This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File:                     snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier:          3Rt+BNbSvhFDiXoA072YQso9Tqs0tmfrkwU2iSa+Ns4=
Subject key identifier:   4F:16:EB:DA:65:C2:14:A8:CA:25:1A:44:2C:DF:58:A5:CE:D0:67:0D
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer:       /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial:       019C42EB6CE627027A73594B49B4C2527C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number:          1268
Signing time:             Mon 09 Feb 2026 15:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:50 +0000
Files and hashes:         1: qWWCnvnb1AjTvXVQe6eky9BUjfQ.roa (hash: uhoA5mJH4PMkfCjpYTO4XK5e/8oJdkyHk7G+Sws4TBU=)
                          2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: WgodDTPr/9DxXZNz48yyt+b3XJ6xMoW0YBJwuWqU+e4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:6c:e6:27:02:7a:73:59:4b:49:b4:c2:52:7c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
        Validity
            Not Before: Feb  9 15:00:50 2026 GMT
            Not After : Feb 10 15:00:50 2026 GMT
        Subject: CN=4f16ebda65c214a8ca251a442cdf58a5ced0670d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:c5:6e:04:6b:28:d3:02:50:e4:16:4e:2f:
                    97:f9:f6:94:8c:5d:06:87:d6:f6:1b:f4:81:40:ed:
                    df:d1:10:b8:39:eb:a2:25:b0:cd:73:29:90:87:86:
                    df:db:1f:41:0a:0d:f1:35:19:93:fd:9a:3a:b1:8f:
                    a0:c8:a2:67:b5:02:4e:80:03:58:40:91:22:af:be:
                    fa:1e:06:6d:70:aa:ef:a0:e8:f7:5a:25:75:6e:47:
                    7f:82:68:a7:8e:eb:75:6e:a9:d9:6e:e7:39:4c:c4:
                    cf:10:84:2f:cd:71:4e:77:16:5d:bf:dc:b2:a6:b5:
                    4a:8d:12:1b:be:e8:c3:f1:c7:d5:38:ee:ab:c7:39:
                    bc:aa:01:c7:bb:f3:ba:22:95:09:15:16:e2:6e:b4:
                    4f:5e:63:9f:47:5a:fd:41:06:c9:b2:cd:a7:29:bd:
                    bb:3f:ad:c4:39:26:6e:ea:01:f8:ef:a4:6e:b7:9f:
                    03:b4:c4:57:dc:8c:11:ee:f1:33:0a:46:84:09:57:
                    a1:97:d1:00:6c:b9:1b:67:48:2b:dd:df:1d:76:5b:
                    04:b3:27:30:86:db:0b:2b:60:ad:98:d7:5e:6e:73:
                    fe:80:51:3a:cb:5f:f2:48:e5:e4:cf:54:4a:11:1f:
                    db:87:8a:d8:bf:3f:f7:ea:e6:32:57:29:b5:5f:68:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:16:EB:DA:65:C2:14:A8:CA:25:1A:44:2C:DF:58:A5:CE:D0:67:0D
            X509v3 Authority Key Identifier:
                keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:a7:c1:97:03:0d:54:ce:b1:06:7f:0a:c7:07:30:3e:2a:
         5c:e2:cd:cd:9b:4d:5c:de:d4:25:3d:dc:87:fd:73:cf:11:2a:
         99:5c:6c:2b:a8:1f:9a:fa:41:02:49:8a:46:8d:87:f7:cb:29:
         62:ca:90:05:fe:2c:fa:07:76:86:f6:4a:90:6e:9f:4a:ab:ff:
         e3:ee:00:01:0a:68:c4:07:6a:ba:01:37:24:a6:15:0e:95:2f:
         00:4c:a6:8c:98:56:15:f7:b2:5f:bc:2e:e3:bf:79:64:c1:91:
         d6:af:ad:d5:37:35:51:89:5b:c7:bb:bf:84:30:bb:79:26:71:
         1e:aa:38:97:3b:0a:03:b6:8c:63:6c:20:b0:5d:2a:b0:a1:79:
         20:8d:4e:48:c2:1e:37:60:77:e0:36:9f:e1:23:11:f7:dd:12:
         32:97:8f:ec:39:b7:7c:80:29:54:e0:dc:d7:26:7a:63:1a:9b:
         3a:b4:5d:af:e1:38:3f:a0:77:db:02:da:e1:9d:cd:ee:76:44:
         41:bc:4c:fd:b6:c5:ae:0c:19:d1:f8:ea:2c:3d:ff:c4:e4:41:
         d1:b6:fb:36:d3:a0:67:d8:f0:93:a7:26:d6:86:dc:33:42:3b:
         85:5e:e1:48:16:80:aa:b4:5d:2d:6e:fd:e6:43:14:d8:f7:4f:
         78:76:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:14:30 2026 by rpki-client