This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File:                     SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier:          ML58emGKicffe5MPjyLwV10G3l/T7ombEqJb2geaGJc=
Subject key identifier:   77:41:68:2D:36:1F:02:73:C8:11:9E:E1:FE:F1:7F:FC:47:52:DB:A3
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer:       /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial:       019C41A217E61CD4B53BF4FBCBA5DB015979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number:          0CD3
Signing time:             Mon 09 Feb 2026 09:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:07 +0000
Files and hashes:         1: RmVwQ5QDa-u0kfemf1HFPFpXMmA.roa (hash: SnG3ckcP1LKPCXfY1k2hRbtP52VTd5x4C5Z2qirLLxA=)
                          2: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: HbVOZ1oIMJodL2Zu30YgcDY5rFImk7GiI6SB8upXHgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:17:e6:1c:d4:b5:3b:f4:fb:cb:a5:db:01:59:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
        Validity
            Not Before: Feb  9 09:01:07 2026 GMT
            Not After : Feb 10 09:01:07 2026 GMT
        Subject: CN=7741682d361f0273c8119ee1fef17ffc4752dba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:4d:42:79:f1:2e:94:5b:7c:eb:c3:f7:6e:
                    6d:6d:93:d3:22:8f:55:03:1d:dc:cd:d0:b0:13:d4:
                    80:ab:ae:0f:d5:ce:e2:aa:e9:24:5a:e6:31:7e:71:
                    74:60:b4:aa:6f:76:cc:0c:e0:77:51:af:97:ba:88:
                    8e:dc:6f:41:57:13:9b:13:b8:27:b1:d8:bf:a8:46:
                    e6:47:8f:2c:a0:ad:55:f2:25:0c:69:71:fb:d0:e6:
                    f3:6b:77:08:d8:5a:0e:3d:1f:4c:4c:a1:ef:34:bd:
                    3d:c2:69:a0:6d:15:e8:f6:21:51:75:72:38:29:0f:
                    7c:85:33:3d:f5:72:d1:58:ce:37:78:f0:f3:f9:7c:
                    7b:a3:2a:af:37:17:3d:6e:e6:dd:88:b9:df:70:95:
                    44:bf:ea:53:de:6e:eb:32:e0:a2:c5:0c:d1:59:4f:
                    b5:2d:ed:4c:90:ba:34:01:37:4c:95:5b:df:8d:78:
                    3f:1c:74:fc:06:ec:b4:23:d8:8a:85:17:8b:c8:e3:
                    2c:f0:4e:24:61:da:c2:d4:8f:04:3a:1d:de:0c:c6:
                    a1:41:f0:b3:0b:99:c4:b0:f0:42:e2:b8:07:57:20:
                    1d:9b:4f:7a:85:a3:48:1f:58:82:01:03:4a:2e:2f:
                    e8:28:19:c8:37:25:62:ea:8d:78:f1:9c:bd:b1:6d:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:68:2D:36:1F:02:73:C8:11:9E:E1:FE:F1:7F:FC:47:52:DB:A3
            X509v3 Authority Key Identifier:
                keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:74:84:61:9b:99:e5:7e:06:28:f6:55:39:40:91:2c:4c:d8:
         8a:f2:89:f3:c9:38:97:3b:f8:06:36:ba:07:57:14:ba:0b:22:
         a4:e1:1c:b4:a8:07:56:6b:a6:f6:59:8e:82:6e:d7:9c:ef:b9:
         34:9f:37:d8:c1:d6:a4:5c:8d:1f:78:b3:8e:54:73:7e:4d:46:
         3a:ac:f3:47:b3:41:6f:f2:7f:8d:35:d4:67:48:ef:62:eb:a6:
         cc:de:48:c7:cc:0a:6a:57:aa:44:60:43:57:f1:60:13:e1:25:
         c1:91:db:f4:51:e9:76:db:d7:b9:e3:bb:eb:b9:96:b4:b2:9f:
         ef:60:19:70:4e:57:5c:20:3d:99:ae:9d:10:b4:b3:77:61:45:
         c2:97:96:a9:ef:82:fd:93:2a:6e:48:55:c3:01:a1:8d:fd:34:
         58:9b:09:46:dc:d6:23:fd:0a:91:3b:92:d6:2a:ac:73:f3:93:
         7b:44:a6:01:29:8b:22:83:cb:0f:84:c5:b2:d9:b7:77:75:72:
         f1:d2:65:f8:a4:59:e5:42:9b:bb:6c:5e:e0:18:7c:7f:22:d6:
         8b:b8:d4:f2:d7:48:a9:52:c4:6a:a6:a6:10:e0:91:45:45:ab:
         a4:19:4b:82:e1:d3:07:b5:60:a8:9c:e8:56:73:e7:c8:7d:cb:
         de:57:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:45 2026 by rpki-client