This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
File:                     V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft (raw, json)
Hash identifier:          ZD6bPWMo2HPVB0hqH0exqlv4jMB4YwNxVeojQiubvP0=
Subject key identifier:   0F:8D:9C:28:76:14:85:97:19:86:05:0A:15:20:17:52:AD:A4:17:22
Authority key identifier: 57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
Certificate issuer:       /CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Certificate serial:       019C41A1DC116CC40A352B118D26A0820ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
Manifest number:          083B
Signing time:             Mon 09 Feb 2026 09:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:52 +0000
Files and hashes:         1: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl (hash: lNUZPVbWPloKcRbanw0aPQrrHoL9eQMTjMQ6H6tPsFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:dc:11:6c:c4:0a:35:2b:11:8d:26:a0:82:0e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
        Validity
            Not Before: Feb  9 09:00:52 2026 GMT
            Not After : Feb 10 09:00:52 2026 GMT
        Subject: CN=0f8d9c28761485971986050a15201752ada41722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:52:c1:80:1a:6a:f6:0b:8b:82:2c:19:82:
                    8b:99:cc:d5:dc:2e:b4:8f:a6:9b:53:de:cb:62:09:
                    45:bb:2b:60:d4:cf:0b:c0:d1:d9:23:e8:6c:58:c5:
                    7d:be:2e:16:f1:70:37:98:5f:5b:d5:77:41:4e:ea:
                    fe:f3:de:ba:9b:1f:d1:65:9f:29:1b:f4:90:a7:76:
                    59:81:10:23:a0:8a:97:03:2a:38:6f:37:ef:38:37:
                    f6:c1:c1:3f:2e:0f:dd:11:37:3c:53:f4:27:ff:6e:
                    9c:ae:b0:31:4c:3f:13:04:80:ac:4c:aa:16:ae:0f:
                    be:d1:94:90:b5:c5:69:44:8f:cb:7a:96:c4:04:92:
                    12:eb:43:cc:ad:2c:ea:3f:e1:ba:96:3c:fa:0a:cb:
                    2a:e9:35:20:f0:63:3b:16:87:03:ac:22:28:e3:64:
                    18:e7:40:fb:f9:e0:bb:9f:be:6b:1b:fd:d5:aa:ef:
                    89:34:96:aa:0f:1d:83:97:27:9b:11:a8:00:51:dd:
                    ea:af:28:81:84:f5:72:dd:0e:02:86:1d:52:42:9e:
                    8b:4d:26:ad:fd:ae:9d:d8:3f:2c:07:7e:4a:f4:58:
                    34:67:22:04:c1:db:ca:df:78:d6:df:86:73:2c:cb:
                    84:3a:00:bb:c9:47:df:2f:96:93:9f:c5:ff:d5:b8:
                    47:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8D:9C:28:76:14:85:97:19:86:05:0A:15:20:17:52:AD:A4:17:22
            X509v3 Authority Key Identifier:
                keyid:57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f3:9c:54:fb:12:ae:fa:1f:65:1b:4b:b3:93:ba:2d:f2:22:
         83:3a:0c:94:db:10:fb:c9:e3:55:85:c5:43:fa:62:29:9f:14:
         a6:d7:b7:d7:0a:50:0e:33:1c:bd:dd:95:88:6d:c5:46:8a:a5:
         0d:37:67:34:9e:0d:03:2c:99:20:9e:90:0f:3b:9f:1a:71:fb:
         3f:38:76:63:55:04:06:b6:01:b6:bc:a9:3a:f3:87:f5:4f:8a:
         ba:4f:84:40:8d:6d:0f:6b:1f:29:5a:97:c0:90:70:a5:e3:73:
         f4:e1:6d:e5:5f:3c:32:8a:25:71:78:1e:69:bb:76:c6:71:48:
         1b:62:5c:d6:b2:48:b3:c7:31:c0:68:70:3d:2b:4d:94:1a:69:
         2c:8f:87:e5:80:2f:de:87:53:9b:c7:59:ce:94:53:cc:39:ed:
         18:b8:77:b6:7b:fd:a6:f6:42:c9:b4:5f:18:53:4b:f1:25:a0:
         d6:bf:c2:40:39:43:b0:83:b2:7b:45:5f:47:72:ce:5c:31:0d:
         b1:89:aa:c3:c6:4e:05:fe:8b:e9:04:33:76:bf:e4:95:92:76:
         10:a7:f8:d8:da:10:43:1c:2d:a0:e5:6e:dd:9c:c3:82:e9:cf:
         f3:90:34:5e:7e:fd:9b:3f:e6:4a:48:94:26:5a:b2:ad:c3:e4:
         59:95:47:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:21 2026 by rpki-client