This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
File:                     MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft (raw, json)
Hash identifier:          n9FCAGWD+Y40Xf113IATF6UYRxQEvIclR/Ce9bSKleA=
Subject key identifier:   EB:8B:24:6E:DE:2D:22:E9:C8:57:DE:FC:DA:35:60:B4:59:B2:58:9A
Authority key identifier: 32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
Certificate issuer:       /CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Certificate serial:       019C42EAF76CD623918EEA8D71734DC1A126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
Manifest number:          0105
Signing time:             Mon 09 Feb 2026 15:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:20 +0000
Files and hashes:         1: DyptUUOjRm_2m8zgbMvoHA1UrBI.roa (hash: K5rbZpcZwUPf7XJmogvvHN54DVEPkHI7+lgGEgRM/BA=)
                          2: MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl (hash: j+6jyGW0Yep+l7gd1daQz5eRLDKrig+quuZF6KTGnTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:f7:6c:d6:23:91:8e:ea:8d:71:73:4d:c1:a1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
        Validity
            Not Before: Feb  9 15:00:20 2026 GMT
            Not After : Feb 10 15:00:20 2026 GMT
        Subject: CN=eb8b246ede2d22e9c857defcda3560b459b2589a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:72:81:5a:e8:72:b7:81:d2:fb:91:29:b8:
                    d1:3b:52:5a:1c:26:fc:03:dc:45:cd:00:71:bc:39:
                    8f:78:ee:33:bb:05:2f:38:75:84:42:e0:f3:4b:8c:
                    a0:78:c2:92:79:31:88:b0:9a:e0:be:9d:29:bf:42:
                    44:d6:88:a4:eb:70:43:5c:ea:b7:67:ef:43:95:bd:
                    0f:9d:80:fd:ac:44:c0:7c:8c:54:7b:47:74:30:4b:
                    6e:5d:2f:36:39:79:39:23:37:fd:e5:06:c0:31:bc:
                    26:68:83:a2:0b:07:74:f5:65:4f:ff:3a:2a:e4:89:
                    8c:d8:70:59:ba:e3:17:8c:4c:ee:85:09:8b:c7:0c:
                    fe:fd:a5:90:63:03:07:a1:de:95:6a:56:6d:a9:e4:
                    df:a9:fa:55:6e:ee:57:7f:77:ca:86:20:68:79:21:
                    ca:6a:d8:39:65:45:9b:16:60:5e:4e:a3:a0:c4:8a:
                    47:ac:9a:75:6c:61:fd:f3:a0:1b:5a:93:29:6d:48:
                    fb:b9:ff:27:ce:a0:1b:22:b0:b9:72:27:fc:ab:7d:
                    0b:e2:8f:20:6c:c1:4e:6b:46:62:18:54:6b:d9:3e:
                    eb:1e:e6:f3:1d:9f:4c:85:ea:49:5a:38:97:89:8d:
                    cc:ce:ba:5c:72:6c:2d:ea:62:fa:26:2a:37:ce:03:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8B:24:6E:DE:2D:22:E9:C8:57:DE:FC:DA:35:60:B4:59:B2:58:9A
            X509v3 Authority Key Identifier:
                keyid:32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f8:d6:10:07:21:dc:36:a3:cf:58:e2:5c:d3:a3:42:02:c6:
         e6:1b:da:49:68:81:dd:87:45:ff:51:34:80:ca:53:4a:e0:47:
         cf:69:9b:01:0d:01:a6:ba:90:44:19:89:e2:69:d8:ae:42:2d:
         07:51:5b:7e:8e:7d:c4:ae:1a:8e:0e:e6:be:8d:42:a9:16:ca:
         44:34:88:0b:be:fd:14:31:fe:cb:b5:05:c8:f3:58:69:55:be:
         df:5e:38:07:d2:75:73:8b:eb:64:3d:00:89:fb:fa:eb:74:66:
         02:08:d5:3f:a2:52:86:6f:99:81:cb:55:8d:67:ce:6b:99:4c:
         79:5d:78:de:4e:b7:e9:20:dd:20:e3:1f:3f:cb:b9:ce:ca:b8:
         07:0f:ab:94:e3:03:de:e2:8e:8d:a4:dc:0c:7b:ee:f5:71:bb:
         0a:dd:3f:f3:cb:05:e2:c2:46:41:69:12:85:88:a9:d7:c3:92:
         98:76:db:2d:9c:7c:7d:89:29:d6:0b:14:e6:5f:e7:e3:b1:8b:
         77:41:0f:6e:3b:45:db:4e:7c:69:44:74:12:47:27:f2:d4:4a:
         3a:96:0b:42:d3:08:56:7c:8b:62:7e:4e:76:0d:f6:44:85:d7:
         d3:7f:df:54:f3:8f:5a:3e:d5:ab:91:41:bb:44:4a:d1:aa:39:
         36:1b:bb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:27:15 2026 by rpki-client