This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File:                     1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier:          ++6fNMo6zUJAGiHFUOrQ+jTicixE9A+GL02x5vI2Lgc=
Subject key identifier:   B6:E7:20:EB:86:08:01:88:8C:2D:B7:DB:38:45:36:3D:BC:3F:E7:2E
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer:       /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial:       019C424650FD2ABE7F868CA40419755AD17A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number:          01AF
Signing time:             Mon 09 Feb 2026 12:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:30 +0000
Files and hashes:         1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: Bbr2CqmyWZQgfBIhafsoM/wZ65kQM7Ni0QFpZyvTS3w=)
                          2: fGmytEtcKCBxP_COaX3EzxixmEo.roa (hash: 91bs2HcwyIQ9LFJt+Drla5dzPgI0WfHKEyPyA0R0pa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:50:fd:2a:be:7f:86:8c:a4:04:19:75:5a:d1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
        Validity
            Not Before: Feb  9 12:00:30 2026 GMT
            Not After : Feb 10 12:00:30 2026 GMT
        Subject: CN=b6e720eb860801888c2db7db3845363dbc3fe72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:94:4b:59:bf:15:42:e1:7a:ca:31:c7:65:
                    a2:dc:32:88:cd:61:26:ef:9a:e4:be:24:ba:73:3d:
                    fc:85:f9:82:68:49:11:5b:cd:94:ce:51:b5:60:1c:
                    6b:86:07:9d:3d:21:e3:42:ff:6f:8c:33:b0:78:51:
                    28:9c:31:19:c2:09:f5:2e:f2:cc:7b:1b:67:14:a2:
                    85:f4:5e:88:a6:e3:1d:c3:5b:8c:55:99:e4:46:6f:
                    39:6f:9f:92:11:03:29:94:3d:be:90:38:55:64:de:
                    1c:95:6a:5d:a2:4e:7d:cb:61:d7:6a:92:b7:32:a6:
                    ef:a8:8b:8a:b4:c7:ba:da:78:d1:27:69:ce:a7:4a:
                    a6:36:9d:43:af:2b:d8:3a:3b:e7:49:36:9f:e5:de:
                    a8:2b:27:98:7b:91:f4:f9:08:0d:1b:60:2b:12:0e:
                    cc:ea:fb:09:33:5b:aa:71:24:62:1c:28:1e:fe:a2:
                    33:68:da:2f:a3:63:1a:6a:ee:53:22:6f:ef:ce:47:
                    51:d4:a8:5b:0e:df:e7:e7:9e:a3:fb:37:7f:83:e4:
                    56:41:7e:ae:c6:f5:22:a2:e4:b4:a5:c5:ef:99:af:
                    db:62:c8:57:1b:3e:ca:06:12:cf:76:51:54:cc:a3:
                    b8:00:e0:75:36:bf:e7:ef:3e:fd:b3:ce:ed:15:82:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E7:20:EB:86:08:01:88:8C:2D:B7:DB:38:45:36:3D:BC:3F:E7:2E
            X509v3 Authority Key Identifier:
                keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:eb:f8:19:89:9c:e1:e0:bd:94:aa:35:f8:84:38:ec:eb:
         31:f0:82:f6:e8:54:a6:34:f4:d5:5a:ca:be:1d:d3:47:ab:0a:
         05:33:7a:17:26:4f:61:df:3b:33:ed:c0:0b:76:f2:1a:44:ba:
         59:f1:48:db:9e:66:36:f6:9d:24:3f:e9:6d:c2:eb:e8:bd:f4:
         10:0a:0c:41:08:65:ce:50:18:ce:d7:7e:b3:e9:ea:e3:62:c0:
         b9:0a:87:3c:62:85:bb:63:83:d1:2c:8d:34:df:a8:76:22:0c:
         b0:17:6d:1c:7c:5c:f7:ed:91:54:5b:d2:fc:56:4b:67:b5:c3:
         a9:c2:52:cb:7d:15:67:c1:43:14:48:c0:b0:42:83:e9:fd:cd:
         56:30:32:0b:05:af:2d:b7:af:2b:d9:1c:06:fb:8a:11:f3:22:
         9c:a4:8d:7e:bc:be:56:88:cf:6d:4f:d6:4d:fb:e2:83:a6:c0:
         c6:66:b3:88:77:dd:f4:84:8f:66:24:a0:71:bf:20:ad:23:27:
         ce:58:f5:61:c6:3a:36:54:c6:a2:d7:f4:fc:56:e1:4a:b2:90:
         d1:47:db:52:81:e4:d7:c5:64:40:cd:8e:41:70:97:37:58:9f:
         1a:e4:0a:08:10:f9:66:44:c1:ad:cb:e6:be:87:e7:64:9e:31:
         6b:ba:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:42 2026 by rpki-client