This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
File:                     94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft (raw, json)
Hash identifier:          wZbPjtu8/9Ov4aBSubTxnAxKdDVqaFSJ88+42QzPic4=
Subject key identifier:   C6:A2:96:36:7F:41:80:49:04:C3:84:EF:C9:39:58:AB:13:D4:AD:31
Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
Certificate issuer:       /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Certificate serial:       019C427DBA6249235A0ADD3B09238BDF068E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
Manifest number:          0DDE
Signing time:             Mon 09 Feb 2026 13:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:01 +0000
Files and hashes:         1: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl (hash: KdHoNwOh2/+/YyesuA9yoZLdOQUEdIBNLQ1tXljPx3A=)
                          2: OJlfVODA1Oyel73IkLe76x3InXs.roa (hash: ZaZsJzz+fV4f9gGKkD3UaI87u+j1nI0aVsgxVEdatZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:ba:62:49:23:5a:0a:dd:3b:09:23:8b:df:06:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
        Validity
            Not Before: Feb  9 13:01:01 2026 GMT
            Not After : Feb 10 13:01:01 2026 GMT
        Subject: CN=c6a296367f41804904c384efc93958ab13d4ad31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:6d:1d:09:7d:7e:a0:fa:bc:66:d2:fd:3f:
                    6d:20:47:83:37:d8:47:c3:b4:7d:4b:41:47:d4:ec:
                    f6:ee:51:82:ff:a1:15:fc:f9:11:23:5c:6e:6a:98:
                    7f:45:81:97:85:63:e7:6b:18:9f:e9:56:f0:c3:74:
                    a0:41:c8:84:bd:c5:c8:f9:bb:18:a7:65:60:aa:d1:
                    9f:0a:11:8b:3b:e0:48:df:cf:68:8c:dc:ae:20:1c:
                    9b:50:82:e1:f6:8e:c8:e9:c3:0d:b2:7e:50:da:cb:
                    77:55:86:96:f8:20:9d:8c:0b:25:87:60:f8:f5:8a:
                    f4:43:ce:55:5e:fa:82:01:ec:1a:1e:d2:58:62:e0:
                    5c:d0:09:ce:d4:4f:25:24:9b:90:a3:12:10:ea:2e:
                    5b:c8:92:de:70:c1:c7:e6:f4:1b:c4:1f:b6:84:0c:
                    ad:7d:6a:8a:e4:da:71:69:a3:9e:db:cd:23:fc:36:
                    8a:04:43:61:83:0c:43:02:e3:1d:8b:91:7e:08:11:
                    04:78:43:36:75:7f:d4:d4:a5:ef:ef:e3:bd:ed:8d:
                    de:81:16:50:94:50:cb:5a:c1:7c:31:c4:73:33:98:
                    33:88:5e:85:9a:5e:ff:ab:7f:cf:1f:18:4d:6c:a2:
                    2b:9c:e3:ef:c7:16:40:91:07:fc:79:ee:34:04:40:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:96:36:7F:41:80:49:04:C3:84:EF:C9:39:58:AB:13:D4:AD:31
            X509v3 Authority Key Identifier:
                keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:97:6d:29:be:e0:1d:7e:92:48:0d:96:cf:a5:3b:0c:81:51:
         14:98:ee:36:4a:43:18:66:bb:c3:d4:ba:b5:85:c7:a8:84:e9:
         3f:10:61:a7:a8:5a:9e:70:d5:a0:1e:de:83:53:99:42:62:50:
         27:c4:9f:7f:bf:ba:00:4d:70:30:43:8d:eb:71:36:fb:8d:a4:
         18:12:a2:ac:5d:6b:d9:00:f8:c2:33:7c:a5:83:46:94:30:6d:
         ef:76:5a:af:f0:62:69:a2:f3:c1:66:a1:3b:5b:2d:1f:24:64:
         ea:6c:0f:96:af:c8:e8:05:27:e8:13:d3:e5:8e:c8:7c:a6:3f:
         d5:02:54:2e:2d:a7:88:35:01:72:ea:f4:59:9d:e4:81:90:e7:
         89:5f:8a:8a:6c:77:27:93:44:d3:bd:0d:bb:57:44:29:89:99:
         d4:da:c9:81:88:ad:21:10:db:f9:fc:8d:ef:d1:60:b6:f6:49:
         8c:e7:d8:c0:a8:fa:e3:b4:e7:e8:3e:36:1b:6d:bc:76:ec:9a:
         e4:96:ab:62:c3:1d:73:b0:33:95:77:00:c6:c9:8e:da:f5:bb:
         d9:83:5a:46:b8:29:6e:5a:85:0f:a7:77:59:56:a3:8a:91:38:
         48:ba:20:60:79:40:21:6c:ee:63:9b:50:f8:e1:54:ba:64:06:
         d0:fb:ea:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:08 2026 by rpki-client