This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File:                     mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier:          Bdz662gyc876Ig012dYcu4S6BjPXnXWmQqqmWmup1CM=
Subject key identifier:   19:A0:BF:41:AE:A3:BB:15:D9:07:E4:99:D1:23:EB:C7:B4:34:30:21
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer:       /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial:       019C42EB26E230862855C47A9B3AF6A1B1D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number:          0702
Signing time:             Mon 09 Feb 2026 15:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:33 +0000
Files and hashes:         1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: 54/YC0MkdRlK6pgOqfQm+4bfHLTjPywCVmuxNdWuZS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:26:e2:30:86:28:55:c4:7a:9b:3a:f6:a1:b1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
        Validity
            Not Before: Feb  9 15:00:33 2026 GMT
            Not After : Feb 10 15:00:33 2026 GMT
        Subject: CN=19a0bf41aea3bb15d907e499d123ebc7b4343021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:4d:db:30:14:85:f3:55:a7:9c:81:67:f1:
                    a9:97:73:f7:32:95:a7:33:74:70:a9:71:dc:db:0d:
                    42:cc:01:0e:74:a7:4d:7d:71:a8:bc:57:8a:52:9c:
                    cb:5f:c8:d9:b3:2c:be:fe:5f:69:b6:c9:60:95:76:
                    89:47:66:26:22:86:51:c3:af:c6:e7:c0:69:48:00:
                    e3:9a:17:cc:51:6d:72:0a:0e:49:f4:a2:48:32:a2:
                    1c:00:25:3c:b1:a9:52:ea:ad:ec:18:e0:84:f1:a4:
                    7e:34:e2:1b:4a:cc:fc:92:c6:90:c7:73:ce:63:6f:
                    f2:0f:a8:e3:54:0a:e4:9d:f9:22:1d:dc:33:b2:be:
                    7b:d6:30:3c:12:1a:cb:3a:59:83:9b:1d:57:40:90:
                    3c:1c:64:98:33:c2:da:13:94:85:d4:72:ea:83:7b:
                    fa:70:cb:be:1f:18:95:e0:80:8d:6d:f1:d0:db:b8:
                    60:ef:e6:b3:ae:81:97:ed:3d:77:4e:e2:bb:e6:93:
                    9f:3a:0b:ec:18:d3:85:2c:f9:6c:37:c2:d4:b9:04:
                    f9:19:25:66:a2:b8:b3:08:d4:e0:3e:48:07:34:8a:
                    5f:f8:73:2c:92:54:a7:0f:6f:15:91:7d:cb:bd:5e:
                    b6:68:f7:87:2c:03:cf:23:a1:31:4c:67:4e:4b:eb:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:BF:41:AE:A3:BB:15:D9:07:E4:99:D1:23:EB:C7:B4:34:30:21
            X509v3 Authority Key Identifier:
                keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:95:38:fc:fc:8e:7d:09:36:8f:65:d9:8d:bd:4f:5c:6a:
         59:0b:49:db:93:ea:17:3e:fe:cb:b1:fa:2d:46:fc:97:0e:b5:
         a9:a5:7c:4e:ac:aa:4b:ac:dd:ce:21:ac:f3:cc:82:46:08:3e:
         2b:25:60:88:a4:ca:27:b3:8c:24:cf:df:bc:c0:23:5e:55:d3:
         7f:ae:7c:aa:d1:ce:de:14:be:62:32:4f:d6:41:ac:58:66:9e:
         38:da:5f:d9:fd:53:24:77:70:a8:79:2d:35:53:8a:41:6d:4b:
         cd:e3:e3:e6:74:c1:1d:15:d7:b5:78:08:74:ad:12:1c:12:d8:
         82:fb:cd:aa:6b:1a:07:4a:73:9c:bb:c1:7b:9f:78:24:9a:bd:
         10:6d:9e:25:ff:25:09:16:cc:7e:6d:87:fa:f9:a4:87:ff:7b:
         8e:4a:ae:76:fd:6d:45:20:49:6e:cc:3a:28:23:27:85:bd:58:
         ad:f7:07:2e:56:4f:56:0e:5d:c0:3d:20:31:8b:d7:90:dc:1e:
         0d:00:13:ae:62:5b:da:77:04:13:90:86:82:a7:f3:fd:0e:00:
         fc:34:f8:ae:8a:f6:95:56:a0:06:96:7f:e2:6b:04:d6:73:78:
         2b:ca:9c:0c:79:a6:6e:98:66:5c:43:60:aa:bb:08:5b:0e:bc:
         f4:d6:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:11 2026 by rpki-client