This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
File:                     RmSWpNugTX71InAAYXQ8bF0K5ZA.mft (raw, json)
Hash identifier:          tkyxVeGeJnK5BBcnbLcSoABUvfhTOg/evL1WHmZaoKM=
Subject key identifier:   83:47:92:49:C7:3E:6A:EB:7F:02:62:A8:0F:13:24:FE:8E:F9:93:BD
Authority key identifier: 46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90
Certificate issuer:       /CN=466496a4dba04d7ef522700061743c6c5d0ae590
Certificate serial:       019C4246A0D9FB567B765A4E320CDC8356C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
Manifest number:          01F0
Signing time:             Mon 09 Feb 2026 12:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:50 +0000
Files and hashes:         1: 3dbS8smJeXr53W5r6BKkhghgmVA.roa (hash: NwzZDsWqf9Bvz7l6x4U3TUe9LXVQFlbNiLk7V4n0q2g=)
                          2: RmSWpNugTX71InAAYXQ8bF0K5ZA.crl (hash: F0SET3x0fnOwN2+y9/vLBauGEmw7k54IAzt8yFehW50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a0:d9:fb:56:7b:76:5a:4e:32:0c:dc:83:56:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466496a4dba04d7ef522700061743c6c5d0ae590
        Validity
            Not Before: Feb  9 12:00:50 2026 GMT
            Not After : Feb 10 12:00:50 2026 GMT
        Subject: CN=83479249c73e6aeb7f0262a80f1324fe8ef993bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:0c:51:ac:61:c6:94:fd:91:f8:29:09:b5:
                    ae:88:e8:13:2a:22:bb:e2:fe:d8:ca:0b:b4:cd:c2:
                    4f:cc:a7:76:d3:17:e5:7b:84:6e:1c:f0:a7:2d:d7:
                    d0:27:09:28:00:9b:6a:d2:52:79:67:cd:2b:9f:76:
                    43:7f:76:59:3b:fd:20:c9:0d:8a:56:49:f0:6c:63:
                    c9:83:60:e3:23:6e:93:41:ca:44:b1:b7:98:e1:e7:
                    3f:1a:b1:d3:79:e8:9a:08:6b:8b:1b:d0:cb:16:d9:
                    42:75:7d:cb:a7:40:32:9f:fd:b9:46:81:99:6d:a6:
                    2b:a0:dd:0b:84:94:d5:33:41:c4:b1:5c:c1:24:1b:
                    57:64:2e:85:53:25:24:e8:37:54:a4:a8:c1:5b:b6:
                    7b:79:f6:b4:81:03:d9:b9:71:60:52:3b:53:d4:18:
                    47:91:7f:e8:c8:cc:04:bc:19:be:3e:bb:5a:e8:92:
                    ab:53:88:16:47:7e:73:40:ac:cb:d3:07:90:4c:f8:
                    81:1c:5c:23:c1:b7:5b:36:cc:7f:4d:16:99:3d:3a:
                    68:20:8b:20:13:85:75:1d:da:7d:3d:06:0d:e2:dd:
                    aa:36:dc:e3:2a:a0:e2:b4:14:e6:c7:fb:c9:4e:fc:
                    9d:ef:df:2f:75:dc:45:de:09:56:a9:19:1b:9b:96:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:47:92:49:C7:3E:6A:EB:7F:02:62:A8:0F:13:24:FE:8E:F9:93:BD
            X509v3 Authority Key Identifier:
                keyid:46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:32:eb:57:dd:0b:bd:9f:0a:32:0b:bc:c6:16:a6:5c:ef:
         da:3e:b6:93:0c:c4:da:a3:7d:63:96:6e:7f:f8:c2:c2:a7:da:
         21:22:25:98:fc:e8:79:91:00:ed:8a:d8:d5:24:6a:66:29:1d:
         d8:78:6e:75:6d:cc:1b:30:cc:8a:b6:be:c0:54:e1:f3:b5:07:
         de:09:cb:c6:50:2f:30:28:f4:76:0f:01:64:49:cf:42:a6:7d:
         fc:b4:f4:77:5e:0b:c5:61:54:be:bb:d7:03:47:3d:aa:a6:e5:
         10:b7:29:7d:f1:d9:76:38:55:a8:78:ca:f0:59:04:98:6c:88:
         ec:3c:55:ab:4e:c7:47:49:07:d0:07:a9:3e:0c:a5:fe:f7:1e:
         3e:2c:74:a7:94:f9:ea:8e:ae:5c:5a:c4:9b:44:99:b3:d2:f3:
         39:c5:25:68:f3:00:e0:79:f9:45:3a:6a:b1:36:30:fb:9e:6b:
         9c:b5:42:16:fa:77:b2:98:2b:a9:fd:93:ea:23:91:54:44:89:
         23:b7:8c:b2:86:cf:35:85:4d:ff:41:02:85:79:d6:d1:07:ec:
         bd:a7:da:1e:7b:0e:da:5b:38:dd:b2:5f:7c:7d:64:88:5d:4c:
         a0:a6:75:ab:70:4e:c1:89:ab:32:a7:a2:b1:32:bf:63:a9:17:
         4f:b0:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:22 2026 by rpki-client