This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File:                     84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier:          SjgdYz7NWpL1jqms2fSZVvrM0d5XXlmIs/PLE1k4py8=
Subject key identifier:   78:59:17:37:F9:68:B4:98:59:2B:38:02:98:BF:28:48:56:BC:EC:93
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer:       /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial:       019C42B464A057F2EDF5463A58ED972496FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number:          055F
Signing time:             Mon 09 Feb 2026 14:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:44 +0000
Files and hashes:         1: 5x6UPD5taDgKQlJm7HkMlrw0h5w.roa (hash: FXsrx/TuiFu9Wy2N3XRLZaoBhfDNCrBq2rlJC6w/nRk=)
                          2: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: TjiL2vHamCiYoad767trYz4Puwk/wEpTd6ney2YU/Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:64:a0:57:f2:ed:f5:46:3a:58:ed:97:24:96:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38049be801a136e387abc14498e486044d96278
        Validity
            Not Before: Feb  9 14:00:44 2026 GMT
            Not After : Feb 10 14:00:44 2026 GMT
        Subject: CN=78591737f968b498592b380298bf284856bcec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:c4:bb:73:75:e2:93:de:6e:4f:69:b7:42:fd:
                    7c:37:2d:30:cd:2e:83:b7:00:1a:f1:87:f2:71:d8:
                    ce:0b:72:70:83:51:18:a5:11:c4:af:ca:e5:3d:d0:
                    f5:9e:f1:bb:46:f5:cc:7f:a4:f4:39:23:64:f9:34:
                    5d:da:7b:da:dd:c7:15:61:92:d7:86:81:c4:a0:0d:
                    fd:c8:60:d3:b6:3d:bd:d2:d9:8d:ad:5c:40:67:f8:
                    e4:e9:de:06:e1:3c:7d:cd:b9:cd:da:cc:d8:84:b0:
                    7c:fe:8b:82:ad:39:f5:ff:ff:5d:b0:c5:1d:e5:04:
                    f9:5d:53:5d:a1:c0:3f:85:03:91:25:95:a5:a4:bb:
                    ba:26:ef:4a:d3:4e:51:9a:e9:91:06:93:9a:41:5e:
                    a3:83:1a:9d:f2:56:91:6e:e7:33:e4:1c:d2:ac:d5:
                    d0:14:e8:ed:b0:d4:2a:53:27:c6:c3:a9:fc:31:4c:
                    1a:77:b3:a7:3a:e3:a3:e2:85:da:64:f9:95:1b:11:
                    60:fc:8d:fc:51:57:c1:94:85:14:d9:e1:00:50:55:
                    88:3d:b5:60:ba:28:ae:e2:af:9c:2f:af:ad:3d:61:
                    4f:31:04:b6:ae:b7:bc:d8:d1:8d:f6:03:8f:1a:6f:
                    71:d6:03:55:db:d2:b9:f9:ad:50:dd:17:9d:ea:f5:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:59:17:37:F9:68:B4:98:59:2B:38:02:98:BF:28:48:56:BC:EC:93
            X509v3 Authority Key Identifier:
                keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:0e:43:e3:10:a2:0b:b2:ac:23:f7:7b:75:dd:cf:ac:c8:
         50:5b:c5:18:e2:71:c0:fe:fb:a5:75:88:0c:af:5d:93:f8:7f:
         0b:ee:7b:48:99:8e:9e:b8:14:b9:8d:fb:e9:20:be:4a:cb:63:
         1b:ef:02:20:73:c2:4f:6f:55:48:c3:8f:5d:23:79:26:26:a2:
         19:2a:82:73:97:46:53:ba:6f:fb:44:d4:db:f4:8e:e0:6e:db:
         22:ac:b9:2d:b1:51:7c:db:e5:2f:1c:ef:a0:ad:06:6d:ff:eb:
         ea:bd:6e:b9:df:80:a6:b6:e0:78:4a:61:10:e3:fd:7b:05:6a:
         a5:6b:4a:ed:ce:ea:52:e7:d1:4b:cb:f8:a1:9c:11:f3:d9:5f:
         08:4f:a2:85:47:cb:c1:aa:3d:82:3a:fe:4b:ae:26:11:35:0b:
         15:6a:f8:e2:f6:c1:7d:f7:2d:cb:36:8c:b9:79:a1:ef:0c:b0:
         35:24:98:b8:ec:18:7d:47:5e:99:89:65:46:17:65:aa:c6:97:
         a5:33:2e:67:c3:0a:b6:a6:fd:a8:3a:7b:8f:f2:22:c9:3f:bf:
         52:44:22:45:aa:79:86:e9:95:0d:d7:00:97:67:bd:5e:96:91:
         e0:41:85:b4:42:87:38:2d:e4:a6:db:94:bb:3a:da:8b:27:17:
         f9:41:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:17 2026 by rpki-client