This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File:                     86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier:          QBrwYAKKNgOoy9GNdlwh4n6rARgQ/tNK1ONSjuuADbw=
Subject key identifier:   9F:7C:12:7A:BA:1B:40:19:C1:35:7F:8D:80:70:02:9B:81:31:E9:83
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer:       /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial:       019C42EB359F957A22D2872D6905E9043E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:36 +0000
Files and hashes:         1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: +XdVqHL2eoIAVYSF3iFUhoppOQXfrVhQXzDjW2BXNWM=)
                          2: jG7UljAuuxYHX96gS0QyREMzdRQ.roa (hash: 19kVtm64m/XsZnVHfeflpspzTQFT7lMVc8YGmtMpmeY=)
                          3: sL_kO6glXhgKCKzZJakKCk1w7pw.roa (hash: QnUXfnVCoxqWyTYKHVanM+qXpxh9bvdVjRpLXx6NLxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:35:9f:95:7a:22:d2:87:2d:69:05:e9:04:3e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
        Validity
            Not Before: Feb  9 15:00:36 2026 GMT
            Not After : Feb 10 15:00:36 2026 GMT
        Subject: CN=9f7c127aba1b4019c1357f8d8070029b8131e983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:77:3d:15:ae:d7:76:45:4b:54:39:39:03:
                    59:c1:63:79:4a:77:03:c6:a3:c5:17:b9:71:f0:32:
                    18:60:df:55:b2:63:c8:86:07:09:c1:fc:d1:8f:4e:
                    34:2f:7a:a9:7a:71:82:00:fb:1a:a3:8e:39:25:2f:
                    73:52:13:3f:5f:54:42:a5:f7:71:d9:6e:92:89:2a:
                    b1:f0:44:3e:a9:00:9e:7c:09:99:8d:27:10:07:01:
                    8c:72:75:6b:0d:25:fe:ec:0c:5c:d0:28:a1:12:6f:
                    27:7b:27:f5:3b:66:bf:98:0e:7e:26:ce:32:f6:c4:
                    09:06:51:fc:3d:e6:9e:22:5f:01:a8:55:72:4d:33:
                    ef:c5:3c:6f:ef:bb:08:f2:f8:92:c7:0f:40:fa:7e:
                    18:db:d6:b8:cb:d6:c7:e7:7b:f3:a3:bd:18:89:9f:
                    ac:c3:91:e1:fb:bc:32:fd:5b:fe:c3:6c:88:59:12:
                    89:8c:c5:90:d1:d6:ac:30:61:2b:f2:ed:5e:25:d7:
                    a0:6a:3d:c1:f1:1a:11:1e:47:58:50:38:9a:73:23:
                    ca:7b:9a:c8:ca:ae:18:87:11:ae:b0:8e:01:c1:32:
                    12:01:60:37:0b:e0:26:c8:1a:0c:3d:1e:64:dd:85:
                    68:30:6e:92:cd:e4:33:0c:42:49:d2:89:d9:ba:56:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:12:7A:BA:1B:40:19:C1:35:7F:8D:80:70:02:9B:81:31:E9:83
            X509v3 Authority Key Identifier:
                keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:68:69:3e:97:fb:00:53:19:35:b4:08:8b:89:1b:6c:62:29:
         06:c4:46:33:1d:9b:79:49:e9:f7:80:83:70:31:d9:36:9a:bb:
         ed:c0:aa:ae:fa:c5:45:c6:3c:0d:af:80:4d:c5:b2:b4:07:5c:
         87:e9:78:2f:5f:23:2c:a2:ec:56:93:fe:5b:56:44:e4:ae:f6:
         df:1f:2e:c3:c6:a0:ce:f3:bd:91:31:3b:6f:60:b5:e6:50:4c:
         3a:21:99:f2:d3:cc:48:45:f4:0f:d5:31:39:1a:f9:45:fa:76:
         75:71:42:3a:1e:e5:e1:34:c9:19:ce:7e:8f:aa:67:9a:f3:db:
         31:3a:f3:21:c0:ba:0f:aa:e4:ac:7c:5f:e3:ef:2e:87:eb:d8:
         64:8f:b2:9d:53:0d:d3:20:d3:a8:1b:c1:e8:20:1e:5c:30:05:
         5e:f9:9f:f3:b9:0c:22:d7:e7:af:c5:bd:2e:05:3f:86:ed:82:
         88:ef:95:55:5b:05:38:3c:d7:d8:fc:bb:15:08:9a:75:b5:71:
         97:27:20:e5:09:d6:ea:83:bf:24:44:6e:40:60:fc:66:41:0f:
         36:7d:3a:66:0f:c2:c6:51:cb:6a:ec:c0:d6:77:c7:10:73:79:
         d7:17:0a:67:ea:3d:ec:03:27:95:8a:ca:c9:06:6c:e7:63:f1:
         80:9b:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:00:48 2026 by rpki-client