
         dc:3f:0d:e0:b8:9c:44:ad:d2:10:b0:6e:e5:3e:6c:b2:73:8f:
         16:1d:32:25:f8:04:b7:ea:e3:50:e8:be:c0:53:ac:0f:84:db:
         a4:4d:ae:0a:ba:a4:f5:64:9b:2e:fd:31:9d:60:5d:9e:fd:46:
         dd:a7:6c:83:a6:6d:38:54:58:f9:5b:e5:ff:51:d8:82:fc:b9:
         93:ed:cc:94:1a:7b:c1:37:90:3b:6b:84:3d:43:89:50:45:39:
         77:03:13:9f:c2:1e:ab:ed:db:c0:78:06:b2:bc:0e:c2:f7:50:
         1c:b2:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:23 2026 by rpki-client