This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File:                     Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier:          lzxE0CckojeIrZGQeRMO2xwT9ayctLYRBIatF7GZmY4=
Subject key identifier:   95:08:9F:94:CB:26:8B:B5:29:BA:29:8C:2A:69:4B:C9:FD:6B:D2:8A
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer:       /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial:       019C45476FF4DEA8ECC141185008EFB760CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number:          0B88
Signing time:             Tue 10 Feb 2026 02:00:35 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:35 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:35 +0000
Files and hashes:         1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: FRgAbPn2O0lH2ORW0BS3hR/IzXIKdNGnsoTC92pZ3lw=)
                          2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:6f:f4:de:a8:ec:c1:41:18:50:08:ef:b7:60:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
        Validity
            Not Before: Feb 10 02:00:35 2026 GMT
            Not After : Feb 11 02:00:35 2026 GMT
        Subject: CN=95089f94cb268bb529ba298c2a694bc9fd6bd28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:ce:b7:63:da:f8:56:1d:d6:64:52:33:91:
                    2d:16:f5:b4:bd:c7:7d:e6:8b:16:04:fb:24:95:a3:
                    12:9f:a3:b3:7c:11:ac:8c:9d:b7:a1:d8:bf:12:87:
                    1a:58:15:75:60:29:19:9d:61:d2:09:c9:2b:39:e0:
                    6e:1a:4c:b9:30:0a:8f:4b:1e:70:33:c5:7c:f6:11:
                    75:9f:7f:78:72:87:fd:55:df:4c:91:b6:e0:c9:02:
                    96:3d:ce:c9:4a:15:ca:cd:fc:f4:1c:10:6b:6c:66:
                    a7:5d:dc:5e:e5:10:b1:a1:aa:ff:23:29:f2:1a:5e:
                    ef:58:ce:ec:b3:17:7a:ce:0e:61:33:ef:14:5b:d7:
                    b0:aa:c5:5b:ee:09:d4:c8:c1:e1:05:a2:e2:0e:47:
                    8a:b1:4f:f8:05:ef:54:06:0b:37:4a:aa:4f:7a:16:
                    ea:7e:40:eb:de:70:65:c6:2c:6b:b3:81:c0:bc:17:
                    ca:7d:13:18:73:13:50:e8:c2:23:b2:6b:35:96:99:
                    c9:90:7c:66:7e:d0:4e:13:f9:7a:29:39:05:e5:8b:
                    de:9f:4f:cf:0a:36:a4:c7:43:93:2b:c2:ba:8a:3d:
                    64:59:b5:54:75:6c:7c:70:bb:82:e6:c0:25:58:f4:
                    58:6d:02:7c:d3:af:8c:ea:30:1a:f0:10:07:eb:23:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:9F:94:CB:26:8B:B5:29:BA:29:8C:2A:69:4B:C9:FD:6B:D2:8A
            X509v3 Authority Key Identifier:
                keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:84:39:7f:40:0e:c2:2c:c4:56:60:74:6e:79:92:77:9b:7c:
         bf:97:a1:ee:b3:84:18:2b:99:cc:c2:7b:66:ec:b4:f4:70:8b:
         bc:fa:98:d9:3c:7c:a2:a5:12:09:02:27:43:a4:36:0b:80:6a:
         80:8a:3f:72:d9:cc:fa:c4:f1:62:ad:fb:c4:fe:c9:1e:45:4c:
         de:cd:31:eb:ee:fc:72:25:17:74:49:48:d6:bc:9f:c1:f5:c2:
         18:c4:9f:6d:69:7e:82:af:2a:8b:55:c9:5d:6f:a9:77:a8:31:
         cd:62:74:da:a7:80:e4:ec:63:69:1f:f4:e0:66:80:e0:5b:d1:
         ac:e0:2c:21:3c:a3:97:08:bd:20:16:2c:3e:58:e9:bb:d9:07:
         18:ae:3d:65:21:fc:25:02:8d:b4:51:40:cf:02:eb:fd:ad:b3:
         ec:0c:cf:85:c6:db:8e:45:cf:ff:e0:45:a6:5d:83:ca:92:97:
         db:ee:b5:cd:84:e0:f1:27:d0:b3:97:41:12:f5:bc:77:6f:45:
         15:b2:a0:ab:77:11:9d:20:0b:94:8b:70:70:11:3c:b7:56:5e:
         57:28:a6:8b:66:77:8c:63:c4:50:d1:c8:a6:da:e3:7e:fb:f7:
         a0:41:2a:84:73:2e:3d:4b:8e:0d:0c:1a:4e:99:32:fe:4c:b0:
         15:13:91:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:39:57 2026 by rpki-client