This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File:                     _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier:          H+WIIzOcUHP+ZdJ2x6WbwunnnPztdAvsdsOpsi6lpSQ=
Subject key identifier:   98:0E:DF:9C:72:71:A0:98:BD:E0:FD:A9:CE:F2:41:84:91:83:9E:F0
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer:       /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial:       019C446C24543B12795015ECD96A00F2214F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number:          04BE
Signing time:             Mon 09 Feb 2026 22:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:03 +0000
Files and hashes:         1: CJURcqwB7YHkxFpJ_fIfOAj4rb4.roa (hash: tQFv2xzZePQDySWn8V6OIcXlKLekKjdaEAGUmEMYLQo=)
                          2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: 9TEIILoPM5B3KHOLkpxxeab1mAg1c8Z29dz+d0r2OQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:24:54:3b:12:79:50:15:ec:d9:6a:00:f2:21:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
        Validity
            Not Before: Feb  9 22:01:03 2026 GMT
            Not After : Feb 10 22:01:03 2026 GMT
        Subject: CN=980edf9c7271a098bde0fda9cef2418491839ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:01:ba:df:c7:61:f1:4e:30:0b:7e:a0:ca:d0:
                    eb:eb:f2:93:bc:72:8d:2c:3c:68:d4:25:8d:91:3f:
                    32:55:78:2b:d4:00:58:e5:3d:a5:e1:a0:f6:8d:23:
                    e2:b1:9e:ac:ef:86:41:82:ec:bb:c8:ea:69:9d:2c:
                    f5:29:a4:6d:41:07:4b:d3:0f:2a:55:28:46:9b:3a:
                    4d:d2:86:23:ad:06:3c:ef:52:23:e8:da:c8:1c:63:
                    f1:72:46:19:9a:c7:1d:ac:c5:14:49:77:c6:e2:86:
                    4c:9e:5b:b7:71:2c:d7:15:ab:95:e1:5d:36:55:c1:
                    2c:86:ad:94:75:c8:d3:6d:5d:ce:d8:c5:d1:0c:b6:
                    b4:cf:9b:60:f1:28:29:98:00:3d:ac:ff:fb:e8:09:
                    83:d1:61:54:ab:03:7a:32:1d:28:e7:50:47:55:89:
                    07:db:58:6e:b7:99:45:3e:5b:3f:dd:37:0b:bc:4c:
                    33:8f:b8:69:81:39:10:d5:90:72:d7:a0:d8:d3:79:
                    2e:e6:81:db:04:44:c3:37:63:13:51:f9:32:90:e0:
                    3d:42:d2:ac:25:7c:0c:d2:11:c5:ec:be:31:43:a0:
                    e9:7b:6d:4a:22:db:52:6e:f9:43:13:0f:4b:aa:1e:
                    52:76:8d:a2:f8:35:84:d0:29:df:4b:a8:9e:8f:98:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0E:DF:9C:72:71:A0:98:BD:E0:FD:A9:CE:F2:41:84:91:83:9E:F0
            X509v3 Authority Key Identifier:
                keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:b5:c7:25:ea:15:e4:0a:35:0a:75:88:25:2a:af:45:f3:
         2d:6c:9a:50:91:4d:8e:e9:82:fb:36:bb:eb:4e:e3:92:8d:e8:
         93:3d:69:9e:e7:c4:ce:39:d8:29:42:87:44:80:98:9f:6c:f9:
         b1:44:fa:e4:8b:28:28:23:7c:55:62:b1:42:fb:bf:64:51:4f:
         ae:66:66:64:0e:d8:1d:05:38:9f:f7:c1:65:f8:4e:88:32:b1:
         f6:5a:65:4d:03:7e:28:78:01:d0:d6:af:e2:38:2a:25:62:61:
         e1:16:62:1d:80:55:7c:09:25:32:41:bb:72:eb:5a:fa:6c:c0:
         fd:3a:45:af:29:a1:ff:51:ca:44:f7:54:30:84:9d:4e:b2:4b:
         5c:e7:e4:94:5a:da:00:df:c4:ec:ab:38:1b:05:6c:50:e2:ec:
         da:f3:0f:2b:de:34:fe:7d:e1:4c:1f:37:6b:5d:a0:85:a5:df:
         fe:43:0c:3b:8e:0e:0c:a7:67:4c:26:f0:eb:6f:a3:fb:ee:e9:
         02:53:dd:3f:41:be:c8:10:f9:93:5a:9d:69:2f:6d:1b:91:f9:
         54:de:bc:ae:9d:55:db:96:3c:fe:42:2f:17:38:c7:13:95:ee:
         62:9e:fa:cd:18:56:46:b1:09:6d:4d:9b:9a:6c:bb:61:7f:35:
         0e:40:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:12 2026 by rpki-client