This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File:                     __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier:          FUX2xM4NBUVg4wDZCAbKjzLdQpYiDQIsCwvs7EuGxUc=
Subject key identifier:   8A:C3:DF:0F:A3:B9:7A:BA:66:07:28:ED:AF:E9:E0:C6:64:8B:F4:06
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer:       /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial:       019C43C75AB6311B331809C0EC6DC52C36DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 19:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:04 +0000
Files and hashes:         1: 8z2MsUIxn5nw1nALL7LRWOPfhD8.roa (hash: 9llBO7otknupIcgUJiQCvbsRcVO2MsJYLXN6HgTAZ1I=)
                          2: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: CVWtVaBqSwe8hSg8vwUAhm+3b2Yr+NIoEn00/x4in28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:5a:b6:31:1b:33:18:09:c0:ec:6d:c5:2c:36:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
        Validity
            Not Before: Feb  9 19:01:04 2026 GMT
            Not After : Feb 10 19:01:04 2026 GMT
        Subject: CN=8ac3df0fa3b97aba660728edafe9e0c6648bf406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:0d:b7:2d:51:bc:43:a3:05:d0:f5:83:f4:
                    1f:3b:0a:99:2e:cd:c8:d7:3e:36:52:a9:e5:62:bb:
                    d3:09:6b:4a:ed:a0:e4:cc:2d:a5:0a:78:70:36:8c:
                    d8:98:c1:3d:84:12:5a:16:78:ed:99:13:41:da:c7:
                    af:cc:89:b0:14:1f:65:51:c3:62:49:5d:76:dd:9a:
                    c3:c6:5a:b1:88:ac:9b:85:31:29:9c:3d:40:cb:ed:
                    fe:28:02:8e:e6:68:48:29:e2:d0:39:f0:cc:4c:c3:
                    9d:d1:2b:f2:ba:0c:f7:7d:3b:29:e9:f4:b3:2f:76:
                    da:02:a7:9c:25:be:33:57:14:f8:61:29:c8:ec:b7:
                    ab:4d:48:c8:f7:eb:de:39:b0:38:71:a2:07:fa:6c:
                    3d:c1:06:40:06:e7:f8:fc:85:22:05:dd:cc:ef:be:
                    79:cd:4e:2a:e6:ca:62:d5:a5:7b:32:89:e3:67:0c:
                    c9:9d:52:6f:12:d1:30:d0:1e:8a:7c:a3:a7:05:56:
                    24:73:f8:1d:47:93:d7:6d:01:fb:b2:87:2a:b7:73:
                    77:f2:1b:72:b6:05:10:d5:1e:d4:28:19:23:ba:b4:
                    56:bc:4a:0e:e8:27:39:bf:63:c3:d7:a8:23:21:95:
                    08:cb:ce:ab:b0:4c:92:e4:90:5b:1c:0a:c8:24:05:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C3:DF:0F:A3:B9:7A:BA:66:07:28:ED:AF:E9:E0:C6:64:8B:F4:06
            X509v3 Authority Key Identifier:
                keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:7e:8e:03:48:5a:64:84:34:da:06:b6:f5:c9:e3:34:1c:
         46:1e:b8:e3:7c:5b:20:cb:f3:d6:0c:18:8a:74:c0:be:9b:43:
         73:2e:b4:fd:46:f0:37:ed:a0:60:de:e7:30:d0:48:a8:c9:00:
         33:c9:9f:9b:d3:fa:54:24:7f:92:82:05:fb:a6:84:8b:44:1e:
         8c:89:e9:1a:65:ee:3c:65:1b:5e:0a:53:13:72:40:25:2a:e7:
         f5:8d:c9:c1:94:8c:1f:cd:46:37:50:ba:7b:fb:fc:44:60:0f:
         f8:17:c2:3e:aa:f5:41:78:18:13:ed:56:b6:f6:d4:65:9f:c4:
         9d:8f:62:22:1f:d0:c2:c9:e9:44:65:95:58:12:bf:0a:91:f5:
         d2:27:e3:ab:22:68:72:14:f8:1c:81:91:21:a5:b3:f1:f6:39:
         48:06:de:4d:cd:51:04:b9:6e:f8:26:18:78:00:b7:c1:67:46:
         60:66:8d:ec:12:d9:d3:24:78:b4:dd:2d:4e:75:07:99:36:31:
         73:9c:7b:73:65:57:3f:d0:d2:7a:8e:77:33:94:aa:d4:f4:0f:
         a8:f7:9b:ee:c0:a0:d1:fa:15:80:95:4c:95:1e:5e:28:34:1d:
         01:98:3a:58:7e:7e:81:31:dc:6e:dc:bb:9e:be:cc:66:fc:6c:
         d1:90:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:44:27 2026 by rpki-client