This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File:                     rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier:          q6MsEO0ljSTyNyJDyTqGhHe8AMPlTLQ3nSRgqzIqkf8=
Subject key identifier:   B8:98:B7:04:41:6C:34:BF:A9:BF:7C:A8:3A:61:FD:69:58:A4:E8:2E
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer:       /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial:       019C43223D88E951FD5449DD2329E84E457D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number:          04FE
Signing time:             Mon 09 Feb 2026 16:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:43 +0000
Files and hashes:         1: LMFtBS2aexBP5idp4kn9Cblsyrg.roa (hash: SFFRBNG1AmZ+gynl5+RE9vwnB25aOjb/67Op7mUiN24=)
                          2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: noYMiv05x9XoxGDtZ6ZibhDhIy8Z2Xj7d6P9ciuLz10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:3d:88:e9:51:fd:54:49:dd:23:29:e8:4e:45:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
        Validity
            Not Before: Feb  9 16:00:43 2026 GMT
            Not After : Feb 10 16:00:43 2026 GMT
        Subject: CN=b898b704416c34bfa9bf7ca83a61fd6958a4e82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:13:b9:3d:1a:f9:f9:42:47:28:55:38:ca:
                    4f:5d:75:ea:9d:aa:b8:a6:c3:08:9f:db:b7:c9:ce:
                    d2:f3:66:b7:de:6b:73:50:b1:8f:02:de:d6:f7:be:
                    b2:b1:dd:1a:bf:f7:23:20:af:cb:85:f6:56:05:22:
                    75:9f:8f:89:5f:d6:cf:29:ea:02:eb:5d:e6:81:44:
                    ab:74:60:d5:44:4d:a3:5b:76:d6:bc:7e:c4:6a:2d:
                    54:d9:56:1a:25:d6:af:5b:3c:2e:b0:51:82:ee:e7:
                    57:ad:ad:49:ea:84:5a:a3:50:2c:98:2c:fc:4a:fd:
                    c7:17:a6:22:e4:77:3c:cf:ad:ad:91:05:c5:bf:bc:
                    f0:87:00:61:74:9b:95:18:c7:1f:93:2b:36:35:24:
                    b0:f7:39:15:e7:ad:0a:05:b5:e9:46:37:28:af:1c:
                    b8:90:a5:4b:7f:3e:44:d7:99:d4:dd:4d:5d:03:0d:
                    bd:2c:db:4a:ef:bc:2a:5c:0c:8f:95:d1:a5:49:00:
                    a5:63:6f:8a:97:09:2d:ac:59:a8:fe:af:50:5b:3c:
                    e9:93:12:c2:b8:61:f3:b6:2a:ca:82:a8:71:c8:ba:
                    56:ad:ac:0d:34:8a:8d:a3:f9:b4:69:07:66:cf:f9:
                    cf:14:4a:12:9f:ea:cd:54:ed:8f:70:89:d1:78:e1:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:98:B7:04:41:6C:34:BF:A9:BF:7C:A8:3A:61:FD:69:58:A4:E8:2E
            X509v3 Authority Key Identifier:
                keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:28:8d:80:9e:9e:75:89:f7:2c:ae:64:00:0e:ab:6b:a6:6d:
         69:20:5a:56:c0:bb:3a:c5:52:57:1e:df:fa:11:d0:40:c2:ac:
         97:f9:9d:11:2a:4f:5a:13:ff:90:09:a7:8b:97:90:87:04:1e:
         b4:32:1c:cd:bd:be:d8:dc:fa:f2:1a:bc:ea:99:b9:9c:48:8b:
         2e:9a:a7:bd:f2:d3:fb:d2:fd:0d:83:96:98:73:39:c1:b0:25:
         b1:91:a9:9f:f5:d7:d9:86:9c:e3:f7:e1:07:cd:7d:af:1c:e5:
         13:2f:83:46:14:42:15:b5:98:dd:ac:b3:c8:03:42:f4:7e:a1:
         f7:e0:cf:9c:9f:4f:ae:a5:58:3d:6c:d2:21:68:27:9c:4f:ea:
         4d:0a:89:4f:b6:72:b9:20:c4:78:3d:99:23:59:91:c2:94:7d:
         fd:b0:93:4b:d0:70:0a:b6:06:77:91:fe:e2:95:27:a8:ef:28:
         ff:12:04:8d:b2:03:c6:ba:84:1b:a7:ef:03:72:52:7a:a3:c1:
         fa:77:5c:3d:26:ed:a2:8d:af:62:98:1f:e6:07:be:03:57:e6:
         d6:48:49:09:5a:8c:bb:85:0e:ed:d1:96:23:dc:04:21:8d:07:
         8d:0a:af:3d:f8:d9:ba:b1:df:37:a2:18:29:a2:16:43:14:11:
         a2:3c:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:08 2026 by rpki-client