This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File:                     MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier:          llFlhbZTBCY4jSQYk5SOHNaVyIC5LLrQXaXasSeLrAQ=
Subject key identifier:   3C:0A:4A:30:6A:13:BF:75:E7:C4:9D:28:65:10:BA:6F:80:D8:FC:D4
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer:       /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial:       019C420F908350795DB1DD1DBB306BB962AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:42 +0000
Files and hashes:         1: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: TMr/IFc3w3kDzHAFQEagQdUZXNtGaREgz+OmApts7W8=)
                          2: dkCET2TsQcDN0c2dtertiEUqhPc.roa (hash: UbBALHBb0UI7Hqy8fBR1ma0BVv2xaYRMtaFsCVJRBPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:90:83:50:79:5d:b1:dd:1d:bb:30:6b:b9:62:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
        Validity
            Not Before: Feb  9 11:00:42 2026 GMT
            Not After : Feb 10 11:00:42 2026 GMT
        Subject: CN=3c0a4a306a13bf75e7c49d286510ba6f80d8fcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:76:aa:82:35:10:49:5a:4a:45:ed:e7:82:
                    ea:66:d6:dd:97:21:99:01:95:c9:73:6f:84:91:6b:
                    77:7c:0f:5a:96:89:57:a2:dc:62:ce:d4:fe:78:d0:
                    46:f2:84:db:ee:90:da:b5:32:4f:f0:13:b8:f2:0f:
                    82:44:a6:1f:d1:cd:46:97:92:06:9f:9d:1f:b9:6a:
                    3d:85:aa:1f:fa:c7:77:3a:63:9b:66:ac:12:a1:7e:
                    4f:c1:0f:9e:d5:02:7e:9b:75:9e:8b:7c:ca:41:19:
                    b9:e1:a4:b8:54:5a:7d:fb:e5:41:c0:81:49:64:cb:
                    48:a4:0c:55:1d:f9:77:2a:0b:51:c4:9a:9f:e7:8f:
                    cd:b8:26:06:32:9b:53:c1:96:bf:e6:89:bd:29:4e:
                    02:ad:68:95:55:d5:90:5a:26:57:08:a2:bd:63:45:
                    2d:ab:e9:d9:de:7e:db:d4:51:b2:b2:d1:98:eb:53:
                    22:db:89:25:ab:18:d4:97:82:b6:4f:cc:14:96:1e:
                    63:02:43:0f:54:a9:53:36:7c:e1:82:8d:ed:82:8e:
                    33:2d:a9:33:86:5d:5b:3f:59:a2:37:21:99:20:22:
                    c1:04:d8:c1:15:89:d0:4b:5f:28:fd:29:a6:ed:7f:
                    e7:e5:f9:d7:f6:f2:96:43:5b:bf:fe:18:7f:f1:1e:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0A:4A:30:6A:13:BF:75:E7:C4:9D:28:65:10:BA:6F:80:D8:FC:D4
            X509v3 Authority Key Identifier:
                keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:89:af:4b:54:0e:05:f1:ec:5b:37:a4:95:0f:5e:47:6d:c3:
         e7:21:0a:08:df:92:e8:bf:d9:39:dd:0b:9e:c7:3c:72:e1:05:
         40:a6:7d:2c:01:6e:6b:5c:f6:4a:70:7a:11:b8:5c:24:9f:90:
         77:42:66:07:5e:01:0c:28:0f:b6:08:a5:1f:c8:25:a1:92:87:
         d5:66:5c:14:1e:40:02:28:97:80:5c:05:3c:04:4c:9b:0b:18:
         58:df:4e:44:87:85:ce:2d:21:37:e1:8a:aa:2c:cb:43:a5:fc:
         cd:3e:26:f5:51:73:4f:b9:d0:78:a6:ab:eb:2b:d4:58:a8:40:
         c4:cc:17:c4:2c:c4:f6:82:b7:97:bf:ae:9a:e2:78:1b:31:a5:
         7a:2c:bb:09:6b:68:3d:b8:68:59:ca:66:a7:6e:f3:d3:79:9e:
         8e:9b:46:a3:e9:57:62:05:fe:a6:e7:88:cf:83:01:d9:97:c8:
         49:d2:a6:47:92:69:24:f7:ec:74:cd:31:7b:a2:89:fa:11:19:
         1f:70:79:e4:65:8f:8c:b2:88:09:9a:ac:6f:85:1d:d9:c1:ec:
         1d:10:f2:62:0a:b7:fd:2d:63:4d:b9:b3:69:06:92:08:58:aa:
         83:eb:65:2c:aa:76:0f:67:c5:b7:d1:be:29:f9:13:4b:b4:c1:
         8a:86:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:36 2026 by rpki-client