This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          1M36b6UJa+qieTXrNTwUAbZi7cQwGnys1BTf7mlu1i0=
Subject key identifier:   8B:63:EF:62:D2:63:97:D7:E6:53:F4:90:B6:7E:5B:4C:0E:F1:13:E8
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       019C439025EEA8C3DDC49016D7ACE19A32BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          0C8D
Signing time:             Mon 09 Feb 2026 18:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:46 +0000
Files and hashes:         1: 1EuhVKsVw5uoAe1_WgbtKc856tQ.roa (hash: 91jJhXvalSRHITuPYha5bt1vLrQQuYCZQo48j45dFVg=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: qy//pQofyxwg3d8XJa/5LGy+vJhKWFjRUkjUeidluWg=)
                          3: Rg6PbbInPrmmUh3N22EeHzxOYn0.roa (hash: LEJHR9iD1d51yema4X3NSGFZJp50Z/6oaRBU+4pvUIg=)
                          4: Vb5LUMN_f-rlqzMX4GkNymfjZAc.roa (hash: xNINsOBY8pk7iexk7ULkbW+iYBp08xHS+Bw7bc6Aavk=)
                          5: uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa (hash: /uSluzarRD7hzKeftDLlUNqVrK3dUPCuVWYOJEdnTrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:25:ee:a8:c3:dd:c4:90:16:d7:ac:e1:9a:32:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: Feb  9 18:00:46 2026 GMT
            Not After : Feb 10 18:00:46 2026 GMT
        Subject: CN=8b63ef62d26397d7e653f490b67e5b4c0ef113e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:be:b1:5e:27:0a:7f:11:8b:26:9f:de:88:
                    ac:fe:78:68:25:f6:99:26:aa:2a:fb:33:7c:e5:c6:
                    ed:06:9d:cb:5d:ee:a6:3d:9a:dc:8b:2d:80:86:8c:
                    79:fb:9d:2b:ff:12:39:ad:70:0c:75:7e:7f:5c:83:
                    99:33:08:88:e0:a6:3b:d4:eb:45:99:e4:35:b5:71:
                    f6:72:58:c0:07:fc:56:99:22:64:d2:2b:97:5e:4e:
                    25:89:74:52:ca:70:24:05:bc:08:45:85:5e:be:10:
                    97:f0:7c:50:77:b0:f0:34:6d:37:86:72:e4:9c:87:
                    f6:d2:97:93:90:9d:bf:73:d3:5c:b1:ca:09:47:d4:
                    9b:eb:0a:76:50:7b:68:88:5c:e9:0d:10:7c:f9:5f:
                    2e:3d:a8:6a:fa:9b:70:94:ae:26:68:cb:3a:8e:cc:
                    05:d0:04:56:47:03:59:b7:5b:44:bb:cf:04:cb:42:
                    8f:4e:59:4a:be:50:29:c4:3c:09:b7:e4:0f:3b:54:
                    80:ae:23:5d:f6:fc:80:ca:5a:29:46:3a:0e:57:ff:
                    d9:5d:26:4b:d3:8b:34:3b:2e:5d:dc:42:f8:95:8d:
                    57:1d:0b:f2:9d:f3:49:87:23:91:1a:95:bf:35:e5:
                    cc:9c:2b:1b:06:b5:b6:be:2a:44:af:d0:2d:f4:36:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:63:EF:62:D2:63:97:D7:E6:53:F4:90:B6:7E:5B:4C:0E:F1:13:E8
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:bb:d7:63:74:49:75:da:a0:43:56:a6:27:66:62:bb:67:
         62:1a:6c:7e:ad:22:b3:7f:77:04:a7:00:e4:38:e1:19:c8:e2:
         c5:f1:66:da:73:03:6b:36:1e:98:28:98:2e:cb:4f:3a:4a:cf:
         06:51:25:6c:77:f3:58:3d:65:93:ad:16:06:b5:c1:e8:8c:84:
         f0:c9:81:42:85:cc:f0:80:0e:4b:44:9f:05:98:2f:46:f7:e2:
         8c:45:f1:66:44:f1:75:bc:dd:b6:7b:bb:d4:46:44:4d:94:70:
         95:d3:d7:db:f0:18:11:04:90:bb:46:cc:50:ec:ac:a7:a0:c8:
         bf:4d:aa:bc:fe:05:ed:ad:d6:cd:8f:9d:70:46:1d:cb:5b:c7:
         fb:49:02:09:30:b3:e7:55:dd:39:8c:ba:d0:77:82:bf:29:1d:
         f8:1f:05:d1:e7:b5:ab:5e:81:5e:8d:c7:61:4d:53:1a:50:f3:
         57:b9:90:d3:e4:34:4e:63:a4:20:51:7c:26:89:2b:e2:2c:c4:
         e1:68:59:17:3e:05:03:06:4c:97:e4:b4:60:3e:7d:33:34:fe:
         fd:b2:63:a2:b9:82:ee:bf:8e:43:8b:14:58:da:67:1d:fc:64:
         26:a2:98:4b:0a:2f:04:ff:e2:8d:27:1a:ed:55:62:50:5f:d7:
         e3:80:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:58 2026 by rpki-client