This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
File:                     l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft (raw, json)
Hash identifier:          9BmBi75EDXwEL32MJPDg+xUmZUmftA5lPzT8Qca9N/w=
Subject key identifier:   90:82:27:D7:AD:C8:1A:55:37:C1:86:72:93:FB:E8:4F:A4:4C:55:BB
Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
Certificate issuer:       /CN=978f41e290285473c2a1e2be7f66f63452ed4644
Certificate serial:       019C427E27545A271A67FAEE0D48C8AEA26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
Manifest number:          1744
Signing time:             Mon 09 Feb 2026 13:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:29 +0000
Files and hashes:         1: l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl (hash: fkrKNotx5oA0xFy72XtXtyh3mqShYH2/Z1+j8Vi7oFo=)
                          2: nND7jF-o9OkvAL1phsl_cTtcTB0.roa (hash: AQ6W42SUBOPzvlMA3LCx6a7jc2ujNqo1gbFLMnC35vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:27:54:5a:27:1a:67:fa:ee:0d:48:c8:ae:a2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644
        Validity
            Not Before: Feb  9 13:01:29 2026 GMT
            Not After : Feb 10 13:01:29 2026 GMT
        Subject: CN=908227d7adc81a5537c1867293fbe84fa44c55bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:2c:11:8f:50:36:eb:27:20:33:29:78:f5:
                    fc:5d:12:10:b1:b0:ef:fd:47:34:47:e2:f3:58:b7:
                    3b:35:68:e5:32:1c:5a:8f:2a:fe:0b:86:35:bf:d6:
                    cc:6a:40:0b:28:07:31:62:82:4e:cb:8a:95:42:37:
                    a1:5c:6f:13:e2:f7:e2:09:31:0e:e8:72:e3:23:45:
                    a7:09:9f:30:d8:b8:01:23:1b:56:42:e1:42:14:8c:
                    9d:f2:56:fe:1e:95:89:4c:88:d3:91:fb:58:d3:3d:
                    75:f8:db:4e:ee:1c:e9:50:b9:1d:71:85:1a:61:42:
                    21:f4:c9:0c:56:09:fc:7b:a3:94:e7:1b:6b:3b:90:
                    c5:8e:2f:02:e3:7d:f1:9f:f8:6d:2d:14:48:d3:64:
                    68:ac:4e:14:0a:c8:c0:93:d3:3b:79:75:a4:3f:27:
                    d0:ff:fa:67:cc:99:b9:e2:6b:6e:88:35:8d:64:18:
                    29:16:45:41:8a:f2:f5:4d:ae:a3:8e:7e:a2:70:4c:
                    79:48:11:2a:e8:38:b8:5c:60:ab:e7:34:9b:60:5b:
                    04:10:51:5e:9b:af:70:b7:17:34:37:1c:fa:29:a2:
                    50:23:7d:a3:0d:08:5c:7f:48:c3:2e:55:45:f0:b8:
                    94:7e:bb:d4:af:5d:79:bd:56:7e:d4:6a:24:52:2f:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:27:D7:AD:C8:1A:55:37:C1:86:72:93:FB:E8:4F:A4:4C:55:BB
            X509v3 Authority Key Identifier:
                keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:21:51:2e:9e:85:a5:55:8c:48:1a:de:83:ff:3d:4c:81:e9:
         57:37:bd:70:26:50:fe:04:5c:18:f4:03:f0:e9:8f:48:98:05:
         c0:6e:65:01:2e:98:c9:f1:0e:d5:4d:45:3f:cf:49:05:19:13:
         a5:44:da:8f:a4:04:a8:ea:2e:40:9c:7e:d5:d9:e4:ac:f4:90:
         b0:54:6e:41:08:21:93:d9:3f:75:cd:bf:48:43:c7:d9:8a:d3:
         55:40:a5:7f:40:8d:0b:e0:e2:3a:99:cf:e0:7c:6d:31:76:71:
         b4:cf:76:bd:55:fc:58:96:f0:4f:ff:70:36:23:f1:c8:90:b5:
         e1:76:17:fe:2b:b0:55:d5:cf:9d:81:cb:7b:e6:ef:cd:3a:98:
         b6:b5:b3:ee:e4:34:50:e2:db:b2:b7:b8:fe:72:58:c3:55:01:
         84:77:38:09:d6:eb:15:e9:3c:55:a7:f4:2e:39:3d:a7:e8:46:
         8d:71:ae:e4:28:63:2b:1f:9e:d1:fd:43:ae:ad:7b:ee:e9:b2:
         ff:5e:d2:19:80:d8:e9:5e:42:ac:6c:a3:75:1c:cf:e9:f9:b3:
         58:cb:60:56:a7:50:4b:37:90:08:bc:dd:40:f0:68:fa:d8:fa:
         03:04:a6:72:18:99:69:88:3e:3c:57:a9:85:15:9a:7e:4b:26:
         ec:31:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:34 2026 by rpki-client