This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File:                     RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier:          RwQiMJmjtgOcEgeNLIKmICZ/Eks7M0hEqxWBcbuYf18=
Subject key identifier:   D8:96:FC:2C:FF:EF:B8:8A:20:9B:AB:81:BE:9F:50:7B:0B:58:43:D0
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer:       /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial:       019C42B40499FB800463035018D889C37C5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number:          06E7
Signing time:             Mon 09 Feb 2026 14:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:19 +0000
Files and hashes:         1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: 8jSMAEM+izAzjQ0HHe53S76jUM1c+xa4KtrgYhclUqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:04:99:fb:80:04:63:03:50:18:d8:89:c3:7c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
        Validity
            Not Before: Feb  9 14:00:19 2026 GMT
            Not After : Feb 10 14:00:19 2026 GMT
        Subject: CN=d896fc2cffefb88a209bab81be9f507b0b5843d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:4f:a8:1b:b8:33:0f:ec:0a:ba:c6:cd:25:
                    9f:13:f9:1e:da:27:86:0f:c0:5b:44:24:1e:c5:d5:
                    42:c1:d1:61:d2:ed:a8:c4:bf:35:42:b0:97:80:ae:
                    74:ce:d6:33:8e:2d:9c:e5:ca:1c:b5:b1:e6:71:ef:
                    82:86:ce:7c:54:3a:7a:ea:ed:06:b6:1b:7c:5b:6f:
                    fe:dc:ac:c5:50:8f:c2:50:09:96:1e:37:d1:0b:f5:
                    f8:97:8c:8d:b2:d9:35:45:ef:db:89:a9:d0:28:06:
                    ca:00:94:63:ee:05:be:ff:5d:a0:fe:af:5f:e1:87:
                    37:cc:42:a6:ca:53:c2:65:de:af:e2:45:f7:7f:f0:
                    fb:e1:2b:37:49:ba:cc:83:c0:9d:03:6c:e2:0b:c4:
                    5b:ec:72:82:c7:1e:06:08:7f:25:b1:da:13:64:f8:
                    d8:87:56:77:c5:18:f8:f6:f5:f9:78:9a:17:81:fd:
                    b2:34:a1:cf:d4:68:36:36:7b:87:7d:ee:cb:22:46:
                    66:6e:94:79:32:43:59:88:3c:a7:0a:6b:81:0f:23:
                    4f:46:99:fe:b3:86:a4:29:b4:2a:c4:d0:52:0a:bd:
                    25:5c:70:6a:be:a4:61:0d:97:fb:14:5e:07:f0:86:
                    c9:91:a4:50:45:4b:1d:8d:bf:45:e4:12:53:e1:ea:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:96:FC:2C:FF:EF:B8:8A:20:9B:AB:81:BE:9F:50:7B:0B:58:43:D0
            X509v3 Authority Key Identifier:
                keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:50:b6:16:06:09:bd:11:c2:bd:37:24:b6:14:cd:9c:9b:6d:
         01:da:a0:de:07:3f:4d:5e:f0:09:8a:12:77:56:26:0c:fe:72:
         a1:90:13:32:8f:0a:ca:d0:4b:42:c6:08:be:0a:46:e2:76:d5:
         65:c0:ae:84:68:e6:67:48:40:1e:b5:89:63:9f:5c:36:14:7c:
         b3:bc:04:90:b1:6b:54:a9:d0:bb:b7:75:3d:05:61:bc:4b:40:
         a2:f4:f5:3b:35:84:e1:a8:a5:60:03:e9:b2:a9:a4:2c:3f:7d:
         4e:e5:8c:fc:58:a8:0a:a3:67:38:6f:4a:6c:37:b1:da:f0:d0:
         61:dc:1c:50:89:8d:eb:9c:c3:3a:5f:81:80:09:5e:25:b9:36:
         1c:80:f4:ce:14:7b:de:54:c8:52:8a:ed:25:4e:56:75:2b:96:
         b2:38:aa:c6:40:72:43:da:a2:80:01:d0:b2:d4:e6:89:65:fd:
         76:8a:60:71:26:95:69:eb:74:24:39:ab:1c:60:8d:da:d6:a5:
         85:c4:31:8b:08:c8:ee:d2:97:84:4d:5b:af:65:18:46:df:10:
         bf:de:34:c0:a1:cf:28:2a:c3:d3:75:db:bd:81:50:5c:a3:c3:
         0b:fa:26:cf:9d:c0:21:79:4e:90:5c:26:d0:d5:75:e9:1c:18:
         60:bf:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:25 2026 by rpki-client